
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/66899e9a-d444-371f-9310-09bd1e3fb623.roa
File: 66899e9a-d444-371f-9310-09bd1e3fb623.roa (raw, json)
Hash identifier: DjSnLH56BYszbw1dT4KLljnVGV4mOhabgnjr8Za3a8E=
Subject key identifier: CE:C8:87:09:3B:7A:29:E0:85:B1:55:72:51:16:76:AB:FB:E0:BA:C3
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F4328584EA787109E3773B3323717F2A0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/66899e9a-d444-371f-9310-09bd1e3fb623.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 834
IP address blocks: 96.43.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:10:9e:37:73:b3:32:37:17:f2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=7f98ea71-9eab-47d3-94da-b30200e71c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:99:c1:6c:a0:3c:48:68:fe:5a:96:09:a2:
45:57:95:b6:5f:c5:51:cc:55:86:ba:d9:e8:56:41:
53:67:c7:70:b1:89:be:c8:73:7b:25:fb:f0:d3:56:
18:06:65:a1:f3:e6:05:9c:0f:bb:94:a7:f4:22:ea:
72:08:65:a0:02:13:42:d7:c0:ab:2e:0f:ac:b7:6a:
d9:54:46:32:cc:05:eb:4b:18:a0:2b:9c:63:d7:18:
2f:c8:31:4f:f5:06:75:f6:ec:80:9b:4a:5b:86:ea:
d8:3c:24:58:ec:dd:f3:e4:52:69:a1:30:49:74:fc:
79:01:2f:00:50:d7:e1:d7:e1:b2:7f:bc:79:ec:67:
1a:50:cd:12:64:ef:fa:a2:2e:e5:b9:08:5c:3a:4b:
99:fc:c8:99:03:46:75:ba:dc:61:76:6a:72:43:94:
88:14:04:bb:71:9c:9d:cb:f7:08:75:05:ba:a3:b5:
7c:43:b3:16:5b:3a:fc:0a:4c:31:37:6b:13:e0:6b:
7b:d8:b8:cc:e8:1f:f8:88:43:99:c5:94:73:da:d5:
0d:08:ea:f2:61:0e:6c:cf:99:16:c2:cb:ce:94:02:
45:29:f6:fe:51:2f:df:8b:d5:7d:1f:8c:fd:61:89:
ac:d1:9c:c9:bf:da:77:bc:c4:68:75:01:52:ae:3b:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C8:87:09:3B:7A:29:E0:85:B1:55:72:51:16:76:AB:FB:E0:BA:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/66899e9a-d444-371f-9310-09bd1e3fb623.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:49:2c:07:d6:1b:b9:40:0a:ff:0f:bb:2f:35:ea:35:75:34:
50:4a:ed:a9:de:6c:10:6f:5e:81:59:b8:d8:a7:77:29:57:2c:
9d:46:6f:44:04:48:94:da:66:2d:65:12:2c:56:40:1c:61:5b:
a7:e4:9a:48:07:2d:9c:4a:11:b1:73:94:1b:b2:b6:86:8f:32:
2d:44:bf:5a:f6:c0:9f:1d:16:e7:58:b1:58:6b:5c:af:d4:61:
6b:4e:6b:53:b5:ab:a9:f6:a1:37:62:4c:7f:fc:b4:34:f4:d2:
33:c7:7b:46:9d:bd:a1:ff:f1:f8:78:e8:83:b1:09:65:37:33:
a9:d7:d9:81:3c:e3:42:fc:9f:1a:e7:43:db:71:1d:d7:40:b2:
09:01:ce:ab:0a:e2:18:0f:41:57:ee:1e:6a:2f:61:18:7e:06:
cc:71:83:8a:a7:b8:9a:b9:90:b4:63:48:aa:e9:74:f0:5b:c8:
55:6f:93:a5:0a:69:cc:bd:10:e8:20:30:2b:ca:64:cd:df:22:
80:dc:58:f5:bf:b8:3d:f7:69:df:d7:36:f3:83:c1:4f:8c:7a:
0e:80:57:b3:b8:49:be:35:58:57:52:a0:45:73:1d:0f:b4:0b:
84:07:96:a1:d3:c4:83:23:92:b6:db:13:b1:16:f1:e2:2f:be:
46:de:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:21:17 2026 by rpki-client