
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa
File: 87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa (raw, json)
Hash identifier: TsrlkcYk2Ta8eNKpAeIAHvsjsyXw/DBQ/tYg6Gx3uys=
Subject key identifier: 64:2F:E6:C9:2E:ED:C6:AE:FC:88:BA:24:56:F0:41:E5:98:82:F7:AE
Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial: 010D0C9F4328584ECBD1E1DAFCC610E99C4D4970
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa
Signing time: Tue 11 Aug 2026 01:00:11 +0000
ROA not before: Tue 11 Aug 2026 01:00:11 +0000
ROA not after: Mon 09 Nov 2026 02:00:11 +0000
asID: 4226
IP address blocks: 199.192.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cb:d1:e1:da:fc:c6:10:e9:9c:4d:49:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Validity
Not Before: Aug 11 01:00:11 2026 GMT
Not After : Nov 9 02:00:11 2026 GMT
Subject: CN=80f3025c-6c66-4bca-8b61-6731c092c318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:99:a6:b2:7a:a4:3f:7a:11:9b:7b:e4:ba:
ba:17:7a:7c:9f:28:c4:d8:89:86:76:15:29:cd:d4:
15:8a:60:5d:38:d7:57:ea:ef:b4:05:4a:1b:68:d6:
dd:bb:36:79:9c:53:ff:cc:a8:d4:4f:8e:38:d6:88:
8c:3e:9b:89:4a:29:eb:b5:20:28:d3:89:92:ed:38:
cf:71:35:81:fb:83:3b:5b:0e:33:54:08:49:9c:be:
53:be:69:95:79:a6:6d:84:95:e9:d1:2a:f3:92:47:
d7:e5:fc:f1:a7:7a:00:16:b1:f2:8c:c1:76:91:20:
22:40:92:1a:ec:8d:2a:c3:32:b3:59:ee:c6:0f:15:
7e:76:25:fe:14:aa:97:6f:22:75:0f:79:4f:04:43:
26:12:fa:1f:d9:17:ae:bc:8c:90:10:a3:5f:db:01:
07:6c:e5:80:6e:86:ab:a1:4f:40:e5:b3:a1:2c:d0:
c7:90:e9:56:8f:f9:c1:70:f3:3d:c6:40:a9:2f:72:
0c:00:87:56:be:89:e9:7c:f1:e6:0b:ff:9a:08:65:
08:a7:fb:59:51:14:27:c1:d6:de:79:e1:ce:e2:6e:
8c:e4:35:ed:eb:b5:8d:9e:3b:69:4e:95:45:36:3b:
e6:a6:72:b0:a5:05:72:04:ed:bd:45:64:32:ef:79:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2F:E6:C9:2E:ED:C6:AE:FC:88:BA:24:56:F0:41:E5:98:82:F7:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
X509v3 Authority Key Identifier:
keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
sbgp-ipAddrBlock: critical
IPv4:
199.192.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:41:b5:8b:f2:77:c3:42:45:9a:7e:d8:aa:c7:23:85:78:9e:
00:98:dc:b3:25:34:13:ab:63:e4:36:ee:d9:50:9b:06:85:10:
23:c2:80:d7:a6:8e:c7:56:04:9f:5c:9f:5a:c4:18:26:a9:48:
46:b1:0a:42:04:68:32:c1:af:e2:4c:3f:a3:df:46:5c:61:06:
c7:6f:0f:35:48:8a:86:3d:01:ae:7c:19:09:59:85:23:78:5d:
8d:f8:f7:c8:09:fa:c4:25:ca:47:56:c3:65:22:b4:c3:a8:69:
ff:8f:7d:0e:4f:24:46:eb:56:ab:8f:70:18:f8:36:b0:70:fc:
31:7d:69:c5:ff:d7:03:31:3b:85:4d:a7:5f:d9:08:69:1b:99:
dd:cb:ea:56:ca:48:1a:a3:df:09:2a:42:01:a0:c7:eb:e4:a1:
45:59:72:b0:26:f1:85:12:d2:31:a1:6f:c0:ed:7d:9c:42:18:
41:1a:22:0c:f6:fe:58:18:f4:d6:65:c4:14:57:37:e8:dc:36:
8f:a4:29:80:38:76:d2:b7:e4:f7:2e:40:5a:c9:97:bc:6e:3d:
5b:ac:6b:c3:85:52:1c:6e:5c:a8:96:e9:a0:22:d2:28:d7:00:
13:4c:94:2f:6f:54:e3:f5:9d:3c:98:c8:16:c4:6a:4e:8f:5c:
d8:8b:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:11:58 2026 by rpki-client