
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
File: 487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa (raw, json)
Hash identifier: ldMifI5Ml1h6oGVBiHd1VpcsMgtoV7NEIe1cmJ/pFqo=
Subject key identifier: AB:7C:75:E1:88:B7:1A:E1:C2:2D:CA:96:FA:CB:2A:21:D1:B6:88:6A
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F4328584F7782DFE736417EB733EBD900
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
Signing time: Sun 11 Oct 2026 13:00:12 +0000
ROA not before: Sun 11 Oct 2026 13:00:12 +0000
ROA not after: Sat 09 Jan 2027 14:00:12 +0000
asID: 6939
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
2606:3840::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:77:82:df:e7:36:41:7e:b7:33:eb:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Oct 11 13:00:12 2026 GMT
Not After : Jan 9 14:00:12 2027 GMT
Subject: CN=3cae157a-ee5b-432a-a52b-fd0219079c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:55:8e:13:6f:ea:8b:55:99:8a:7b:de:f9:
8e:d3:06:8e:74:8d:77:97:13:66:29:d6:80:b6:40:
56:aa:5c:53:d2:31:2a:07:f3:80:f1:e8:2a:d2:96:
10:9a:22:31:e6:0a:fc:4b:f1:ed:40:33:4d:c7:3e:
22:48:6d:b6:36:74:28:35:c3:9a:fa:cb:86:0e:37:
5c:72:c8:2c:ea:b7:0f:77:5d:72:3c:e1:c9:ae:87:
d0:fc:78:4d:88:d5:eb:be:0c:7c:59:04:20:ab:8b:
cb:53:7e:6d:83:1b:09:34:0d:56:e0:e9:46:1f:36:
08:40:39:65:28:7d:87:af:ad:b9:ac:cf:36:1a:1f:
4d:5b:48:48:63:69:04:60:68:cd:f4:d2:22:7c:9a:
18:fc:c1:27:fe:90:f9:07:41:87:18:3f:3b:9b:e2:
2f:99:3c:0c:c8:16:dc:a0:47:d9:f8:ec:53:c0:25:
ac:9a:e9:23:18:b6:4d:e7:8f:b5:60:e0:f5:8c:7f:
ec:6d:97:3f:fd:1b:08:2d:a1:2e:86:f1:1c:8c:ca:
8d:1d:b0:38:53:38:fa:28:3c:c0:e9:6f:c9:ff:88:
86:91:84:bf:da:2f:ed:a7:90:8a:7a:c9:ca:29:fe:
d9:35:dc:87:d3:91:f2:0f:0f:a1:ac:92:cf:41:68:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7C:75:E1:88:B7:1A:E1:C2:2D:CA:96:FA:CB:2A:21:D1:B6:88:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
IPv6:
2606:3840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:e5:09:5e:71:a6:2c:48:b5:44:f7:2b:b2:30:f1:13:a5:ce:
70:d0:63:c6:4b:7d:a9:79:a9:b0:25:f1:58:ec:f5:12:99:69:
26:90:c9:08:b0:d7:fc:26:ea:76:66:da:7a:ec:2f:9d:c8:1a:
6c:1c:bf:78:bc:b0:22:0c:6a:ca:b8:25:10:a6:b3:10:96:ee:
3d:56:08:17:f1:d9:cb:ed:ff:a6:66:72:7b:f8:7d:65:6f:cc:
87:e2:bb:01:af:51:fa:bc:26:1b:06:61:cb:92:94:0e:8f:15:
25:71:22:ab:d6:44:0c:ad:a2:4f:44:51:cb:b2:cf:60:7c:e3:
f5:b1:9a:d3:86:2f:75:0e:62:bf:5a:9f:a3:92:34:6e:f2:6f:
15:2c:6c:52:db:0d:c1:4d:72:27:32:cb:85:bc:07:3d:d1:0b:
e5:e1:d9:8e:0e:cb:b9:da:26:5d:56:40:1b:81:cf:d6:b0:77:
79:f2:87:b2:98:75:34:17:a8:32:69:e9:50:0c:a5:6c:dd:da:
67:1d:0c:71:ba:5d:6c:24:af:80:b6:38:51:20:f3:2d:a2:c1:
c1:d6:5f:51:ea:6e:2a:d0:8a:bb:ec:4a:fa:a8:c5:0f:c0:7d:
75:8f:01:3d:ed:8e:0a:9c:3c:ac:59:97:30:3d:c5:2f:d1:fc:
69:ee:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:25:11 2026 by rpki-client