
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ce448faf-eaf5-33d5-83aa-d7b4b794f492.roa
File: ce448faf-eaf5-33d5-83aa-d7b4b794f492.roa (raw, json)
Hash identifier: lZhb3RMi5QEsCE6Fz0o9LRoPSrPkBj/5pHE7Fjmd21Y=
Subject key identifier: 9F:9C:91:C2:F7:76:BA:39:3A:53:71:7B:BD:3E:03:AE:D8:40:53:D5
Certificate issuer: /CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
Certificate serial: 010D0C9F4328584F498A7995306D21F9FEACE080
Authority key identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ce448faf-eaf5-33d5-83aa-d7b4b794f492.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 32688
IP address blocks: 66.6.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8a:79:95:30:6d:21:f9:fe:ac:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=afe5a104-2efe-4ee8-8940-66e24ba0dab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:95:3a:1a:e0:ea:57:89:29:ac:be:2f:ae:
a8:76:15:52:22:38:6a:bc:cb:bc:9d:87:0c:97:75:
8e:48:11:72:18:dc:4e:32:2e:77:1e:3f:b2:7f:e6:
33:e8:b5:d9:9e:be:c0:bb:1c:d3:10:fd:56:ff:16:
23:ed:6b:6c:15:06:5f:46:a3:fd:39:24:58:1c:d3:
9f:9a:e4:b6:7e:c6:8d:5a:c8:58:32:61:86:d8:45:
1d:57:f8:8c:1e:8d:3d:58:9e:25:aa:32:a7:74:3d:
43:14:31:f0:6e:e2:a1:10:13:00:87:15:20:ed:04:
12:1f:f3:34:42:e8:22:30:87:3d:b2:68:cc:9a:a0:
e8:38:82:12:9c:52:93:3e:99:64:cc:ea:24:29:13:
f9:d0:1d:88:11:1c:a9:79:db:77:58:fb:bd:d0:e9:
c0:54:0c:a3:8e:f5:22:70:64:b5:06:90:91:21:7f:
fd:98:f5:18:49:ba:df:e2:94:d7:46:1e:9a:62:84:
5a:6e:f0:97:8b:f6:f1:e4:f4:d1:bf:37:45:a6:d7:
f2:85:36:e5:a2:d1:1e:a5:42:50:e5:5d:fb:84:3a:
ba:79:10:15:00:30:79:f5:b7:0f:88:27:4d:de:5e:
13:19:a4:5c:7d:8e:ea:3b:b7:7c:52:c5:68:e0:f5:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9C:91:C2:F7:76:BA:39:3A:53:71:7B:BD:3E:03:AE:D8:40:53:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ce448faf-eaf5-33d5-83aa-d7b4b794f492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl
X509v3 Authority Key Identifier:
keyid:F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
sbgp-ipAddrBlock: critical
IPv4:
66.6.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:ba:71:43:d0:84:d4:75:11:26:d6:c9:34:ee:6c:34:51:28:
47:b0:64:4c:0f:be:ce:1e:4a:73:0e:26:b5:f5:ab:de:b0:88:
e4:9b:36:77:93:a8:cc:85:98:3b:45:4a:d6:d0:05:3e:b5:b6:
c3:55:8d:5f:94:59:d8:7c:90:0c:76:be:7d:8e:c0:ee:24:45:
48:25:08:28:6d:b3:a1:25:da:ec:6b:d5:1f:6f:5e:43:37:e9:
98:5d:f9:c2:9b:81:da:11:a3:c0:69:f5:cc:51:1c:04:2d:5b:
77:c5:7d:cf:ed:fb:c3:15:50:2a:8c:47:7c:e3:b6:a4:ee:dd:
4b:a4:b4:77:69:07:1c:e3:e1:e6:ca:ef:1e:c2:63:55:b9:8f:
6e:e3:bd:ea:8d:e3:6f:fc:4f:2e:de:b6:dd:2e:03:69:88:e0:
9a:b6:68:c7:26:09:66:33:06:3e:90:31:d3:17:64:c9:10:53:
ea:34:16:be:4a:2d:0b:0d:c7:af:03:58:70:84:a6:99:d8:73:
1f:c1:95:a2:3c:c1:ff:d4:17:24:3a:fe:ed:28:54:68:3e:a0:
82:f8:2b:db:47:c0:b6:5c:7b:8c:81:5a:92:2e:c6:b6:f8:da:
7e:25:ac:a1:f8:36:9c:59:4d:e9:c4:31:84:51:af:a6:3b:0a:
54:fb:b5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:14:44 2026 by rpki-client