
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/83ee6b6f-44f2-30a8-8b87-259bc8643cc9.roa
File: 83ee6b6f-44f2-30a8-8b87-259bc8643cc9.roa (raw, json)
Hash identifier: B4/Uo5h5ZBqeRSpuGryWzI3Tt3O52ViqABpdSIlvM30=
Subject key identifier: 99:08:87:DA:05:0A:C6:D6:DC:01:6E:5C:B9:6D:D7:81:59:54:E0:C6
Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial: 010D0C9F4328584F49744A48B7E6E9052566C580
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/83ee6b6f-44f2-30a8-8b87-259bc8643cc9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 11096
IP address blocks: 108.59.21.0/24 maxlen: 32
108.59.24.0/24 maxlen: 32
108.59.25.0/24 maxlen: 31
108.59.26.0/24 maxlen: 31
108.59.27.0/24 maxlen: 31
108.59.28.0/24 maxlen: 31
108.59.29.0/24 maxlen: 31
108.59.30.0/24 maxlen: 31
108.59.31.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:4a:48:b7:e6:e9:05:25:66:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3c2b267b-9f9a-4da5-958d-c64ef456c086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7e:ce:88:ec:e8:d7:9d:82:d3:21:fe:cf:b2:
64:69:c3:06:fd:4d:80:3d:5a:92:d0:df:d2:8c:13:
1a:81:ed:e2:12:af:d0:f6:c7:9b:7c:6a:3c:0f:67:
95:58:8f:34:78:8d:ba:43:73:c7:4c:cc:46:a0:cb:
6e:dd:11:d2:8d:fc:6a:07:1d:2c:1c:a9:51:53:84:
da:44:c4:86:77:9e:f0:bf:ea:66:72:f2:29:e9:e4:
61:54:d2:ae:c8:ce:72:58:8c:8b:53:ba:69:6f:10:
99:50:3a:3b:55:b5:d0:af:20:df:e8:e5:30:ac:05:
b1:75:7f:42:50:cb:94:be:d1:b7:43:8a:ed:8b:8c:
8f:70:f5:34:bb:2e:50:6c:df:9f:d1:f2:aa:67:4e:
78:55:4a:f4:6c:48:78:b0:f1:a2:24:04:6b:cf:60:
47:c2:49:9a:75:c0:ec:18:64:c2:5a:9a:e2:3c:75:
33:5b:0d:3a:f7:6d:6f:5a:72:df:33:85:c0:a5:3c:
55:57:24:6e:0d:96:28:b5:ec:92:87:18:6a:57:58:
6f:0b:7d:64:6a:ff:5e:4f:21:47:2c:a8:70:95:ef:
94:10:cf:f3:cb:60:ef:4c:88:1c:e8:f4:12:5e:f5:
dd:a4:3e:e5:1c:a2:c4:3a:bd:c4:d8:b0:e1:2f:5b:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:08:87:DA:05:0A:C6:D6:DC:01:6E:5C:B9:6D:D7:81:59:54:E0:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/83ee6b6f-44f2-30a8-8b87-259bc8643cc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
X509v3 Authority Key Identifier:
keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.21.0/24
108.59.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:08:56:f4:5a:19:ac:81:04:9d:cf:64:3d:3d:56:7d:61:b5:
f0:d2:1c:95:97:0a:d0:9d:f2:ad:79:d2:c5:31:4b:db:0f:f2:
7e:27:90:22:0f:a5:5b:72:e3:f1:53:40:11:2f:02:b6:9f:83:
be:1d:80:f3:ea:bd:7b:c5:2a:03:99:c8:84:19:f7:b4:ba:8d:
e0:7a:81:a3:1e:f6:51:b5:5d:71:f1:2d:2c:2e:9e:30:16:2f:
6b:9d:93:e8:36:38:f7:25:e3:a6:e6:dc:25:f5:ac:6a:a4:9b:
82:84:d9:fc:21:6f:1e:c0:19:c7:42:02:e7:3a:56:3b:9b:06:
a0:80:bd:c7:c2:a3:36:df:2c:ff:95:02:cb:cb:18:1c:21:de:
ec:c1:37:10:17:7b:ec:41:73:9b:7b:fb:88:5e:9a:10:95:90:
63:06:45:f1:88:60:4f:27:ef:68:8b:8e:b6:37:82:e1:02:c9:
f2:4f:fa:4d:1e:0e:34:5e:6b:cb:4a:eb:0e:ae:5c:df:6e:b6:
91:f3:7f:df:85:e1:d1:07:df:aa:93:50:60:28:3f:ba:42:5f:
17:a3:ac:75:13:30:4d:f1:54:38:f1:03:02:8d:eb:f2:e9:62:
1f:be:27:d1:3d:54:a5:ba:d8:47:6e:ae:79:c2:d8:9a:5b:8b:
ac:96:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:37:41 2026 by rpki-client