
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa
File: 0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa (raw, json)
Hash identifier: h30g0OJLTkUD88Nnlb35xdGM9Bd/nkcdBaaofnt2lQU=
Subject key identifier: 73:09:8A:A8:CC:50:DC:48:F1:D7:CD:51:51:27:0B:62:88:24:BF:BF
Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial: 010D0C9F4328584F8F3DB012063673447778A480
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa
Signing time: Tue 20 Oct 2026 01:00:12 +0000
ROA not before: Tue 20 Oct 2026 01:00:12 +0000
ROA not after: Mon 18 Jan 2027 02:00:12 +0000
asID: 399819
IP address blocks: 64.29.129.0/24 maxlen: 24
2607:f3a0:a001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8f:3d:b0:12:06:36:73:44:77:78:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Validity
Not Before: Oct 20 01:00:12 2026 GMT
Not After : Jan 18 02:00:12 2027 GMT
Subject: CN=c4a41d30-0c2b-49c8-b120-6139167e2834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1f:b1:0f:a4:4b:78:fb:5c:6b:fa:68:c4:cd:
ec:a0:f3:47:81:1d:ac:6d:6d:e3:a3:c9:ff:f1:94:
33:54:16:df:a6:17:72:88:91:6b:e4:67:18:ea:cd:
81:c0:e0:fd:4b:5f:a5:16:51:91:df:d0:85:ec:da:
2c:4c:73:97:f0:ff:2b:31:78:49:0d:32:73:39:02:
5b:ea:66:2b:bd:38:46:c6:f3:97:65:ec:e5:cd:05:
02:db:92:38:19:ad:fd:f3:7f:9e:fe:ef:b0:db:53:
45:93:b7:05:a9:db:a7:c0:08:a8:50:b9:ad:e0:3f:
17:e0:96:98:f0:ad:bd:26:64:ed:14:15:c1:ab:0a:
0a:db:52:f9:7d:42:85:90:72:c0:c2:f1:a9:4a:c8:
44:33:31:97:a1:3f:c1:f7:7b:6a:3d:c8:b8:54:e9:
5f:24:7c:0d:76:62:86:c8:6d:4c:01:ed:dc:20:60:
17:6e:ce:7d:9b:11:af:d3:e6:7b:28:34:1d:12:dc:
0c:d4:f9:b3:13:6e:88:8f:bb:a4:3c:66:89:64:c0:
6a:2f:02:c4:c8:4d:ee:3a:a8:c2:8c:fc:40:e3:d2:
29:0a:4e:77:08:15:a4:d2:b2:cb:f4:cc:2c:3a:c3:
37:ef:f8:a2:95:0b:5b:f9:e1:3b:33:f1:73:8e:be:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:09:8A:A8:CC:50:DC:48:F1:D7:CD:51:51:27:0B:62:88:24:BF:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
X509v3 Authority Key Identifier:
keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.129.0/24
IPv6:
2607:f3a0:a001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:0b:47:08:fb:27:38:30:a9:ad:c4:9d:55:47:59:99:c3:88:
71:af:93:70:6b:52:7a:db:a9:28:5c:f1:7e:9d:4a:8b:72:de:
31:5e:aa:cb:fc:16:15:33:81:53:8c:94:16:2d:7e:4f:d3:16:
04:f7:e3:29:5a:d9:cc:8c:03:8b:2b:85:6f:09:1f:64:ae:c4:
ae:42:72:8e:a9:54:27:ad:6c:2e:98:e4:83:92:3d:02:1b:64:
63:d2:e2:7f:e3:32:51:46:5b:75:51:09:c5:b1:eb:0e:d3:37:
0c:09:8e:4f:15:94:4e:e3:94:1f:f2:a6:1f:c7:ca:cb:94:4b:
5d:30:13:e0:ef:f9:d6:00:48:be:94:3f:bf:be:f0:c6:62:0d:
7a:f5:bc:22:9c:1f:4e:47:59:70:ac:f7:b2:74:ee:2c:ab:01:
09:8a:4a:b8:3f:0e:34:70:fa:3d:f3:45:d1:ba:40:25:ee:d2:
c5:2f:bb:0b:c3:dd:d2:10:e2:3a:0a:61:a1:a4:8d:5d:80:6f:
67:d4:2f:42:d0:72:12:e5:6a:c0:d1:98:4a:65:d8:c9:13:a7:
0b:4a:ea:bc:50:19:14:b4:02:a2:32:8a:9f:ae:3a:37:21:78:
23:9d:4f:14:39:85:c7:66:34:83:b2:99:ae:ba:f7:1b:15:f5:
e3:f3:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:13:54 2026 by rpki-client