
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b35577d6-3a7d-3701-b286-73353987be3a.roa
File: b35577d6-3a7d-3701-b286-73353987be3a.roa (raw, json)
Hash identifier: mrmMOVwT2rZ0XezRsGsPPAeSVSFCuoWIwg5zKEqDoCU=
Subject key identifier: 0A:00:A0:4D:42:27:59:22:1A:27:0E:A0:BE:4F:CF:EF:79:F0:B0:22
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584EFE121AD6C4B6CB2E3CCAFE00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b35577d6-3a7d-3701-b286-73353987be3a.roa
Signing time: Sat 29 Aug 2026 01:00:12 +0000
ROA not before: Sat 29 Aug 2026 01:00:12 +0000
ROA not after: Fri 27 Nov 2026 02:00:12 +0000
asID: 834
IP address blocks: 65.86.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fe:12:1a:d6:c4:b6:cb:2e:3c:ca:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 29 01:00:12 2026 GMT
Not After : Nov 27 02:00:12 2026 GMT
Subject: CN=e7bca5b9-7d9a-4659-bc29-3adbdb2d2bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:f2:5e:df:9b:cc:a1:15:77:b6:7b:de:1b:
0e:7d:56:23:62:26:d1:7a:9a:16:6b:5b:b2:d5:9b:
b8:1b:07:b0:80:90:ee:ee:a7:9f:8d:4b:84:3b:84:
f7:8e:9f:4e:dd:39:b8:15:80:a2:db:85:9d:6f:fd:
07:5d:1f:ec:3f:4e:ec:f3:1f:ed:6a:4c:2c:85:bb:
8f:9d:03:14:8b:3d:c5:fb:13:91:8b:41:5b:d8:54:
bc:41:47:9a:00:99:1c:9d:9a:e8:92:f7:54:d9:b5:
9a:53:6e:a9:21:ce:4f:5d:a5:ba:2f:4e:87:37:7a:
e2:ad:0e:c9:62:0d:53:5c:c4:2e:2f:68:26:3e:d7:
72:fd:94:9f:31:82:73:14:75:72:8d:e3:ad:49:06:
93:bb:57:b5:1e:b6:02:e0:67:41:8f:e8:99:ba:76:
e0:83:df:d2:d7:1b:31:e4:3b:03:e1:42:bb:59:b3:
00:6f:db:89:aa:5d:e6:39:c3:b8:3d:9b:89:bc:db:
6a:d2:28:86:2e:a9:be:ba:5c:57:4b:03:b8:f4:b4:
62:e0:f5:b9:9a:e7:72:33:07:76:f8:2b:87:ea:5e:
7f:a4:68:87:d8:e8:79:7a:dd:cd:b2:ff:35:0f:8b:
c5:14:63:d4:28:45:4c:2c:df:ac:a8:ca:c6:2b:d6:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:00:A0:4D:42:27:59:22:1A:27:0E:A0:BE:4F:CF:EF:79:F0:B0:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b35577d6-3a7d-3701-b286-73353987be3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
65.86.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:60:38:32:c2:49:8e:97:03:10:2d:c8:b0:36:62:a5:9d:1b:
95:1b:1b:70:31:1b:bc:c3:b6:ef:ce:bf:e7:b1:2e:fe:40:90:
00:93:c1:e9:11:aa:90:8c:bd:19:09:14:7a:62:aa:ba:88:3e:
0b:a8:89:02:e5:3b:b8:66:cf:41:32:b0:45:28:27:82:88:7b:
e9:3d:62:19:df:30:67:e6:1c:91:9b:54:48:c9:39:66:b9:f0:
d8:4d:6f:34:3b:57:f3:73:99:d6:85:62:5d:b8:ee:80:7a:74:
85:66:a8:02:ef:16:80:34:1b:e4:93:d2:96:c1:60:58:15:f0:
e4:49:34:64:93:42:3c:e3:aa:d2:e6:2e:d5:90:78:e1:20:08:
76:51:20:4a:ab:c7:4a:17:19:7c:3d:0a:b7:ae:a5:88:0d:52:
34:b1:ce:f4:2a:19:6a:b2:fa:fc:da:85:0e:af:f5:59:13:f6:
a1:f0:05:0a:82:14:eb:7d:3b:90:a1:09:ec:36:20:b5:c1:0a:
8a:fa:06:db:b4:36:93:7d:28:01:37:9f:27:fe:37:57:6a:04:
01:0c:e9:ed:7a:0a:df:dc:4e:b0:e1:0d:78:fd:ef:69:9e:f9:
a7:42:30:1c:46:f2:b7:15:cc:49:3d:e2:6c:c1:77:d4:76:c3:
63:41:2f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:47:39 2026 by rpki-client