
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
File: bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa (raw, json)
Hash identifier: OVw/0FEeSwVQAPn87ojP0x/6S14o8rJSJhl9XEYcSog=
Subject key identifier: 08:3A:0F:D0:74:29:FC:42:96:C2:C5:E5:39:40:DC:2B:7A:8E:6F:B7
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F4328584ED431F47954E84C5937632D00
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 1299
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
2606:3840::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:f4:79:54:e8:4c:59:37:63:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=a32cde43-5674-4eb2-91fa-1015126575b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:84:86:e3:2e:85:17:7c:ca:18:0f:60:72:
70:6c:fc:24:1c:dd:d9:6a:9f:e9:ba:c9:2c:bc:e1:
a0:f7:49:6b:70:60:37:0f:71:aa:57:e4:af:0f:e3:
11:4d:cb:e4:82:e5:a8:f6:14:9d:ba:74:f1:80:57:
86:c0:74:e9:61:bd:5b:ed:b5:a2:9e:a7:f9:1e:7b:
e1:ba:b9:e4:29:dc:37:d0:a1:89:2a:a0:ad:cf:8f:
0f:77:bd:71:dc:6c:85:82:1d:a2:15:50:e2:1e:3b:
42:ae:ff:62:aa:04:ae:59:3d:02:76:66:5c:b9:d3:
3d:82:d0:2f:0b:c2:af:f9:c9:a0:22:81:25:eb:f6:
6a:97:3f:ed:f7:f3:c5:b7:c1:46:bd:41:92:ec:d1:
ff:3c:36:02:b1:00:ec:be:ca:6c:d0:be:8c:57:c1:
8e:2f:50:6d:7a:ab:37:2e:25:bc:32:de:3e:77:86:
a2:95:97:7f:16:09:88:2b:e8:9b:67:39:f6:75:00:
2d:b9:7a:4b:f7:2a:2b:7b:eb:69:d0:f2:64:b3:e6:
fe:0d:30:0c:de:59:d9:7f:fd:cd:d4:6e:5c:14:21:
ea:9d:1a:07:e6:63:c8:02:8d:0e:34:f3:e8:7b:7d:
41:b0:77:14:29:47:13:06:c0:00:a6:9c:5e:19:05:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3A:0F:D0:74:29:FC:42:96:C2:C5:E5:39:40:DC:2B:7A:8E:6F:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
IPv6:
2606:3840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:31:90:a0:83:fa:e6:e8:c1:ee:88:65:78:bc:ad:cb:dd:10:
ac:22:d4:0d:02:ec:a6:d2:1e:2e:be:09:91:2b:74:b0:f5:34:
a8:79:49:ff:ed:89:a4:c7:8f:04:c2:e9:67:44:07:45:47:38:
3b:ca:a3:e5:ee:6a:78:fa:6d:7b:17:36:05:37:2a:22:d6:ed:
3c:0c:3a:10:4a:21:b5:07:a2:0b:87:da:f6:f6:29:0c:00:7f:
3e:4b:20:57:41:22:51:da:45:a7:af:1f:b8:f6:12:5c:b4:5d:
ce:6b:ee:72:bd:3a:ec:82:bb:a8:af:69:7d:a5:c3:93:f5:39:
88:21:70:f3:58:ad:fc:f9:53:d7:2c:44:2f:d6:6d:62:b6:4c:
3e:78:64:d8:1e:af:ce:6b:02:3b:21:85:ea:da:e3:23:07:1a:
c9:40:3d:3d:47:61:32:a3:d5:bc:bc:e7:d7:d2:9b:75:cc:7d:
4a:9f:91:60:4e:4e:96:a5:d1:67:66:b2:48:8f:b8:7f:6f:3f:
41:ea:70:8b:5c:cb:f4:d5:64:36:69:67:dd:87:11:5f:35:9f:
ad:d2:50:e8:bc:4f:32:52:68:60:fa:ce:4f:0a:00:76:b1:ef:
41:1d:61:3e:8c:73:86:30:5d:15:d6:7b:2e:37:81:6e:d7:55:
d4:be:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:36:48 2026 by rpki-client