
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa
File: a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa (raw, json)
Hash identifier: yLVFIU9AO7sVKF0Zjlp2m4zTBXj4IeukvCyGc+YH8L8=
Subject key identifier: 65:69:AC:D6:7F:5D:A3:EE:17:4F:A3:BB:FE:EF:2C:88:F7:73:07:2F
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584DBFD07BD6A67C86681DF4B500
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa
Signing time: Thu 07 May 2026 01:00:23 +0000
ROA not before: Thu 07 May 2026 01:00:23 +0000
ROA not after: Wed 05 Aug 2026 01:00:23 +0000
asID: 16417
IP address blocks: 216.71.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bf:d0:7b:d6:a6:7c:86:68:1d:f4:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: May 7 01:00:23 2026 GMT
Not After : Aug 5 01:00:23 2026 GMT
Subject: CN=459fbfca-62ef-4caf-856d-7ceb9aa051bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ad:01:0a:07:eb:e4:e2:5b:74:ec:03:9f:ab:
0f:33:4b:5a:05:7f:7f:6e:8b:ec:81:8c:d4:d6:e0:
d8:dc:21:88:37:4d:6f:e4:83:18:37:d6:af:3b:b6:
6f:c6:9c:48:ff:94:f7:19:e0:38:8f:08:f0:90:e4:
5e:91:04:ff:5a:a3:0e:7b:48:20:92:94:4b:a7:b3:
36:e9:fa:c5:c8:09:9d:a7:cc:2f:27:ad:91:0c:1d:
08:45:28:36:d1:46:a8:b8:d3:2c:1a:8f:0e:a0:ea:
05:0f:b9:7c:8b:db:8b:d9:f8:1b:ed:0e:0f:9a:3f:
81:bf:69:b1:28:21:53:41:ba:b3:76:8f:4f:a8:d0:
3b:7f:8f:a1:82:40:98:98:90:5d:69:c8:15:d8:d2:
65:13:6a:c6:5b:e6:e9:b2:9b:40:6f:ca:11:16:2e:
ef:fb:6a:d9:4b:34:8e:31:d6:30:c8:cd:4e:b0:24:
c4:aa:b7:ca:e4:c4:62:e5:c6:14:de:c1:31:bd:bd:
3d:f7:af:97:fc:d8:7a:69:a0:30:6e:30:f8:6f:ca:
8e:44:cc:9c:31:91:12:52:8b:21:36:d3:ee:ca:59:
8a:e3:dc:d0:93:4b:7d:9d:b8:34:e9:99:28:3d:44:
c6:73:9c:5c:89:d4:36:ed:7e:29:6d:5b:87:ba:f1:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:69:AC:D6:7F:5D:A3:EE:17:4F:A3:BB:FE:EF:2C:88:F7:73:07:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.71.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:e8:97:9a:63:c7:5d:37:14:cb:37:1d:1e:16:17:81:ec:02:
84:27:cf:ce:8d:4e:f9:ed:83:89:35:d0:25:d0:c5:19:0b:a3:
65:30:5a:af:ed:ed:95:fb:a6:ed:f9:42:d9:6b:29:24:74:ce:
98:ad:98:2a:1b:04:e8:7a:69:0d:fa:44:b3:fc:8e:b1:11:b9:
36:b5:3b:ae:6f:a5:75:d3:dc:71:c8:68:e7:9e:41:41:e0:dc:
96:27:0c:8b:2b:77:76:6b:f0:d9:34:23:dd:9e:b6:a2:eb:9d:
70:1a:6c:58:14:d7:5f:3c:c0:2f:83:d1:79:37:7d:16:a0:c9:
60:74:58:9e:3f:85:45:60:a2:9a:0e:32:36:d6:33:89:2c:58:
f3:11:91:b5:e7:5f:9c:4c:df:1a:a3:19:f2:2b:c5:00:e4:b5:
1a:dc:a5:ad:3e:01:f5:51:2b:7f:ed:36:58:5e:b0:48:85:06:
04:9c:1b:7e:62:3c:df:03:0a:48:27:ed:d5:d5:21:38:ad:4b:
24:81:8d:5f:c0:4e:48:c4:03:25:b5:62:a0:98:a1:65:28:70:
3c:b3:b3:06:cb:e7:19:20:1a:a8:91:96:33:4b:76:39:7d:f9:
c9:1a:1f:49:2e:71:8d:8e:53:09:86:98:bf:93:95:94:06:92:
cd:c9:c9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:53:57 2026 by rpki-client