
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa
File: 9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa (raw, json)
Hash identifier: ctpSNygpFky5hOXgPuBHj6pBM4MufqODTthohwOLfHU=
Subject key identifier: 9C:64:1C:4F:73:83:4E:BB:72:4F:77:BB:BF:9D:91:D6:5E:F1:4B:2E
Certificate issuer: /CN=f488b7b9-ef6e-4097-9207-940bc62289f1
Certificate serial: 010D0C9F4328584F549DA6EC29634E64F2D62AA0
Authority key identifier: 3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 53889
IP address blocks: 66.235.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:a6:ec:29:63:4e:64:f2:d6:2a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f488b7b9-ef6e-4097-9207-940bc62289f1
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=4d452585-1152-4aa2-b496-6ccb4a744729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:cd:b0:0e:06:1a:0f:b7:23:11:67:30:30:
a3:38:f9:05:c7:13:45:cf:e6:7a:bf:d0:e1:41:d8:
0b:e2:d0:f9:54:3c:c8:ba:c6:5d:ca:20:8a:68:9e:
8b:78:c4:e3:68:b6:e4:e9:a0:05:36:0f:a9:37:0c:
45:12:36:13:6c:df:7d:48:10:65:e6:d2:46:dd:2c:
f2:18:63:e1:69:ae:da:6f:d8:c3:ad:5a:66:98:02:
1d:10:c4:b0:7b:0b:45:eb:26:df:21:64:18:67:7e:
6a:d2:ff:1f:a4:39:3b:db:25:15:3f:32:92:48:ea:
db:45:89:74:67:47:a1:83:79:61:78:ab:66:05:c6:
72:cc:e3:1f:04:52:dc:eb:78:b7:a8:4a:46:f7:52:
50:d1:3e:51:db:85:35:86:67:b5:4d:c2:b6:e3:6f:
8d:bd:ea:58:ed:f7:9a:5e:32:20:f5:41:e6:27:bd:
3a:ed:6a:f8:6f:02:98:54:bd:df:4a:35:1d:ff:5e:
02:02:be:6e:d1:14:48:df:45:ec:c1:3f:f8:12:1b:
16:2f:da:a5:c4:d4:62:8e:8f:29:24:cb:90:d4:b8:
8a:ae:c7:e5:21:9c:89:48:0e:d1:a1:09:b3:7b:d2:
c2:b3:fc:77:bf:a3:db:c1:89:89:47:95:2b:4a:38:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:1C:4F:73:83:4E:BB:72:4F:77:BB:BF:9D:91:D6:5E:F1:4B:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/9b457bac-9181-3ecc-8b8d-6fadd3032cd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl
X509v3 Authority Key Identifier:
keyid:3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer
sbgp-ipAddrBlock: critical
IPv4:
66.235.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c2:13:ad:33:9e:5d:fa:7b:23:68:5f:b3:a7:fd:78:ac:a5:
60:2e:93:55:4e:50:2e:2b:ab:50:ed:bb:24:40:dc:1d:49:63:
cf:04:54:35:61:3e:01:4d:1b:7e:56:4b:c1:b3:36:0e:bd:82:
9e:df:4c:eb:53:5b:1f:fb:61:44:39:dc:66:27:9f:7d:ec:4a:
c7:4e:52:4b:06:19:d4:19:a7:c4:0a:5b:4d:b1:24:5e:32:9c:
ab:d1:05:21:0f:16:ce:d9:dd:2c:e6:00:a8:8b:cc:e1:c7:2c:
d4:84:84:12:ef:83:7a:9a:d9:18:03:4a:51:d4:39:7d:2e:3e:
8b:10:1a:21:6a:27:72:a2:0f:39:fa:03:70:96:b3:3b:c8:ef:
95:96:6c:c3:80:7e:68:49:31:64:d4:35:10:d7:57:e9:05:f1:
75:49:fa:25:12:7c:6a:c4:b9:ef:42:72:7d:2a:36:ae:38:fb:
61:eb:59:bf:3a:67:79:61:9c:08:ac:b0:73:c8:4f:46:2c:f4:
2c:15:e5:14:1a:1d:58:b5:0a:fc:8e:f7:55:a3:4b:9e:f1:a1:
93:74:58:1e:72:68:86:43:99:d9:0d:f0:fd:2f:a0:f5:84:1b:
95:61:a7:00:03:33:90:af:d5:1e:a3:29:c9:66:df:0b:6e:67:
f7:57:58:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:34:12 2026 by rpki-client