
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa
File: a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa (raw, json)
Hash identifier: w4Gl5grHt+ZoXEjWsR307mwqx1C+CzVMwLHvboPttJM=
Subject key identifier: 49:58:97:B7:01:4C:2C:F5:37:B6:A5:4D:A7:81:F9:CD:5C:F2:24:35
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F4328584E4AEF31E542F55E3D6F96E680
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 14618
IP address blocks: 45.42.136.0/24 maxlen: 24
45.42.137.0/24 maxlen: 24
45.42.138.0/24 maxlen: 24
45.42.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:31:e5:42:f5:5e:3d:6f:96:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=82605afe-8272-46e1-ae78-6ad6949399da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:c5:b4:0b:f7:6f:83:9a:35:51:4e:3f:5a:
50:ea:c0:3f:20:aa:3e:9a:5e:9a:f4:bd:c2:60:aa:
71:12:44:09:9a:84:e1:5d:5c:21:f9:96:50:ab:37:
3b:4e:30:51:26:6a:a3:f5:5d:b0:15:a8:6c:4d:4c:
6f:bb:66:8b:7e:08:f8:aa:a7:0a:ff:fc:65:56:55:
28:88:5b:68:9d:af:40:2f:b3:f9:eb:61:a3:6c:71:
50:67:a9:22:d3:8e:3f:9a:2c:e2:8d:63:4b:9b:ca:
5a:a0:8d:80:3c:ec:63:07:48:f8:d7:38:0b:5b:2f:
eb:45:28:d5:95:83:5c:db:ba:0f:3d:77:6e:f2:26:
6e:4d:4b:8d:f7:8f:6e:5a:17:d6:1d:7d:1c:ed:0c:
46:8b:4b:67:c6:83:2f:6b:4d:02:a8:b8:2f:0e:c3:
82:b0:a5:74:33:f3:33:da:69:b9:83:73:09:ef:08:
10:96:dc:0d:f8:f5:35:d9:99:7f:5f:9b:5c:91:d7:
d0:0c:bd:4c:91:94:66:93:37:ff:e9:dd:83:01:8f:
51:22:54:20:e1:15:a2:7c:ae:52:0b:d2:7c:1c:f6:
17:88:63:60:a9:55:4f:88:b1:92:77:bc:9b:6e:d1:
26:73:3e:80:e7:0c:eb:ef:3f:71:6a:2f:f3:ed:86:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:58:97:B7:01:4C:2C:F5:37:B6:A5:4D:A7:81:F9:CD:5C:F2:24:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/a0e9f1ad-89ec-3b41-a12c-8832a4094045.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:df:c5:e2:21:da:b7:b3:d2:48:27:04:8e:26:ea:75:5b:f9:
84:70:71:47:82:a5:d8:5d:b3:a6:73:11:ab:a3:11:f3:97:10:
b7:c9:10:9b:5b:42:fb:46:87:fd:c7:b4:57:4a:78:67:91:b9:
81:33:2e:03:bf:2f:59:f3:cc:f5:48:a6:88:de:cc:1f:43:5d:
03:a0:7c:77:68:96:a9:3e:ac:d4:79:5b:12:54:c4:f6:6c:21:
3b:ae:b5:46:5f:46:83:27:ee:90:f3:8c:07:21:82:b7:42:6f:
a1:ba:e1:b3:86:2a:fe:42:9b:43:43:dd:17:8e:96:ff:94:b3:
c1:5d:d6:6a:26:0b:f5:22:0b:17:62:61:38:31:a6:0c:80:bd:
e9:60:80:85:82:ef:d7:3a:44:92:40:a1:3d:33:c5:e6:18:e2:
b6:fe:88:e9:0a:34:4b:c6:08:7a:7b:91:83:05:84:d8:9b:b4:
e5:2d:cd:06:e2:65:f0:9b:c8:31:68:48:55:55:ce:26:4f:e1:
1e:64:06:f8:99:83:39:32:a6:b8:c2:dc:5f:c5:a7:32:b7:b7:
a1:74:01:e3:5e:65:81:58:03:6f:41:82:fe:9f:4d:a5:c2:d2:
24:db:ff:66:47:75:e6:e2:a3:d4:ea:ab:de:54:b8:56:4c:5f:
e9:56:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:53:52 2026 by rpki-client