
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6d784b48-bbeb-43bc-8a93-d5de41ca0ada/c8da3b89-25d9-3b71-bb49-47b654c353bc.roa
File: c8da3b89-25d9-3b71-bb49-47b654c353bc.roa (raw, json)
Hash identifier: TsO1ykvHDTYxPGIhwZWQG15bxC7ND1R42EpG6l4DStc=
Subject key identifier: BF:F9:5E:BE:CF:34:45:06:25:1C:13:1C:02:47:D6:83:17:26:02:B0
Certificate issuer: /CN=6d784b48-bbeb-43bc-8a93-d5de41ca0ada
Certificate serial: 010D0C9F4328584FAB28D37FBA9FF5C180E3865C
Authority key identifier: 6F:46:4C:79:A8:6F:C0:46:84:88:F2:37:62:68:93:0E:CE:06:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6d784b48-bbeb-43bc-8a93-d5de41ca0ada.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6d784b48-bbeb-43bc-8a93-d5de41ca0ada/c8da3b89-25d9-3b71-bb49-47b654c353bc.roa
Signing time: Fri 30 Oct 2026 01:00:13 +0000
ROA not before: Fri 30 Oct 2026 01:00:13 +0000
ROA not after: Thu 28 Jan 2027 02:00:13 +0000
asID: 55120
IP address blocks: 152.86.16.0/20 maxlen: 24
216.245.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6d784b48-bbeb-43bc-8a93-d5de41ca0ada/6d784b48-bbeb-43bc-8a93-d5de41ca0ada.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6d784b48-bbeb-43bc-8a93-d5de41ca0ada/6d784b48-bbeb-43bc-8a93-d5de41ca0ada.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6d784b48-bbeb-43bc-8a93-d5de41ca0ada.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:ab:28:d3:7f:ba:9f:f5:c1:80:e3:86:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d784b48-bbeb-43bc-8a93-d5de41ca0ada
Validity
Not Before: Oct 30 01:00:13 2026 GMT
Not After : Jan 28 02:00:13 2027 GMT
Subject: CN=a2eb11cb-0cfb-4e8a-abaf-391b30e3ef79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:56:e4:98:2c:6f:37:0f:9c:29:dd:e2:50:
ae:97:88:aa:e5:01:72:f4:4e:79:f2:ce:63:a8:49:
ae:d9:24:4f:f4:90:05:b5:e4:75:50:b9:1a:20:8f:
9f:fd:00:55:4f:94:7a:d6:1c:d5:5b:53:32:b5:a4:
7a:c5:1f:f0:0b:1d:f9:08:c3:bd:9d:be:59:41:16:
4b:fd:7f:3e:fd:67:cb:aa:37:85:e4:d8:05:5e:7c:
19:76:1c:82:19:2c:f4:85:5d:58:66:29:7a:94:dd:
87:c3:61:54:44:7e:cd:42:5b:f9:63:d7:11:dd:82:
c4:38:47:c3:ec:9c:96:6b:bd:1a:8e:be:2f:fc:53:
af:9c:6d:e9:b0:ac:0f:f9:9a:f9:55:4f:69:d2:e6:
69:5b:7e:ca:a1:1f:70:79:03:ba:4e:b0:11:a2:f9:
94:c5:95:da:ed:2b:54:3f:13:1c:fe:d5:5c:80:c4:
b7:ae:89:b9:6b:63:6b:dd:ef:e7:dd:2c:3f:cd:23:
d5:ff:b3:91:54:fe:04:2d:c1:f5:76:09:db:e3:b4:
44:f4:38:3d:04:77:07:87:9b:c4:19:6d:66:b2:90:
ea:a4:fe:df:bd:28:cf:35:5c:a9:ac:d3:29:98:5c:
68:70:03:cc:66:fb:d5:1a:a8:3a:35:16:4e:ea:95:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F9:5E:BE:CF:34:45:06:25:1C:13:1C:02:47:D6:83:17:26:02:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6d784b48-bbeb-43bc-8a93-d5de41ca0ada/c8da3b89-25d9-3b71-bb49-47b654c353bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6d784b48-bbeb-43bc-8a93-d5de41ca0ada/6d784b48-bbeb-43bc-8a93-d5de41ca0ada.crl
X509v3 Authority Key Identifier:
keyid:6F:46:4C:79:A8:6F:C0:46:84:88:F2:37:62:68:93:0E:CE:06:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6d784b48-bbeb-43bc-8a93-d5de41ca0ada.cer
sbgp-ipAddrBlock: critical
IPv4:
152.86.16.0/20
216.245.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:48:50:eb:5b:15:72:3b:3f:05:d0:ed:79:9d:0b:d7:73:e9:
b4:39:6c:22:5c:e5:8e:f5:a0:e9:da:0b:08:d0:4e:f5:6d:f1:
7f:9a:97:94:40:45:96:1d:cb:05:09:ef:a6:13:a6:ca:4f:2e:
04:44:60:4c:6e:63:87:06:42:0d:83:a1:3d:1e:31:04:0f:1a:
42:5f:6c:c6:5e:6e:21:4a:8e:e5:4e:fb:c2:19:29:e4:cc:72:
1c:5d:dc:77:90:ac:bb:66:88:f0:26:4d:80:9d:f6:39:70:3d:
d6:bf:eb:5f:b5:e6:a7:fc:ef:04:ba:b1:78:a3:48:80:6c:2a:
7d:05:c4:4b:19:d1:c1:8f:c3:9a:9a:4b:02:06:9a:a9:58:7e:
4f:39:6e:ce:60:8b:83:4f:40:60:ec:3b:27:aa:fe:61:57:70:
84:af:39:98:17:d4:b6:46:2f:ad:57:9a:c8:15:6a:d7:53:9e:
fa:b6:52:fe:dc:38:4f:35:1c:36:28:4c:f1:0c:88:b0:44:6c:
b6:ee:02:00:8b:9d:99:df:d6:c5:a4:d6:71:41:95:56:22:03:
54:23:fb:a3:5c:8c:c3:b3:2a:9c:39:43:94:24:16:87:43:87:
23:5b:8d:3d:81:3b:50:fa:66:60:c7:0d:79:f2:39:09:90:c6:
b6:f5:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 08:23:52 2026 by rpki-client