
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/fa8eb30f-23ef-3b93-aee9-b05edf5e3a90.roa
File: fa8eb30f-23ef-3b93-aee9-b05edf5e3a90.roa (raw, json)
Hash identifier: mbGNmcG5Xg3vf9h4TzrxJlELI34UoT/iQMc10+5ph9s=
Subject key identifier: 11:B6:CD:18:C1:57:00:E9:F0:6D:82:38:3E:2B:56:DD:94:91:2A:27
Certificate issuer: /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial: 010D0C9F4328584EF87CB375B8000C39BD8734C0
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/fa8eb30f-23ef-3b93-aee9-b05edf5e3a90.roa
Signing time: Thu 27 Aug 2026 01:00:12 +0000
ROA not before: Thu 27 Aug 2026 01:00:12 +0000
ROA not after: Wed 25 Nov 2026 02:00:12 +0000
asID: 812
IP address blocks: 66.209.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:7c:b3:75:b8:00:0c:39:bd:87:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Validity
Not Before: Aug 27 01:00:12 2026 GMT
Not After : Nov 25 02:00:12 2026 GMT
Subject: CN=aafe230c-c01f-41e7-9c56-a7a0f7d34e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:ed:ad:8d:f5:5f:d9:b6:65:7d:fe:cc:de:
fa:53:ae:07:1e:1f:b8:b5:d0:75:72:9d:ce:49:92:
1f:28:bd:03:9e:e4:2d:36:8b:d4:26:7a:4b:21:d8:
54:8e:67:7b:aa:36:db:54:57:65:66:87:22:52:40:
bb:03:e3:50:49:f7:98:a0:ea:72:d9:39:2e:06:b8:
2c:07:ea:70:4f:aa:af:50:76:40:d1:d1:13:b8:3d:
b5:5e:b9:ab:c5:b7:bc:df:18:31:53:ed:11:b1:bb:
9f:2f:79:a8:12:68:6a:54:1f:64:3a:87:d8:81:ac:
fb:f7:a8:c6:51:83:78:19:ea:08:1c:93:7e:3d:79:
68:7d:38:98:b8:21:fd:50:e9:83:df:d4:32:2a:62:
7f:70:9d:d5:f0:09:42:f5:b2:df:7d:29:e5:4c:f7:
e2:b2:b6:69:14:db:cb:f1:63:fb:1f:f1:43:a8:3f:
ad:b5:f8:1e:d6:a2:d2:f8:5d:f4:34:58:f5:29:68:
25:22:99:65:e5:f7:8d:db:d9:2c:1c:13:dc:2f:01:
9d:eb:7a:19:df:4e:a7:a7:b1:ea:a3:b4:0c:5a:bb:
19:32:92:72:4e:b3:5c:93:5f:9d:4a:c8:c9:0e:48:
07:e6:89:cb:52:51:53:aa:75:29:2f:80:de:14:af:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B6:CD:18:C1:57:00:E9:F0:6D:82:38:3E:2B:56:DD:94:91:2A:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/fa8eb30f-23ef-3b93-aee9-b05edf5e3a90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
X509v3 Authority Key Identifier:
keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
sbgp-ipAddrBlock: critical
IPv4:
66.209.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:9f:30:6c:f8:02:cf:3e:bd:c2:73:f2:0c:82:e3:fa:20:53:
68:ae:93:13:0c:4f:a6:02:fa:e2:39:0a:3f:8f:3d:38:30:93:
ef:ac:fe:75:25:b2:9f:bf:4c:17:c0:90:2a:a4:09:4a:f0:ef:
4a:d8:30:ad:9e:49:b2:8f:03:14:fb:dc:87:90:d0:9b:75:b7:
93:85:1b:1c:11:22:5d:0a:61:b6:44:74:01:03:c5:a7:e7:2b:
ea:2d:16:b5:89:ca:fb:6f:46:3c:f0:94:06:53:97:13:b9:d1:
37:34:e0:a1:9e:16:80:06:c4:bf:18:79:d4:fb:5d:4d:c9:13:
4e:e8:02:69:3d:4e:fe:ca:ca:d0:df:68:24:76:a9:c3:18:fc:
f3:b8:c5:38:03:a1:43:53:e3:40:f1:1e:fd:80:f6:00:b8:bc:
c7:21:0c:8b:15:d0:7a:97:32:e7:bb:97:d1:04:d3:35:b9:0d:
7e:ca:2a:63:fb:24:76:24:d6:9a:75:89:05:ca:58:07:43:c4:
53:be:40:2d:dc:90:0e:54:7a:06:ff:4e:e2:3e:9d:b3:96:ff:
cc:7d:f5:21:b8:84:03:e4:75:aa:04:48:7b:95:6b:4f:eb:69:
54:60:38:72:e3:ca:11:9e:dc:5d:e1:59:a6:98:56:5a:6b:59:
6a:d0:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:40 2026 by rpki-client