
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b60fed5b-3053-3cff-b058-fd16a2f3ca57.roa
File: b60fed5b-3053-3cff-b058-fd16a2f3ca57.roa (raw, json)
Hash identifier: Th1DqMH5G/DQ7mEEZX4Sl77z3jz2w9DyZ0mZDik6Zd8=
Subject key identifier: 78:08:6C:00:B1:76:AF:24:43:04:33:B1:13:3E:BB:47:F8:58:C4:44
Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial: 010D0C9F4328584EE7BCA7906C8CCD63FA7A9620
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b60fed5b-3053-3cff-b058-fd16a2f3ca57.roa
Signing time: Fri 21 Aug 2026 01:00:12 +0000
ROA not before: Fri 21 Aug 2026 01:00:12 +0000
ROA not after: Thu 19 Nov 2026 02:00:12 +0000
asID: 14297
IP address blocks: 199.189.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e7:bc:a7:90:6c:8c:cd:63:fa:7a:96:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Validity
Not Before: Aug 21 01:00:12 2026 GMT
Not After : Nov 19 02:00:12 2026 GMT
Subject: CN=48f577d0-0cf4-4eed-b83e-19f71b6bf449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:c0:b3:11:b4:ba:1d:09:b6:6c:10:79:8b:
92:58:54:c0:4b:c5:0c:52:b2:69:4c:6b:65:c2:c3:
7d:31:b6:0e:e8:15:3f:e1:e4:cb:ce:a9:e0:1e:4e:
e1:c9:e3:19:82:d4:10:7f:ef:05:71:18:ba:0e:6c:
c7:c9:1d:2f:91:cf:7c:e5:53:d2:0a:29:9d:9f:e7:
0a:5a:41:3b:b0:a5:a3:17:89:fb:a3:8d:8c:8a:e6:
96:4b:4f:2c:30:f7:45:3a:56:ec:3a:4a:97:c9:b9:
8d:c1:98:b8:5a:36:e7:84:7d:cc:e8:a8:3f:6d:a9:
d1:f6:c3:a0:a4:8b:01:f6:5f:65:f5:04:d4:0b:36:
d3:e7:61:94:f7:a5:56:da:88:bd:9d:33:9f:57:cc:
83:97:8c:a0:b3:88:8a:42:ad:07:80:9d:03:4f:8c:
f5:11:e5:04:94:56:20:06:55:21:32:7b:43:c5:1e:
51:b1:19:63:8f:76:60:73:39:07:21:13:ea:f5:94:
4d:4a:41:c2:5f:56:71:a8:de:10:64:99:c4:d1:77:
41:d6:ad:b6:59:8d:f4:6b:62:07:79:ca:f9:3f:1d:
a4:d8:f3:59:7c:2f:71:ab:16:d6:e8:84:6d:85:af:
50:89:d5:2b:a8:9b:0c:06:b0:49:01:a2:56:90:5f:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:6C:00:B1:76:AF:24:43:04:33:B1:13:3E:BB:47:F8:58:C4:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b60fed5b-3053-3cff-b058-fd16a2f3ca57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
X509v3 Authority Key Identifier:
keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.189.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:e6:15:75:58:87:a7:5d:55:19:c8:39:46:fe:91:28:ae:c5:
aa:a6:fe:45:81:f2:ad:32:e3:01:84:cd:19:ef:8b:9f:ac:60:
44:44:1e:fc:f0:30:b6:f9:65:2e:08:51:64:b6:9e:90:4b:44:
50:9e:8e:4d:1c:aa:a0:32:98:aa:96:9b:08:db:0f:b2:e0:92:
a0:13:48:cc:7f:dc:4e:16:75:e5:64:e7:e7:55:72:44:51:51:
f9:49:df:58:c1:9a:c9:c8:68:a1:62:c4:32:78:3a:fe:e5:22:
88:82:a4:6c:3a:b0:7d:94:46:7a:12:57:7a:64:a8:cd:93:8b:
60:b0:b1:70:a1:81:80:68:c1:2f:eb:ab:cb:8d:c3:64:31:48:
b7:6a:48:29:0a:6c:1b:6b:5a:bb:74:b4:8d:20:15:9b:f4:5d:
aa:1e:7a:98:fc:4c:44:95:d3:fb:f9:8f:39:02:60:33:e1:2d:
3e:35:7e:af:75:55:df:4c:8d:05:e3:c5:e7:d6:34:a1:05:32:
48:5c:3e:0d:8e:a3:fa:8f:6b:3f:3f:b5:48:4c:8a:b0:5e:e9:
e0:c9:6e:b2:f2:86:1a:0c:38:a0:3e:d9:82:66:4b:03:a2:ed:
4d:3e:26:e7:56:a5:90:98:bc:12:5d:d2:ab:53:bc:9e:3c:be:
7f:20:c1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:14:27 2026 by rpki-client