
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa
File: a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa (raw, json)
Hash identifier: HwYu3hg4vjc/t+R3YrmsKPkh7GaIUc6dst+Zi87TjN4=
Subject key identifier: 63:99:FC:60:71:4D:CF:4A:F5:0F:43:F1:C1:3C:F7:97:5D:B2:8E:01
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584DC135C7E797D1F8C123EBD800
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa
Signing time: Thu 07 May 2026 13:00:31 +0000
ROA not before: Thu 07 May 2026 13:00:31 +0000
ROA not after: Wed 05 Aug 2026 13:00:31 +0000
asID: 22652
IP address blocks: 208.88.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 10 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c1:35:c7:e7:97:d1:f8:c1:23:eb:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: May 7 13:00:31 2026 GMT
Not After : Aug 5 13:00:31 2026 GMT
Subject: CN=23bf77de-c578-408d-b153-04a3ae56dffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:a3:d7:51:5e:5e:84:05:94:9d:ac:9e:c6:
07:a1:4c:ed:fe:6e:d9:73:52:1a:36:0c:5a:10:47:
78:9c:00:4e:e8:b0:2c:6c:70:b4:44:ff:ff:6a:7a:
ff:90:88:22:51:3b:6c:c3:f3:a9:1b:a8:8a:ed:5d:
e7:04:24:a0:84:70:8e:86:8c:2f:35:ac:e4:1b:3f:
3e:4b:29:19:f9:e4:49:c1:0b:79:df:c8:f6:e7:3b:
df:43:f8:0e:e1:a1:9a:9a:61:72:97:00:bd:1e:ef:
72:9a:e5:27:a4:a8:db:b2:61:68:57:28:7d:28:db:
36:51:3c:c8:e1:ef:fa:30:80:a2:28:74:ec:0a:4a:
29:95:f7:88:b4:13:7a:ea:0e:d7:25:87:73:41:b5:
36:1e:88:ae:c1:67:f3:f7:37:0a:92:df:d2:97:5d:
6c:37:aa:8a:c0:63:b2:0d:29:78:c3:02:40:ac:8a:
dd:9c:e6:07:43:2d:c0:b9:f4:17:f6:6e:05:37:7e:
15:5a:8b:de:32:a3:4f:88:07:4b:9e:14:06:15:1c:
58:6f:18:33:2b:1c:86:53:b1:81:90:74:41:cd:b5:
53:b6:2a:81:b3:f9:a7:7c:b8:11:26:d4:f0:72:0e:
6f:20:71:d4:bf:57:5d:18:bf:03:08:f4:fb:c1:e7:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:99:FC:60:71:4D:CF:4A:F5:0F:43:F1:C1:3C:F7:97:5D:B2:8E:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:92:2e:43:0d:7f:2c:6f:19:19:42:a2:24:c0:79:90:c9:1e:
d8:80:ad:f3:4c:1e:62:0b:6f:35:f6:2d:a5:ab:75:d2:2e:c1:
c1:16:81:ed:a9:67:d5:41:b3:f0:41:a6:9e:76:ea:a0:6a:2e:
50:7d:e1:4a:4e:8b:ab:1c:1b:2e:27:1e:6f:d7:cc:64:5d:17:
fb:01:95:6b:98:61:6b:3a:80:4a:9a:d2:b5:69:d8:37:fc:81:
ce:45:05:58:c1:ff:cd:18:06:5f:a5:7a:f5:24:d4:3f:35:7d:
92:c8:65:44:6c:91:16:01:d2:bd:cd:e1:d6:cc:b9:90:26:0e:
b2:fb:d2:da:b1:15:54:dd:65:6e:7a:51:19:3c:68:e5:36:4d:
bd:fa:01:0e:81:4c:ba:6b:ad:da:04:79:53:1c:f8:17:fb:53:
fb:6e:80:78:e7:9c:2b:c8:bf:a3:1a:ab:41:73:70:3e:89:88:
c2:d5:00:12:39:62:11:e7:8f:96:15:c6:98:bb:88:5d:f1:d4:
99:7d:2e:65:e6:7b:77:01:76:87:f6:48:36:c6:43:75:97:c3:
7d:15:8c:76:cf:34:20:36:6f:75:f4:d0:a3:55:40:8b:45:6b:
6b:88:55:bb:38:1d:41:e4:a3:b3:c0:f3:48:e0:3a:b8:e8:d4:
b7:0e:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 19:27:44 2026 by rpki-client