
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa
File: 0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa (raw, json)
Hash identifier: mfamg2SH5klapbUFKv+fp0BdwSOYmKsYt23DSSZ5D10=
Subject key identifier: 3E:B2:CC:86:57:55:DE:8D:66:F0:AD:AF:26:F9:FC:A5:79:5C:F3:7C
Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Certificate serial: 010D0C9F4328584EED520597905B31122ECEA700
Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 398823
IP address blocks: 104.219.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:05:97:90:5b:31:12:2e:ce:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=8d514331-cfb0-42b8-b347-0bfca1c1cce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:20:3e:94:b7:98:7a:dd:29:96:e9:22:66:
e6:1c:01:f0:f9:6f:7b:c8:a0:bb:01:f5:85:3e:90:
73:55:b1:93:61:dd:95:18:d5:d6:09:1e:bd:c2:57:
8a:7f:21:9e:e4:0b:98:48:6f:11:c4:0d:24:f8:93:
d3:77:ee:f8:6a:03:b8:98:2a:fa:de:ff:fb:f1:3d:
d3:36:22:fe:aa:ca:1d:6d:bc:14:13:c2:81:b5:6e:
81:05:71:f9:ed:b2:dd:48:70:a2:4c:20:cf:28:a4:
d0:db:86:44:c4:0b:71:a3:dc:6f:19:33:e1:de:63:
e8:5c:1b:52:ad:21:81:f7:54:a0:c7:86:d5:60:7b:
a2:d2:f2:e5:6e:d0:ec:7e:aa:c4:7b:e6:be:34:51:
b5:29:dd:c7:e5:14:93:28:21:cc:f2:be:2b:d6:6a:
fb:0e:ea:70:04:b4:af:bf:7f:56:02:ad:90:73:49:
b5:e1:82:ac:bc:f5:60:1c:72:01:3a:04:36:41:7d:
c1:60:11:bf:02:69:20:7e:17:c0:6f:95:86:39:01:
30:22:d1:5c:09:34:62:bd:ea:01:4e:8e:32:74:25:
28:22:58:30:60:f9:d3:79:eb:46:17:9b:b8:4e:67:
eb:7a:ab:c0:b0:c5:38:86:2a:4c:92:3d:e5:ec:43:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:CC:86:57:55:DE:8D:66:F0:AD:AF:26:F9:FC:A5:79:5C:F3:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl
X509v3 Authority Key Identifier:
keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:a0:f7:f5:a2:10:ec:84:2b:b9:be:36:7f:bf:1a:24:6d:6c:
9d:d3:95:db:bc:66:8c:cc:9f:43:7b:b6:29:12:80:43:b9:a6:
99:60:69:be:1b:62:29:73:37:64:45:84:fc:1d:8f:4b:18:91:
8c:26:a3:84:16:49:d3:66:99:d6:84:28:9c:aa:db:49:5e:5b:
35:84:a1:d6:66:c0:70:c9:30:e7:66:fc:c9:15:23:62:51:4a:
00:26:1a:42:d5:6c:bc:f7:27:08:18:dc:ac:d9:23:bc:0e:1a:
d5:ce:c2:cc:4e:26:1f:ff:31:de:da:29:0e:eb:95:fb:8f:f5:
d3:9d:16:99:46:06:07:6f:8e:46:c9:e4:34:30:53:a3:a6:72:
81:6f:52:d3:75:f7:6f:85:61:b2:b9:e2:38:0c:86:6a:c2:3a:
53:9b:a3:c8:ea:b7:4d:4c:74:d6:dd:f1:c4:d1:42:1e:26:03:
ed:9e:95:6e:c7:f0:f6:a1:3a:4c:ce:bc:a1:02:63:40:0f:9d:
3c:c5:03:e2:ec:34:fd:02:f0:ee:69:53:ab:88:a6:36:f0:20:
17:e7:ee:c0:6e:97:ea:be:aa:11:5a:6e:1f:c9:42:21:e6:ce:
da:d4:9b:38:56:4a:01:25:a0:9a:30:f8:63:3c:03:e8:07:93:
ed:74:14:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:29:41 2026 by rpki-client