
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa
File: bbec8323-0391-336b-8a6c-269e4d8a1f32.roa (raw, json)
Hash identifier: UesRZYC/pMLpL5j7lJJelMCzKWqOlFYhXlbjV+iB6Xw=
Subject key identifier: BF:F4:A2:EE:53:40:EA:2E:76:A9:1B:48:36:18:60:68:E8:4D:A2:19
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F4328584E815F98D762F983CF7326FB80
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa
Signing time: Wed 15 Jul 2026 09:00:13 +0000
ROA not before: Wed 15 Jul 2026 09:00:13 +0000
ROA not after: Tue 13 Oct 2026 09:00:13 +0000
asID: 2152
IP address blocks: 198.189.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:81:5f:98:d7:62:f9:83:cf:73:26:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Jul 15 09:00:13 2026 GMT
Not After : Oct 13 09:00:13 2026 GMT
Subject: CN=8254585d-c9e7-46d9-bbba-efb263766430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:2e:f6:83:3b:dc:e1:41:99:ee:35:08:df:
2c:1e:99:ae:b4:f6:47:b4:c4:c8:ad:d5:be:3b:0b:
60:a0:6d:08:e1:95:84:7e:30:91:e1:bd:b1:f4:4d:
f6:e3:8d:c9:0b:6a:fc:9f:6c:7c:42:ea:0f:12:ec:
61:da:68:ab:fa:95:7c:e4:a5:99:01:02:0d:ab:2c:
f7:61:f0:35:68:75:0e:d7:43:3a:3b:1f:ce:0a:75:
d3:ce:54:1e:8f:12:d6:04:39:95:2b:f5:87:a7:d8:
93:0f:cb:11:8f:10:c1:94:f5:ed:29:a3:4b:f1:0c:
09:71:05:76:9e:26:fa:18:af:84:c8:0d:5f:d3:97:
ab:34:a5:56:94:d5:dc:8d:59:57:a3:d7:ef:9e:62:
93:44:ae:8c:31:f5:db:44:d6:ae:f6:05:5d:92:bd:
53:b5:11:6e:7d:1a:e8:95:57:c1:94:0b:dc:20:d1:
28:d7:94:9b:16:6c:c5:99:1b:d2:58:43:2f:3a:6c:
b5:3b:54:31:e5:9f:09:71:5b:cf:89:d0:f9:37:69:
a2:fb:35:15:7b:bf:de:ca:a0:6b:6d:28:13:9e:b0:
9c:9a:05:5e:d3:cf:b9:6a:b0:31:57:64:d3:ec:e1:
75:b7:93:57:b4:a9:15:5c:05:55:61:c6:c0:34:3a:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F4:A2:EE:53:40:EA:2E:76:A9:1B:48:36:18:60:68:E8:4D:A2:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
198.189.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:7d:8d:04:59:0c:be:58:75:88:3f:06:6e:84:83:fb:51:1f:
5a:b8:fa:33:de:61:a5:f5:2e:4e:3f:e2:15:22:1e:05:ee:c0:
10:63:e5:d7:b0:c6:b2:a2:8e:20:0b:7d:d5:eb:10:f6:e2:e8:
2e:51:95:9f:09:9b:7d:9e:e3:73:b4:98:71:2f:b3:25:b8:2e:
59:83:46:32:80:8d:49:02:49:17:2d:fa:41:e7:1a:34:d9:24:
94:82:81:d9:00:67:8d:45:7e:6d:dc:3e:42:08:c7:20:25:36:
1f:4d:f3:0b:e5:e2:48:24:d9:dd:82:4e:07:78:65:7f:e3:8f:
5c:aa:b9:7e:bd:d1:ad:27:1b:77:b8:92:de:76:92:4e:51:36:
4a:50:cd:50:08:61:a3:a2:05:78:6a:90:aa:b8:d7:e7:b2:8d:
26:e2:f1:42:62:53:5c:83:82:33:b9:f3:5d:7d:96:6a:15:f6:
72:00:ce:3d:61:4b:9b:21:80:61:a9:5b:9d:1d:ee:2e:6b:12:
ff:18:3c:48:0d:3c:94:97:f8:06:26:30:0f:f5:d5:45:6b:e3:
45:6e:eb:4e:1f:37:c5:20:3a:58:6d:b9:71:ce:c6:f7:03:80:
85:ad:63:d8:68:c0:b9:82:75:05:b3:7e:00:44:3d:a1:0c:1c:
8c:e4:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:47:13 2026 by rpki-client