
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa
File: 0de08070-992e-334f-8090-a4c3a88677f1.roa (raw, json)
Hash identifier: npabMPd8zYw6ScWlReE7RyGUk1/EWdNgIsV4gy0dZB8=
Subject key identifier: B9:E1:18:E5:E1:13:D6:13:A9:71:8A:EB:6C:72:5D:80:1C:10:B1:76
Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial: 010D0C9F4328584E2D9F140D6DF78D86184CA9C0
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa
Signing time: Mon 15 Jun 2026 09:00:12 +0000
ROA not before: Mon 15 Jun 2026 09:00:12 +0000
ROA not after: Sun 13 Sep 2026 09:00:12 +0000
asID: 30148
IP address blocks: 66.248.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:9f:14:0d:6d:f7:8d:86:18:4c:a9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Validity
Not Before: Jun 15 09:00:12 2026 GMT
Not After : Sep 13 09:00:12 2026 GMT
Subject: CN=328ebeb2-e65f-4f47-9027-93f2b87de48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:26:8a:c4:a5:ab:c4:8c:27:f1:a3:94:5d:
19:21:7d:50:86:88:d4:8f:7b:b5:a5:02:7b:5a:1b:
df:55:fd:a6:f5:fe:1c:d4:7c:ca:09:a4:c1:7c:56:
8d:31:b8:05:92:24:30:96:5f:15:93:be:cc:dc:d6:
c5:25:0d:b1:85:b5:6b:d1:f5:37:cc:71:5d:27:1d:
b3:fe:4c:63:8e:b3:6b:11:5b:a4:79:4d:c9:06:4f:
ca:e9:b3:b7:c0:ec:53:8d:ac:2b:6c:34:ae:d1:a3:
de:e4:36:bc:34:ef:86:5b:df:d5:f9:d2:7a:ad:48:
8c:31:a8:c7:5e:27:c7:9c:b9:28:fa:0e:74:34:c2:
1a:87:4f:61:5a:05:8e:5f:c8:1f:df:4e:3f:81:07:
aa:14:1b:6f:1f:4c:8b:cb:65:02:e3:ea:b0:43:92:
fe:6f:81:86:6b:81:bc:ad:2c:b0:26:a4:8c:75:b7:
70:f9:44:9d:5f:42:2f:3c:a4:f9:60:01:0b:9b:6a:
23:67:0f:08:95:e9:17:0d:9f:a5:d5:58:f4:19:6f:
c9:b3:3a:0a:c1:b8:27:0d:9e:69:19:08:70:4e:b5:
f6:f0:6d:6a:78:6f:6a:3e:46:8d:29:fa:7b:55:bd:
1e:36:59:f4:9a:e1:3b:7e:20:1a:59:fc:55:2c:44:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:18:E5:E1:13:D6:13:A9:71:8A:EB:6C:72:5D:80:1C:10:B1:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
X509v3 Authority Key Identifier:
keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
sbgp-ipAddrBlock: critical
IPv4:
66.248.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:5f:2c:41:9e:a2:c0:c9:a1:5f:68:93:b1:e5:bb:8e:72:82:
9c:0f:39:3e:ae:81:72:e7:7b:2a:54:0f:0d:5a:af:e8:01:df:
9b:4f:d5:d5:2c:f2:ee:43:2e:60:db:bb:0b:d3:0a:89:80:e2:
dd:5d:e1:14:fd:18:1b:5e:68:f8:f6:c5:b4:95:6c:de:ae:5e:
c5:8e:cb:d2:06:fb:7b:97:82:86:9c:d9:b0:82:b2:36:3d:bc:
71:0c:1b:71:4f:77:bc:cb:81:59:43:6e:9c:06:92:b6:5b:df:
89:55:30:a3:55:a9:f0:93:07:ef:dd:85:68:29:b9:61:3e:3f:
6c:dc:83:6f:ea:eb:b8:52:b3:b1:ef:f3:8e:15:b8:b9:1b:1c:
44:8f:de:33:00:b6:e7:44:a6:b8:62:68:a4:ec:71:a8:21:cb:
07:be:92:cb:1d:9f:e9:22:7f:03:d2:92:60:71:a1:07:d9:9b:
6e:e9:40:b3:41:d0:14:35:f7:fd:05:86:41:76:71:ca:b1:b7:
33:6f:b5:f8:04:e9:89:28:29:11:6b:3d:6b:e9:0e:61:52:17:
ae:f7:aa:32:11:d6:0e:6e:2a:fb:00:8d:df:1e:aa:66:67:ff:
74:72:1c:53:c7:4b:92:ad:81:e0:be:3a:a7:29:8b:e9:06:44:
60:22:cc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 18:44:29 2026 by rpki-client