
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/488da631-c757-3d3c-9dee-32f02da1f756.roa
File: 488da631-c757-3d3c-9dee-32f02da1f756.roa (raw, json)
Hash identifier: ikgxQC8ULDxKiRo927mm+rJzI7DwGQeC4py73+0H1ZU=
Subject key identifier: B2:79:A2:13:B7:49:FD:EC:40:A2:68:26:7E:6C:32:06:EA:EB:D8:65
Certificate issuer: /CN=cc58e406-4d46-4ad6-892a-bf457cdcdbb0
Certificate serial: 010D0C9F4328584CCD0C8A50511ECBE5274FF180
Authority key identifier: 8E:BB:F2:E3:60:81:10:44:78:D8:26:ED:81:E7:DD:3A:B5:BC:3C:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/488da631-c757-3d3c-9dee-32f02da1f756.roa
Signing time: Mon 09 Feb 2026 02:00:31 +0000
ROA not before: Mon 09 Feb 2026 02:00:31 +0000
ROA not after: Sun 10 May 2026 01:00:31 +0000
asID: 16509
IP address blocks: 130.12.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cd:0c:8a:50:51:1e:cb:e5:27:4f:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc58e406-4d46-4ad6-892a-bf457cdcdbb0
Validity
Not Before: Feb 9 02:00:31 2026 GMT
Not After : May 10 01:00:31 2026 GMT
Subject: CN=fd7f36f6-f01a-4bb2-84c5-7d6d7d6b5e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:19:dd:3a:79:48:e5:ed:e1:88:a8:fc:d0:
4f:7d:24:41:8d:17:8c:05:f2:e6:3a:4b:b6:55:cc:
46:40:fe:9b:44:c5:80:38:bf:fa:9a:bb:b1:42:49:
2f:d6:9e:7b:ec:fd:f0:98:04:2a:63:22:cc:35:ce:
4d:5f:cf:68:7f:ae:ca:35:c8:4e:85:a7:3a:8b:5c:
7f:e4:e7:fa:e2:49:cf:f7:31:1b:84:12:a4:a6:f7:
e8:82:06:ae:2b:91:56:14:70:15:b6:3e:d3:a7:ec:
31:3d:c7:ec:9f:68:32:fa:33:c0:26:30:04:af:9a:
45:29:86:63:69:d5:d9:d2:1e:fb:f2:36:f1:ac:00:
20:33:8a:41:b7:99:dd:c7:9e:71:70:32:14:af:2d:
cd:18:a6:d1:fc:f9:0d:e7:fd:fc:56:27:89:22:1e:
c9:3f:23:49:c4:a0:8c:29:d5:bb:8f:46:65:74:7a:
c4:c4:05:b8:b6:b5:75:15:fe:2c:60:e7:85:33:df:
3d:6a:6b:e9:e5:da:63:ec:1d:aa:3e:29:d5:e7:d2:
d2:41:c1:28:c7:24:b2:79:93:e6:ff:c1:44:4a:9a:
df:49:b1:b7:11:5b:ce:e8:bb:dd:47:ff:f8:e4:76:
c3:20:27:c9:98:3c:8c:2e:b7:26:dd:b6:f0:fd:ac:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:79:A2:13:B7:49:FD:EC:40:A2:68:26:7E:6C:32:06:EA:EB:D8:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/488da631-c757-3d3c-9dee-32f02da1f756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.crl
X509v3 Authority Key Identifier:
keyid:8E:BB:F2:E3:60:81:10:44:78:D8:26:ED:81:E7:DD:3A:B5:BC:3C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.cer
sbgp-ipAddrBlock: critical
IPv4:
130.12.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:ae:7f:8c:e9:0e:53:b0:49:5f:38:07:6b:be:d4:a7:1f:26:
3e:d2:f9:b9:be:06:86:95:47:fe:29:d4:20:3b:13:7a:a3:22:
9e:ce:b6:14:a3:8b:01:06:db:8c:45:5d:c1:c8:c8:35:9f:14:
f6:07:77:4b:47:a3:74:07:92:e5:b9:93:34:a7:49:c8:7b:d0:
54:16:54:c5:eb:18:6b:78:bc:00:9a:f6:20:c8:ab:a0:4e:73:
28:31:1c:50:29:f7:24:a2:56:e5:29:ac:d0:8e:29:e1:df:c1:
c3:0b:96:6f:7e:cc:45:c6:a8:e6:69:45:0c:6a:e6:2a:79:d3:
aa:30:f4:e2:f4:16:5d:89:bd:53:b9:14:ae:ad:8f:69:96:3e:
ba:ea:91:4d:2b:79:ce:9b:bc:16:36:d1:fa:89:04:93:09:2c:
89:2e:0f:ea:6b:45:9c:11:6c:62:b8:5d:c3:b5:9b:d6:f7:be:
33:0c:ce:73:46:11:54:ec:f8:d8:99:84:bb:f0:9f:0f:42:77:
45:55:12:37:43:d9:c2:56:60:32:56:a9:6f:30:2b:f7:8b:89:
f1:57:1c:49:59:72:e3:2d:15:24:4b:54:25:c8:aa:e5:e7:78:
5e:3d:f3:65:a6:f7:f3:70:cc:4a:af:9f:7e:23:a9:14:b2:4d:
aa:6c:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:53:27 2026 by rpki-client