
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/d70db827-d3b9-335e-8e6d-a58ab3d87a3c.roa
File: d70db827-d3b9-335e-8e6d-a58ab3d87a3c.roa (raw, json)
Hash identifier: 6RiVmyQmQxNBTzU/9BrfO/lDZ79Ql/3VA4MP1tGOEZM=
Subject key identifier: 98:18:87:6D:6F:93:F2:D3:84:B0:44:67:A9:87:09:C0:80:C2:ED:60
Certificate issuer: /CN=7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb
Certificate serial: 010D0C9F4328584F549D66D7ADA8213C62424580
Authority key identifier: A2:F1:70:8A:B0:6A:28:01:E2:A1:0A:67:F9:6C:43:0E:5E:C1:C8:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/d70db827-d3b9-335e-8e6d-a58ab3d87a3c.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 16509
IP address blocks: 104.219.162.0/24 maxlen: 24
104.219.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:66:d7:ad:a8:21:3c:62:42:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=4b1866bf-1a3e-43bb-8d71-4a5559a0d8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:00:cc:65:01:c5:08:4b:d0:07:0b:41:d5:
33:a7:43:0e:4b:1c:1e:59:00:3f:4a:74:f3:5e:27:
9c:15:1d:a6:e5:4f:7c:c8:42:01:b7:0b:00:52:d0:
c8:fc:1c:32:9a:e4:63:63:8c:4b:3c:72:5c:8f:46:
b2:02:80:88:cb:60:c5:6d:ca:dd:be:3e:f2:6b:a6:
16:c1:15:8a:23:e7:11:bb:a4:9c:6e:66:88:77:df:
3e:26:99:cb:53:a1:b6:e4:85:d0:f5:50:c3:a9:9e:
f3:d4:eb:4b:0e:58:c8:d6:ff:8e:1a:f4:62:27:b9:
b2:1a:84:be:2a:ca:e6:6e:47:d6:3b:20:7d:9c:bc:
30:86:98:a7:81:7e:00:e9:43:6e:06:15:dd:85:47:
c1:27:4b:ab:9e:45:17:ea:99:2d:91:e2:90:0b:2b:
a3:ed:71:9c:e2:50:66:d9:40:02:d7:0f:e6:cf:13:
47:29:2d:cc:41:8d:da:50:2d:38:e9:fc:06:7f:10:
c4:76:d7:35:c1:18:09:fa:31:47:98:cc:54:7f:71:
6b:fe:ba:b4:35:d6:7a:d6:e1:36:c1:c3:52:db:4b:
23:ee:8d:50:47:46:8d:c7:8c:dc:53:08:0b:2c:07:
da:4b:85:d8:2a:a2:ef:8a:5f:cc:0b:30:35:a3:6f:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:87:6D:6F:93:F2:D3:84:B0:44:67:A9:87:09:C0:80:C2:ED:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/d70db827-d3b9-335e-8e6d-a58ab3d87a3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.crl
X509v3 Authority Key Identifier:
keyid:A2:F1:70:8A:B0:6A:28:01:E2:A1:0A:67:F9:6C:43:0E:5E:C1:C8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:98:de:fc:db:83:41:75:1e:2c:38:e4:63:c3:19:dd:5d:9f:
d8:84:c5:1e:cb:b6:a5:4c:b9:c5:e3:d0:e5:43:39:d1:84:2d:
74:b4:9e:7b:e4:00:17:90:fa:a5:71:a3:d8:e2:6b:86:82:6b:
db:41:db:3e:c1:34:4e:ae:59:7b:4b:01:d2:cb:29:6b:a0:f6:
d5:32:d5:b2:e3:9c:81:7e:97:0c:79:7d:a4:11:22:73:db:17:
be:d2:e8:82:f2:dc:37:92:16:6a:77:7c:0a:17:7f:4f:af:43:
f7:9c:88:d3:c8:20:35:20:2c:4f:de:0d:3f:18:12:ed:c0:81:
d0:a0:be:f8:03:2e:2a:63:bb:52:e2:10:7e:f5:8c:56:5f:6a:
8c:52:55:6b:47:e6:38:ea:6e:d8:59:3f:83:e4:e1:19:2b:3a:
a5:1c:db:48:9c:42:e8:6f:0a:68:09:c5:39:a3:67:72:0b:89:
3d:11:ad:ed:4f:4d:18:f0:1e:ab:ce:d6:e2:3d:de:13:ad:ec:
f6:34:45:d7:29:43:81:6e:fb:68:aa:a3:f2:fd:26:ba:a6:b9:
4d:ca:59:f9:78:54:9c:b5:33:52:e7:d5:15:20:18:a6:a4:b0:
fb:c7:62:52:23:72:e2:36:83:83:34:1d:99:65:70:60:bf:ea:
eb:a1:d6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:49:13 2026 by rpki-client