
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa
File: ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa (raw, json)
Hash identifier: 1ObeeKvk48PIKTpkUDBqu6rODJYN/SeXaJIL5QzHpb4=
Subject key identifier: 05:0F:97:1B:FF:36:69:49:86:E5:BB:4B:5B:66:08:4E:60:69:6B:FF
Certificate issuer: /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Certificate serial: 010D0C9F4328584EBB11BFC84EF2B65D15C2E740
Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 21723
IP address blocks: 66.163.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:bf:c8:4e:f2:b6:5d:15:c2:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=e5764bf4-5a87-41c8-8a6f-337f94d7fc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:a9:2f:ff:14:a7:fa:68:13:5e:ec:b3:a6:
ed:2f:a9:0a:f2:be:95:43:db:9e:1c:0e:13:12:08:
4f:16:24:da:82:37:56:c6:fe:ee:1c:3c:b3:70:cf:
d2:16:38:d7:a2:9e:9c:bc:d9:ff:63:a1:d4:2b:88:
6e:11:1c:09:9b:79:a2:49:b1:f8:d4:fb:32:25:04:
61:cc:92:e4:5d:e0:02:75:39:e5:e6:e0:b2:16:67:
fc:4d:e1:23:bf:34:7a:51:37:b2:2c:60:5a:58:18:
ae:de:00:42:b8:44:fa:6d:01:8e:7b:d9:a5:e8:3e:
69:65:da:9d:69:89:fc:b2:05:37:28:01:e7:34:81:
36:fb:eb:f8:75:ad:61:66:31:2d:1a:cf:68:32:8d:
10:e8:73:fe:7e:08:98:44:71:4c:e6:ce:4e:88:a8:
41:09:cb:95:73:ef:7d:92:e3:8d:9a:94:26:c9:50:
df:14:ba:b9:15:26:d6:bc:30:44:f5:3a:bd:8d:c4:
68:9e:36:d9:02:b3:3b:7c:26:9c:7a:82:d4:60:04:
58:36:de:79:04:ab:e0:40:9c:f4:69:2f:ba:8d:cb:
56:01:31:9b:40:cf:ad:a1:53:e3:0c:14:0d:9e:b8:
c1:4e:3d:d2:71:c9:f5:eb:bd:fe:00:16:f8:8e:6d:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0F:97:1B:FF:36:69:49:86:E5:BB:4B:5B:66:08:4E:60:69:6B:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl
X509v3 Authority Key Identifier:
keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.163.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:72:99:b4:92:27:ce:9d:c9:d6:96:93:e9:96:6a:b1:44:34:
57:9d:91:06:4c:7b:1c:fa:91:d6:a2:a9:1c:05:22:1d:0c:16:
e4:4b:89:8b:24:2b:fb:e7:8b:26:02:3b:cf:2b:d6:a3:f1:ea:
76:6f:a0:a6:b2:f4:fb:ab:3c:bf:4e:7e:63:72:8f:3f:07:5a:
55:36:32:08:66:6c:54:c9:8b:69:27:7c:ad:47:3d:d4:a0:d7:
ac:c6:93:55:77:8d:4d:65:ea:df:68:ab:d8:c3:9a:41:30:4d:
cc:b6:cb:48:4c:73:bc:e7:e2:b7:8d:a1:16:69:92:96:98:2e:
cc:7c:3b:b3:5b:98:1f:45:2e:ac:90:8b:f1:8c:11:19:c5:33:
6b:bd:4d:e7:b8:06:e4:57:cf:3d:25:cd:54:53:af:01:5a:6a:
89:73:62:17:5c:a5:e5:31:ca:51:6c:0c:cc:87:77:3c:30:ef:
17:e2:73:36:3e:42:20:36:43:9e:a6:a6:d8:08:4f:58:f1:0c:
7a:d8:f1:64:80:0f:25:b7:9d:04:4f:a0:90:22:87:63:31:6a:
dc:ba:92:58:ff:f3:63:57:99:e3:e0:45:fd:83:49:50:3a:25:
a4:f7:e4:5f:51:1d:0f:c0:64:5b:c5:46:ae:94:99:a0:b7:da:
92:45:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:15:46 2026 by rpki-client