
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
File: a665e37a-2264-3b19-b8a4-ae270c10d73a.roa (raw, json)
Hash identifier: rSW9ExE05UOh/BSdQGd/ExHd+SONNziPHie4wR3UYQE=
Subject key identifier: 14:70:48:5A:A8:C3:63:15:78:C5:16:A9:13:4A:C6:69:29:B5:8A:33
Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial: 010D0C9F4328584C93D1B78A23F28181C82E9F00
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
Signing time: Mon 19 Jan 2026 14:00:38 +0000
ROA not before: Mon 19 Jan 2026 14:00:38 +0000
ROA not after: Sun 19 Apr 2026 13:00:38 +0000
asID: 3565
IP address blocks: 208.68.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Feb 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:93:d1:b7:8a:23:f2:81:81:c8:2e:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
Validity
Not Before: Jan 19 14:00:38 2026 GMT
Not After : Apr 19 13:00:38 2026 GMT
Subject: CN=065bb6b3-2ead-4ce3-8d32-3bdbcd7c429c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:1a:1e:ee:d4:ab:97:cd:44:32:28:aa:9d:
89:2e:d2:8d:60:a2:f5:25:5a:ca:54:38:db:95:1a:
51:ad:5e:fd:a7:f0:af:10:7f:93:fa:92:63:f2:e0:
77:f7:49:42:ad:33:9d:b9:b9:4c:29:c9:9d:b7:a2:
41:03:05:1b:4e:38:b9:9f:01:b8:02:8d:97:f3:21:
11:e6:96:e7:40:90:8d:95:76:1e:3c:68:77:fe:d2:
98:36:79:b2:c6:eb:86:0e:0b:24:a2:cc:14:1d:0d:
2d:33:65:b1:0f:64:96:21:57:bb:a1:c6:9b:84:3b:
6d:b2:63:56:fa:25:66:04:00:a9:07:ea:58:f9:57:
da:dc:ec:07:a8:9a:8c:10:c8:69:07:48:af:40:aa:
b3:0f:b4:d5:3d:fe:b7:c8:2a:dd:74:8d:db:66:c6:
60:03:a8:47:9d:d6:a3:84:dc:56:31:5f:6c:a7:8e:
37:34:f6:32:28:c9:1f:60:63:7f:73:6a:9d:b3:be:
8b:af:4b:9e:03:97:cd:8b:68:0f:bc:11:92:ba:47:
e1:78:5a:20:e4:03:dd:8e:62:6a:b0:41:52:ec:e1:
50:19:dc:63:69:15:02:84:f1:39:84:e2:52:3a:9f:
a2:5d:a7:73:3a:83:39:de:69:81:9e:9f:6c:07:8b:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:70:48:5A:A8:C3:63:15:78:C5:16:A9:13:4A:C6:69:29:B5:8A:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
X509v3 Authority Key Identifier:
keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:29:89:73:7c:db:52:ff:c9:80:46:25:be:95:d8:f9:1a:03:
a7:a4:e3:4e:9d:c1:0e:42:e2:5c:d3:70:c6:eb:00:00:52:fb:
d2:aa:23:e7:8f:72:d5:f3:fa:a2:ec:5a:0e:90:32:41:9f:c0:
a7:a3:bb:11:5f:e4:e3:11:8e:7c:2c:15:ca:14:9f:bf:3b:b7:
e0:4d:cd:ef:ff:66:75:ca:a3:84:53:83:28:dc:f9:17:b2:8a:
c8:79:79:4d:7e:a3:9f:52:fb:b0:ca:87:05:0f:1d:bb:ad:19:
08:fb:60:a6:34:1c:46:f2:e7:3d:73:10:ac:86:79:0e:48:e8:
dd:0c:bf:94:2f:cd:2f:eb:67:eb:01:52:55:88:c7:5d:c0:be:
00:7d:80:d2:e7:ab:d3:76:52:80:f9:24:47:da:f5:35:68:36:
40:08:80:97:3e:ed:00:7d:b3:7a:5e:d0:5f:36:df:7e:a6:d4:
c0:7d:8f:75:4d:90:be:18:57:3d:98:8f:3b:90:78:01:2c:28:
18:d4:9a:c6:dc:51:ed:ee:2c:82:b4:75:ca:70:38:59:5b:70:
de:10:25:a4:ad:f7:b4:17:00:6a:f5:07:01:93:7a:34:88:bc:
4f:2e:16:b5:97:aa:8f:16:e6:56:25:3d:22:89:ed:b5:07:16:
5d:b0:45:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:07:48 2026 by rpki-client