
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/7e7ede58-eedf-36b1-b576-04d1f580f265.roa
File: 7e7ede58-eedf-36b1-b576-04d1f580f265.roa (raw, json)
Hash identifier: cqsngSkX3o3CNNlnFAH3jicj6YLCLjZVvop28OgeTyE=
Subject key identifier: 79:DF:15:23:F3:F4:24:72:08:20:E5:11:69:2B:F8:4D:C4:4A:00:BA
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584F4C3DE42F01C572A45820AEC0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/7e7ede58-eedf-36b1-b576-04d1f580f265.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 1403
IP address blocks: 66.254.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:e4:2f:01:c5:72:a4:58:20:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=4d5cccd5-dd68-47a0-9a63-b5e404acc5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:76:81:d6:3c:d6:3b:1a:55:65:d0:e5:ce:
d8:d1:3b:d3:76:aa:4f:cb:5b:d2:28:39:66:6d:23:
32:55:23:70:e8:70:30:65:b2:0d:f0:88:e0:f3:55:
be:ce:f6:33:7b:77:98:47:ed:2c:f0:59:be:d7:01:
10:5d:14:a7:f7:28:c9:99:6d:ae:ab:5b:6d:df:2d:
38:bb:63:86:d1:d6:1f:72:ca:cf:32:05:21:1a:a6:
6d:33:77:69:e0:10:fb:be:af:95:78:a1:0b:04:db:
17:81:77:f2:3d:99:4d:8a:0a:dd:55:c6:1b:0f:b8:
da:c9:0d:cb:b5:33:b4:02:87:80:e3:0e:3d:f0:e8:
cd:50:4c:19:fe:58:95:94:cf:1b:39:e2:01:6f:cb:
b2:05:d0:f0:9a:64:90:50:85:fc:40:82:12:46:c8:
b0:1d:02:05:d7:b0:ab:ce:3c:f4:b6:91:bc:71:02:
bf:8b:d1:ba:e4:a2:de:ef:75:88:0c:5c:ee:fd:78:
a7:32:ea:99:1d:7c:82:3e:53:1d:48:20:71:7d:89:
c4:c6:27:79:67:11:54:be:3c:9b:a5:5a:ec:e6:07:
52:c7:4d:de:fd:95:b9:c8:76:3c:56:e6:a2:29:6e:
71:3b:3c:ec:67:e3:6e:1a:9c:dd:80:ca:24:10:45:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DF:15:23:F3:F4:24:72:08:20:E5:11:69:2B:F8:4D:C4:4A:00:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/7e7ede58-eedf-36b1-b576-04d1f580f265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
66.254.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:77:e9:0a:66:35:3c:10:c7:6b:09:6b:ce:93:71:9e:96:88:
bf:01:a9:52:11:08:56:d2:e6:79:70:ba:84:fd:44:43:01:12:
34:7e:58:46:19:98:eb:1a:82:fc:4b:47:57:46:ad:ce:e6:53:
6a:b5:76:dc:53:0e:0d:5f:ed:bc:cd:25:73:77:5d:28:d1:80:
f9:65:82:46:83:fe:40:16:84:de:8c:ec:87:04:2d:7b:6e:99:
b1:a7:22:7b:88:d9:16:43:37:a9:e7:e6:8b:45:e3:fa:30:f2:
c8:ae:db:2f:7c:64:a2:04:f0:15:ac:3c:ff:a9:66:a7:a3:8a:
9f:e3:fe:48:11:af:73:cb:d2:6e:a0:a4:c3:9f:38:a9:d9:e9:
5d:01:16:cb:56:36:e5:f9:37:ac:98:88:2f:02:b2:a7:28:f0:
a6:51:3d:37:3b:a2:7d:77:1e:38:d5:be:ee:8b:2b:2d:83:ae:
5c:5f:2f:f8:a9:65:e3:ef:93:86:5e:57:b9:c6:b2:bd:32:a9:
ba:c3:46:73:66:b9:4d:54:ba:bf:06:bd:4d:83:33:e6:66:a0:
02:76:64:61:83:5b:8b:ee:b4:31:1e:82:72:2e:56:31:30:3c:
12:ea:8f:42:c9:61:e4:9a:f3:fb:1e:b6:00:22:b4:31:28:03:
b5:48:ea:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:10:35 2026 by rpki-client