
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
File: 02fc3568-a294-3f7b-a040-efba2cd76305.roa (raw, json)
Hash identifier: bbmS0pmR1yH6dcI58phOSGBBs6dqJ3spPGOeSFGgFEE=
Subject key identifier: 4C:2E:D6:5C:9F:9C:A0:F1:66:36:B2:FA:79:F5:70:DB:90:08:39:31
Certificate issuer: /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial: 010D0C9F4328584F7E7DCAAB9717BA432A8C1040
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
Signing time: Wed 14 Oct 2026 01:00:13 +0000
ROA not before: Wed 14 Oct 2026 01:00:13 +0000
ROA not after: Tue 12 Jan 2027 02:00:13 +0000
asID: 8075
IP address blocks: 67.210.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7e:7d:ca:ab:97:17:ba:43:2a:8c:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Validity
Not Before: Oct 14 01:00:13 2026 GMT
Not After : Jan 12 02:00:13 2027 GMT
Subject: CN=86737264-3be4-4a20-ac41-158551452f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:68:5c:c1:b2:e1:f6:c6:90:89:a7:b7:f1:
75:7e:77:61:b9:b1:c3:de:61:ac:98:f5:14:f4:45:
08:50:14:1b:d0:76:83:bd:74:9e:22:30:75:2c:2d:
b0:16:09:bd:90:bd:48:6e:f9:1a:4a:27:fa:68:a3:
69:b2:7f:6a:dd:b8:3b:cf:af:5f:f3:00:14:eb:d0:
83:69:be:c0:57:b3:c8:58:77:b0:dd:f4:6a:4f:45:
86:ba:29:a8:36:3e:c0:33:3e:6f:2a:61:06:b5:bb:
cc:64:ee:c1:d2:24:35:eb:ef:0e:fc:4c:cf:90:e7:
40:18:33:de:87:8c:e0:e3:3d:44:08:36:de:fc:ca:
da:ae:6f:91:5f:23:cc:69:d9:5e:ce:7a:c0:ee:71:
44:71:c8:94:59:f7:89:72:66:cd:cc:cb:d8:f9:30:
30:18:41:53:91:a5:3e:8a:9d:de:7d:80:8d:9f:c2:
a7:50:13:a2:b5:d8:82:da:6d:78:0d:9f:e2:8a:4c:
1e:50:40:92:b4:8c:70:ac:4d:63:48:09:55:e3:ad:
5e:6a:86:f1:39:0b:28:0e:85:d3:99:db:02:4b:0a:
ff:52:54:cc:5d:c4:6c:1e:35:ec:ab:9f:5d:70:79:
91:87:00:0c:09:19:99:e5:63:b9:16:5a:3c:a5:55:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2E:D6:5C:9F:9C:A0:F1:66:36:B2:FA:79:F5:70:DB:90:08:39:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
X509v3 Authority Key Identifier:
keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
sbgp-ipAddrBlock: critical
IPv4:
67.210.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:80:17:1a:bf:d4:aa:a7:8c:9e:92:43:82:d5:94:cc:3e:f6:
a7:4b:9d:04:ca:36:6e:b0:c2:da:80:6b:e6:e0:df:59:e7:f3:
4a:99:2a:1c:34:fc:0c:c2:92:02:99:11:97:3d:fb:6a:9b:12:
c2:e5:89:91:eb:48:22:ae:76:0b:03:3c:3b:8e:3d:2a:9c:4f:
19:cd:72:38:df:ef:bc:70:62:e2:ec:74:31:68:15:36:55:5e:
a8:2c:ef:e5:f8:c2:9b:e8:0c:74:4e:03:30:e4:2c:5b:a8:ba:
9f:a0:ca:90:ac:09:00:09:7d:c6:12:9b:4d:59:96:c0:56:4b:
3c:0a:f1:fd:bb:2f:1c:dc:b0:fb:57:9f:9a:d8:27:94:2d:4c:
ff:c8:25:fe:36:96:81:07:48:c5:38:3e:f1:71:1b:a4:0d:ed:
ed:0a:7a:93:41:ee:6e:7b:3e:fa:ee:1f:b1:d8:29:70:ec:9c:
69:47:2f:61:60:a7:a0:28:c7:61:7b:ec:c8:46:d3:be:62:28:
54:0b:8d:6f:65:11:1c:36:8d:ea:5a:11:db:4b:2e:91:b7:f0:
9c:c9:94:25:07:98:3e:24:38:e8:c0:6d:46:77:35:9b:52:81:
29:75:2c:34:57:0a:4c:49:91:88:77:89:61:5e:bf:6c:9f:85:
74:5d:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:23:53 2026 by rpki-client