
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/ad4a4be0-52a9-3639-82a9-351d291ea9eb.roa
File: ad4a4be0-52a9-3639-82a9-351d291ea9eb.roa (raw, json)
Hash identifier: cEsVK11aBPNAunI5NPqo93Ud6g31EtA+WY4Bb7id2CA=
Subject key identifier: FF:63:F1:E8:0D:DD:F8:B6:AB:41:B3:43:3A:93:CC:66:16:2D:3F:BC
Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial: 010D0C9F4328584EDDB9C1958B13DEB0A36034C0
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/ad4a4be0-52a9-3639-82a9-351d291ea9eb.roa
Signing time: Mon 17 Aug 2026 10:56:26 +0000
ROA not before: Mon 17 Aug 2026 10:56:26 +0000
ROA not after: Sun 15 Nov 2026 11:56:26 +0000
asID: 8075
IP address blocks: 206.63.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dd:b9:c1:95:8b:13:de:b0:a3:60:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
Validity
Not Before: Aug 17 10:56:26 2026 GMT
Not After : Nov 15 11:56:26 2026 GMT
Subject: CN=663ec2ce-7792-4b5a-9e21-e91c6279479a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:91:ce:ba:46:f3:b0:72:c1:a7:10:17:75:
0e:1c:48:86:a7:ad:ba:5d:04:81:29:f0:af:a1:55:
94:fb:2b:a5:4a:12:6c:fb:06:48:0d:6d:2b:c9:c7:
76:2d:10:a4:94:fc:fb:0b:07:a5:81:b6:2a:89:2e:
21:c8:1e:d6:99:f2:07:83:4e:11:85:05:29:8d:1e:
79:55:80:cd:d2:eb:17:9f:d0:2f:90:23:0b:61:63:
0b:ec:03:6c:45:17:94:b7:d0:cf:c7:f2:ce:e4:98:
79:da:0f:4d:ed:0f:a1:0c:b0:b5:71:f3:f3:f6:73:
94:05:d9:07:16:60:85:b9:de:29:62:33:de:e4:29:
3f:c4:ef:0a:b9:b9:d0:87:97:52:1d:0c:a3:3c:f6:
a6:75:0a:51:5d:ae:59:06:56:25:7d:07:89:51:c6:
b8:60:6d:bd:e9:ee:87:44:f3:6c:5f:e0:a4:55:f1:
73:ab:0d:94:93:2c:76:49:9a:7d:7f:a3:dd:33:f4:
db:e0:3e:87:e0:7f:e3:2a:b6:b9:99:a8:13:48:be:
a7:c9:78:d9:d1:56:fe:83:47:e7:e7:bd:f2:85:70:
50:f7:c5:3a:c2:76:42:fe:68:e9:e4:d9:d6:2d:23:
ac:49:51:f4:92:48:2d:29:dc:09:91:70:65:c8:c7:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:F1:E8:0D:DD:F8:B6:AB:41:B3:43:3A:93:CC:66:16:2D:3F:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/ad4a4be0-52a9-3639-82a9-351d291ea9eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
X509v3 Authority Key Identifier:
keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
sbgp-ipAddrBlock: critical
IPv4:
206.63.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:06:1c:2b:68:c0:57:97:b5:90:a1:b6:eb:38:0c:dd:67:a4:
a8:6e:9c:e0:21:9f:57:ca:77:7b:31:a5:8c:e0:4c:04:3f:bc:
d4:79:b7:d3:2f:47:f2:74:75:55:55:a1:94:34:45:39:bc:42:
7f:66:ba:66:e1:be:c3:46:a3:f7:25:1a:65:ee:66:c8:bd:d7:
1f:55:30:1c:5c:45:33:52:53:f7:8e:59:78:f7:71:d9:cb:e6:
9b:8c:11:4c:7f:53:8b:7b:7b:d1:3b:c1:dd:80:64:61:e3:64:
0a:41:b9:4a:0d:1a:41:35:fa:13:33:8d:96:9f:95:ee:84:69:
31:b8:1c:33:4f:91:5a:cb:39:e0:14:8a:32:3b:e8:03:0e:3c:
b6:3d:94:27:7c:d8:e4:39:95:b6:a9:21:7b:53:15:54:35:1a:
d9:fc:4c:4d:1d:b6:5e:9d:03:f0:1a:13:c3:24:96:f4:34:b0:
90:a4:27:61:dd:80:f9:0f:17:90:af:a8:e2:fc:bc:8a:27:aa:
dc:fe:4d:21:ed:6d:75:49:e5:bd:3d:e4:4a:4e:1a:b1:b9:ab:
18:4f:f4:e7:19:bb:14:47:63:44:35:17:4e:60:cf:ac:9f:d9:
90:ab:45:51:45:57:3b:5d:c6:27:1b:30:b2:a2:78:09:c1:ea:
cc:64:fc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:25 2026 by rpki-client