
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6d191f16-cf5e-354f-a8c8-648506f1b5b8.roa
File: 6d191f16-cf5e-354f-a8c8-648506f1b5b8.roa (raw, json)
Hash identifier: SktU+0WMQm7MjmQd+QNng750/LhvqZO+ziSr+Kk34dw=
Subject key identifier: 11:64:78:89:D3:04:53:7E:F5:A2:0E:FF:0C:B1:16:1F:BF:F1:ED:6F
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584F506D5424D3864AC935C8BA40
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6d191f16-cf5e-354f-a8c8-648506f1b5b8.roa
Signing time: Sun 27 Sep 2026 13:00:12 +0000
ROA not before: Sun 27 Sep 2026 13:00:12 +0000
ROA not after: Sat 26 Dec 2026 14:00:12 +0000
asID: 11090
IP address blocks: 216.137.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:50:6d:54:24:d3:86:4a:c9:35:c8:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Sep 27 13:00:12 2026 GMT
Not After : Dec 26 14:00:12 2026 GMT
Subject: CN=f61c08d7-72f4-41fb-92ec-28f774b7ccfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:43:48:dd:2f:bc:f7:9c:63:e9:1a:b9:89:
b8:bc:e2:fe:4a:8e:1c:6f:5c:c1:6e:c6:b8:8f:b9:
e7:96:ff:e3:b6:5b:1f:41:57:f1:6f:8d:dc:d3:bf:
fa:ec:33:22:5b:02:cd:a7:56:00:32:31:1d:20:d8:
68:b3:1b:c2:ce:ed:6b:95:e9:87:09:73:e1:68:93:
a3:6e:b1:ab:fc:8f:98:cd:47:69:02:23:83:a5:ab:
b2:3e:51:b9:21:a5:ae:c8:98:22:89:db:a5:71:cc:
96:1a:f6:5e:dd:48:f4:72:68:0c:f4:98:2b:d9:22:
6a:24:69:79:38:41:fb:0c:27:80:f0:b8:2c:f8:39:
bc:8b:20:5c:6d:e1:17:d4:71:3e:9d:0e:f5:bd:6b:
d5:04:da:77:5c:c2:81:41:89:ab:45:7b:62:5d:e4:
32:51:10:19:62:16:1d:c0:c6:a5:19:67:43:de:02:
d5:c3:1e:52:c7:29:f6:f8:0f:05:67:c6:c6:b9:29:
77:22:9c:0d:bf:42:1e:11:eb:79:d6:13:b7:5b:f9:
c9:bd:c9:22:70:11:28:99:c5:8f:ac:86:ca:8b:f0:
96:7f:30:e1:3f:c3:cb:3d:41:e4:00:2f:c7:6f:c9:
be:56:b7:fa:f9:1b:c3:4a:4d:c7:66:92:32:cd:df:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:64:78:89:D3:04:53:7E:F5:A2:0E:FF:0C:B1:16:1F:BF:F1:ED:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6d191f16-cf5e-354f-a8c8-648506f1b5b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:4f:8f:d4:33:07:cd:70:c5:7b:0b:99:e4:1e:ca:58:64:c3:
1b:d6:7a:e7:ab:b4:8a:f2:2d:ba:18:c3:db:0d:52:13:0e:ed:
a7:ab:5d:52:63:1a:f3:23:92:ab:76:8f:be:6a:75:46:8f:8b:
ee:ae:fb:77:10:0e:51:3c:c9:57:56:ec:c2:53:6a:eb:27:33:
15:11:42:f4:79:22:9b:e5:ef:90:c3:3a:98:fb:e0:41:d6:de:
6e:5f:3e:27:91:f3:56:08:4f:54:56:50:53:eb:4b:67:ce:fe:
34:d7:bb:a6:9a:af:4e:f8:4f:ee:8d:47:7d:00:cb:56:d6:e3:
18:24:9b:df:78:5e:0f:f2:bc:c3:9d:11:7f:71:c4:72:e4:33:
24:63:e5:30:21:f0:d0:3b:4a:b7:42:a1:79:6b:f1:39:49:14:
db:6c:79:53:6d:52:e5:a3:66:e7:0b:e0:47:ea:07:c3:39:c8:
af:b2:34:db:6f:95:d8:55:ed:45:15:bd:36:89:d7:0b:17:50:
b1:2b:28:6e:e7:55:ec:35:cf:aa:e1:08:37:4d:05:d3:d9:ec:
d2:9c:2c:f6:fd:0f:8d:6f:51:52:4c:fd:0d:c8:90:9c:79:4a:
d1:5b:7a:27:21:56:c3:f6:f6:76:11:8c:8c:3d:10:88:38:b3:
a1:61:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:59:54 2026 by rpki-client