
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84339d5a-c571-36e5-befa-38c9a65890dd.roa
File: 84339d5a-c571-36e5-befa-38c9a65890dd.roa (raw, json)
Hash identifier: 8xNLSc9s0Trwi87LoBrDultjtJgwLvgxMcwquDxw06Y=
Subject key identifier: 3C:6E:38:0F:3F:87:55:D7:3E:E3:35:B2:3A:96:9E:23:FB:23:5A:32
Certificate issuer: /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial: 010D0C9F4328584EBB11BA5BF5AA4E7F3C385830
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84339d5a-c571-36e5-befa-38c9a65890dd.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 397606
IP address blocks: 64.52.102.0/23 maxlen: 24
170.39.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:ba:5b:f5:aa:4e:7f:3c:38:58:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=51cd60b2-967c-4633-9399-563e5c7e5ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:98:fe:50:fe:73:60:6c:e1:28:fc:21:1e:e9:
f8:22:4f:c9:46:fc:b4:ff:74:be:c3:0d:e6:68:45:
e2:90:80:18:dc:7c:b4:33:e6:e2:0e:78:89:c2:c8:
12:86:47:cf:f6:d9:28:22:25:95:0e:31:47:a7:d7:
f7:da:60:9c:62:2e:4c:f4:1b:73:fa:8a:09:0b:70:
34:75:50:12:4c:55:c7:4b:fb:26:d4:fe:99:af:e3:
4c:1f:30:a7:88:30:bb:37:ff:02:7f:0e:a8:1d:68:
a4:b2:ac:8e:56:47:df:d5:84:a2:dc:13:20:02:9d:
0c:a7:5f:3e:ff:1e:d3:1e:5b:2c:b5:36:c4:cc:62:
cd:93:cd:83:02:9c:5c:42:84:98:0e:28:78:a7:6e:
01:6d:bd:13:67:0d:c3:c3:50:fe:72:9f:13:1e:cc:
cf:60:2a:74:08:3e:d9:c6:af:7d:cf:b4:c8:09:65:
de:9e:0d:75:f5:88:a0:6a:b3:b2:68:ca:09:f5:f8:
6d:58:2c:29:36:49:ae:5e:e4:43:fd:e0:40:aa:10:
ad:1c:82:45:e9:ec:89:b1:4b:7a:1b:8b:ea:f6:5d:
80:cf:a6:c8:1b:86:9a:1b:fe:33:4b:5e:78:fb:51:
73:dd:ab:2a:f8:d9:2a:96:86:cb:fa:6c:9e:bb:d8:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:38:0F:3F:87:55:D7:3E:E3:35:B2:3A:96:9E:23:FB:23:5A:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84339d5a-c571-36e5-befa-38c9a65890dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
X509v3 Authority Key Identifier:
keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.102.0/23
170.39.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a0:05:6b:04:0d:8c:a5:d8:a5:6a:c4:fb:76:90:05:2e:b7:
c3:65:ff:23:00:d8:cd:a3:04:6f:fb:46:1b:05:2a:f8:4c:60:
a9:c0:a3:7a:13:38:09:e1:4f:97:1a:5a:bb:c5:24:d4:22:57:
40:76:52:6d:0f:9e:9c:3e:5a:21:f9:5e:ea:71:e6:44:e1:99:
46:39:5a:e6:d3:ad:64:9e:93:b4:f6:04:ed:39:6a:e1:0a:f7:
bf:15:01:01:5a:5f:d2:80:bc:55:d5:fb:27:2e:7c:f6:41:2e:
78:18:84:7b:21:b2:77:92:0f:89:fd:84:81:fe:67:1f:c9:e4:
7e:9b:cc:75:29:cf:fb:a7:99:ca:85:46:69:4a:83:4d:d6:76:
bb:d6:c5:84:46:ea:c3:46:f6:84:03:a7:f0:74:05:f0:1d:41:
c6:86:65:f2:a4:d3:96:8a:f4:ba:e7:2f:c4:d1:f2:c7:b3:55:
c1:b0:45:30:aa:1f:af:05:70:c1:e6:22:3b:e2:f0:90:01:43:
9e:f1:d2:0a:90:72:5f:56:8b:ff:52:5d:f1:d7:d4:e9:25:1b:
da:a1:e5:46:21:fa:d5:cf:85:8e:19:95:79:8a:dd:b1:90:9c:
cf:4e:52:a1:a9:33:c6:05:a7:59:21:d5:ce:ce:0f:eb:c0:0a:
20:0f:df:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:08:00 2026 by rpki-client