
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
File: 8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa (raw, json)
Hash identifier: Vp7nEHe9GphQZmYZqVS7EAq0NFWCuyvWRmX3MOv1M4g=
Subject key identifier: 94:B0:5C:DC:B5:CE:5B:9F:51:8D:B9:90:FD:E3:36:D9:B9:4A:7B:FE
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F4328584C9ACC4770666924AE23F3BE80
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
Signing time: Thu 22 Jan 2026 02:00:31 +0000
ROA not before: Thu 22 Jan 2026 02:00:31 +0000
ROA not after: Wed 22 Apr 2026 01:00:31 +0000
asID: 21663
IP address blocks: 68.71.224.0/24 maxlen: 24
68.71.225.0/24 maxlen: 24
68.71.226.0/24 maxlen: 24
68.71.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:9a:cc:47:70:66:69:24:ae:23:f3:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Jan 22 02:00:31 2026 GMT
Not After : Apr 22 01:00:31 2026 GMT
Subject: CN=8b00d6fd-34af-4465-b5e7-ab58a3f3fff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:86:54:5d:14:8b:93:f3:a2:e1:8b:b4:e5:
aa:95:a5:8b:a4:02:17:1c:fb:d3:2b:24:e2:48:d9:
82:76:6e:24:6d:3a:a4:15:f8:01:e8:3d:f7:2e:c6:
51:18:c2:71:26:b7:03:59:23:73:46:e2:94:1a:8d:
f6:74:6f:35:f0:13:05:3b:c8:99:2f:7c:64:29:f4:
75:a5:86:02:44:90:1c:09:32:6f:13:4e:0d:bc:fa:
a4:d2:aa:38:80:17:b5:e7:be:50:90:62:5a:6a:e9:
83:59:95:ad:87:c3:f2:ea:30:3f:71:2b:aa:0e:35:
da:65:99:6d:b3:78:e1:dd:fa:cd:11:77:84:30:21:
7e:ee:75:2c:a0:0d:6f:27:71:e9:f5:38:d4:73:02:
77:fe:a4:8c:56:53:52:34:40:0b:8a:b3:e0:90:fe:
66:01:1d:d5:54:0f:c1:49:d3:1d:6f:c7:a4:fc:72:
d4:4e:52:51:61:e3:2a:b0:05:bf:b0:b9:83:87:c6:
77:8d:48:fb:70:89:7e:9f:51:fc:fb:cf:12:46:78:
3e:56:bb:05:58:15:89:66:e7:e1:7f:02:5b:05:8f:
34:f4:6e:01:61:3e:56:d4:bc:ac:32:be:bd:00:8e:
f2:f3:2d:b2:54:2f:06:56:08:fe:54:ba:c2:c4:43:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B0:5C:DC:B5:CE:5B:9F:51:8D:B9:90:FD:E3:36:D9:B9:4A:7B:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:1f:a7:d2:72:52:a6:1b:e7:b5:58:94:7b:96:33:1d:ab:37:
f2:7a:30:a1:d1:83:ea:c4:77:0a:7f:6d:11:78:e8:44:86:20:
3c:55:91:19:46:06:3d:9b:47:d0:97:3e:1a:90:b2:d5:9a:e2:
56:9b:98:fd:44:02:e5:e7:86:7c:30:e7:64:da:66:f2:bb:56:
54:4a:0c:48:62:ac:f8:0f:a7:ab:88:aa:f4:8a:46:1d:7a:ae:
6b:df:d9:68:c5:10:84:ca:6b:c7:e0:98:b8:51:8b:df:ee:d8:
8e:20:fc:9b:2e:1b:6c:18:9c:32:c0:df:58:85:f6:15:b8:bd:
10:bc:7b:6a:36:75:75:14:65:b6:5c:50:9c:51:9d:96:3e:ba:
75:b2:c5:8f:0a:a2:f1:29:f5:9b:67:f0:8b:fd:a2:9a:e9:da:
52:26:16:6a:30:9a:fc:cb:25:4d:79:af:03:ab:29:50:b7:81:
cb:e6:38:1d:4c:22:61:55:b3:66:ac:d3:2e:9c:9f:f8:dd:0c:
00:a9:f3:a9:1f:c2:28:60:c0:1c:ec:5e:78:b9:42:5b:cc:1f:
fa:10:83:dd:17:6d:ea:10:2e:93:61:ea:82:38:e2:bf:7c:12:
09:81:a4:e5:ac:85:67:26:9b:17:21:ba:e3:27:0c:59:dc:20:
7b:49:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:25:49 2026 by rpki-client