
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/ec1b47d6-640d-3ce9-8480-4b6ced255fd3.roa
File: ec1b47d6-640d-3ce9-8480-4b6ced255fd3.roa (raw, json)
Hash identifier: YYxAF9Ipy12JfVSpY+OwmgrS4b8ZjO4wG7P7h0jh2G8=
Subject key identifier: 7E:5B:B5:04:24:87:A6:BA:AB:F8:B0:36:FE:5E:7D:13:97:37:5B:86
Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial: 010D0C9F4328584EFCACCBFE997079C556834380
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/ec1b47d6-640d-3ce9-8480-4b6ced255fd3.roa
Signing time: Fri 28 Aug 2026 13:00:12 +0000
ROA not before: Fri 28 Aug 2026 13:00:12 +0000
ROA not after: Thu 26 Nov 2026 14:00:12 +0000
asID: 8987
IP address blocks: 198.252.136.0/24 maxlen: 24
204.152.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fc:ac:cb:fe:99:70:79:c5:56:83:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
Validity
Not Before: Aug 28 13:00:12 2026 GMT
Not After : Nov 26 14:00:12 2026 GMT
Subject: CN=dcff5aab-c8f9-46dd-9c15-6f7ef145a8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:e2:4c:ad:b9:1b:0b:8f:53:3b:fe:16:31:
58:5c:31:a7:1f:5c:bb:7d:fa:5c:df:9f:66:66:f9:
e2:09:02:6e:6c:40:ae:c9:fd:43:82:4e:4c:bf:eb:
56:64:a5:ad:3d:13:70:60:c0:c9:d2:5e:27:71:b1:
5e:5d:77:47:a7:2b:05:65:66:94:fd:97:22:61:bb:
eb:fd:90:fe:ee:fd:1b:26:1c:96:4f:ea:66:33:22:
46:7a:15:ae:80:f5:86:87:d8:46:4a:e0:99:6f:86:
9a:95:af:16:af:da:2f:98:1d:0c:0c:d8:82:22:61:
85:a1:23:d0:c7:8f:53:c9:2f:2a:0b:1a:29:50:f4:
a9:15:92:3c:e2:f8:fc:b9:e6:5e:86:ec:5d:42:04:
58:59:77:92:1e:00:74:ad:5b:72:3f:d1:dd:33:ca:
55:e8:06:08:18:8b:f1:73:21:65:6f:84:d9:29:22:
69:31:8b:c2:b0:d4:41:18:18:ce:d4:a1:cb:4e:58:
6b:4d:4a:ca:62:95:ec:5d:e4:4e:f7:05:bc:2b:8c:
9a:54:54:ee:2c:82:2f:63:d7:c8:1c:d8:86:11:9f:
44:8b:ac:fe:d8:1e:cc:53:b7:c3:bf:f1:43:db:f7:
41:64:14:9c:38:a0:0a:80:b5:c3:87:db:22:ce:de:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:B5:04:24:87:A6:BA:AB:F8:B0:36:FE:5E:7D:13:97:37:5B:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/ec1b47d6-640d-3ce9-8480-4b6ced255fd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
X509v3 Authority Key Identifier:
keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
sbgp-ipAddrBlock: critical
IPv4:
198.252.136.0/24
204.152.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:8b:0f:25:01:ba:26:26:18:74:da:9e:cc:33:47:4a:7c:5d:
d3:06:76:13:2d:60:f5:2c:20:43:34:2a:c3:f0:de:d1:57:45:
d3:80:42:c1:0b:df:2e:e4:19:45:f2:d0:86:de:22:ad:52:7c:
e1:63:ed:c6:ec:8c:fa:9b:88:3e:82:72:29:47:eb:9c:37:e4:
a7:22:2b:ff:07:73:13:c1:ff:45:71:a5:0b:fe:77:28:44:ac:
38:84:d0:b1:62:e8:60:fb:fd:c7:b6:df:67:9a:fe:91:4d:9e:
d9:2e:4f:a0:39:23:ae:74:94:38:b4:af:10:a9:07:9e:26:15:
ae:6a:ba:42:b3:5b:ce:18:85:8e:8a:df:fe:db:15:00:95:5e:
db:9a:c5:ae:03:e1:af:44:2e:2d:dd:05:fd:12:43:4c:df:8e:
02:4e:33:1c:10:b1:ba:1f:7c:b5:92:e6:36:dd:44:44:6a:7c:
25:82:ee:68:ca:a8:4a:76:1c:6d:d0:98:77:48:31:cf:ce:1c:
73:0e:8f:47:5d:50:92:56:13:0c:14:7d:14:a8:61:83:ca:e7:
9b:e7:e4:96:77:df:86:58:00:5f:7e:07:b6:b9:51:0b:f7:eb:
c3:b4:29:a9:2c:cf:3c:5b:ad:fa:4a:0d:d7:2b:c8:40:8e:5c:
51:da:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:58:04 2026 by rpki-client