
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
File: 487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa (raw, json)
Hash identifier: tPvviLiWsWhfDpzMu5zyTNtybpqtdo/v/ZWUHu0Qg7U=
Subject key identifier: FA:1B:19:8F:C0:36:80:F1:74:BA:20:C0:30:97:E8:0E:A3:BA:8C:FC
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F4328584E31CF0B2C7AE9D1EEE7661380
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
Signing time: Tue 16 Jun 2026 21:00:12 +0000
ROA not before: Tue 16 Jun 2026 21:00:12 +0000
ROA not after: Mon 14 Sep 2026 21:00:12 +0000
asID: 6939
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
2606:3840::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:31:cf:0b:2c:7a:e9:d1:ee:e7:66:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Jun 16 21:00:12 2026 GMT
Not After : Sep 14 21:00:12 2026 GMT
Subject: CN=308a9bf9-7726-4748-8105-945d74a0f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:87:7a:57:92:cf:e5:24:94:e3:97:9d:84:
ef:4a:a1:02:73:0f:f5:1b:d6:a2:98:ec:b0:71:2e:
18:d8:d1:6c:85:49:9a:ad:60:08:bc:a6:76:39:b9:
5b:73:e7:b4:0c:30:ab:80:70:2e:9d:57:6a:1f:fe:
ef:54:55:5f:26:e6:ea:68:af:a5:ff:11:fb:41:7d:
5c:1d:45:25:21:b3:78:63:a9:14:d4:1f:92:41:98:
d8:d1:b5:fc:8e:08:b5:f9:8e:ea:7d:2d:31:66:fd:
69:e0:8d:69:d3:ac:87:62:ef:d8:ea:27:cc:30:d1:
f7:fd:b8:c6:95:0a:b7:9f:76:f9:b8:1a:6e:ed:b3:
b3:52:55:94:05:1b:08:3e:df:91:8f:82:ea:5b:22:
bb:fb:3e:cb:e1:e3:2a:38:36:b0:63:c2:e1:ff:94:
e1:59:3d:31:91:29:2f:ed:74:44:5c:4c:8d:5a:b9:
f7:63:92:e0:2f:6b:db:da:d1:9f:01:b2:b4:6e:4e:
bc:4e:8a:f6:cb:56:c1:e9:9a:f1:8b:ea:53:aa:aa:
1d:24:52:c6:26:a4:e9:ea:d6:b6:2b:3e:9a:50:0b:
1e:91:56:c8:13:1e:e3:19:86:e4:21:f4:96:55:bb:
77:0b:17:c6:23:83:e7:1c:ab:ab:4b:f7:c8:32:36:
75:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1B:19:8F:C0:36:80:F1:74:BA:20:C0:30:97:E8:0E:A3:BA:8C:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
IPv6:
2606:3840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:de:1a:5f:a0:b1:db:53:1e:a7:7d:e5:bc:af:71:85:5a:fc:
60:2c:37:3c:32:84:96:4e:a6:5e:7d:91:09:77:e0:fa:62:4e:
57:71:35:ee:ee:56:31:c6:fa:5b:f0:39:99:9b:be:ce:e6:0f:
64:22:92:04:32:2f:7d:85:eb:31:b9:6f:b3:14:fc:7a:32:33:
7c:f8:fc:70:83:90:e2:0f:00:d9:2b:3d:7e:7a:56:ac:74:87:
35:03:2b:9d:26:2e:9d:e4:a1:ac:67:62:dd:a1:02:71:ac:53:
f9:1b:d1:6c:b4:10:16:a4:4f:06:f6:e2:ce:8b:d1:8c:e0:1e:
a9:70:b1:70:de:f6:c8:3b:ee:f9:c6:e4:20:87:e2:94:ce:73:
68:d1:7e:9a:9a:4d:ed:69:67:ed:24:77:15:ef:fe:cd:26:2c:
da:24:f3:af:24:3f:7c:5d:36:0a:4a:eb:cd:ce:8d:f9:06:97:
0e:a2:04:50:69:bf:3a:80:4b:69:a7:f6:76:49:07:5f:be:58:
a9:3b:7b:c9:ba:9c:65:7d:da:55:a4:4f:fc:b0:59:6e:b7:64:
3d:7a:61:9a:40:d8:bc:55:1b:87:f1:31:aa:9a:ce:31:47:ea:
6e:55:50:64:db:c1:40:50:0f:08:4f:43:13:c6:28:f3:7a:a6:
5f:e0:77:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:06:51 2026 by rpki-client