
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa
File: 8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa (raw, json)
Hash identifier: hOvJ8+BYIacBcd05HB/40NIKPZ6dv0bOuBV5jDxFbg8=
Subject key identifier: 4B:D5:AC:7F:9A:D0:1E:89:87:91:78:25:47:69:84:A6:1A:8E:AD:13
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584EA79C278C80B26C39B079DF60
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16532
IP address blocks: 66.158.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 01 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9c:27:8c:80:b2:6c:39:b0:79:df:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4d07a3c9-664a-4ba5-8710-3a20eaaa7bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:9d:fa:58:d8:80:6f:34:35:ee:4f:b5:3f:
46:ac:ef:51:1d:dc:c1:7e:2b:dc:c9:e0:42:6f:b8:
af:13:7b:b0:39:50:3e:9f:25:30:4e:9b:9a:79:a9:
49:1b:88:ee:91:87:6f:ca:2d:1d:d6:55:7e:4b:6e:
11:e4:a4:28:c2:5b:e0:61:8d:ac:c1:42:71:45:29:
75:89:8c:a7:e9:ee:10:f9:9b:b8:25:7e:10:dd:7b:
89:59:55:db:55:9d:42:84:8f:21:26:35:a7:7b:e0:
d3:26:fa:49:f5:c5:b1:6e:26:4e:f7:33:eb:6e:7a:
f1:85:94:a6:4a:e8:95:51:88:17:9d:33:81:46:28:
1b:27:66:b4:10:a5:d6:02:93:9b:01:db:0c:15:78:
f2:e1:33:14:e6:dc:b6:3e:aa:4e:3e:c0:25:30:74:
c9:82:b7:71:71:ad:b2:38:de:a7:34:d8:b1:ce:88:
30:dc:44:62:ab:43:30:5e:fe:d6:5e:8b:a4:64:90:
62:c1:77:75:81:d5:5c:29:da:cf:0e:0d:c7:b3:a3:
09:0d:8e:79:bd:ae:f6:d3:25:60:88:c7:f9:2d:13:
3a:2c:0b:2f:00:13:ed:57:20:3b:b9:5e:6a:5a:35:
d8:ab:6c:d7:d7:b5:f2:a2:b6:f8:31:e1:04:d1:5b:
35:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D5:AC:7F:9A:D0:1E:89:87:91:78:25:47:69:84:A6:1A:8E:AD:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:70:a2:13:2f:01:07:1d:f9:59:e8:76:b9:5b:89:65:83:f0:
35:0a:17:35:59:e3:63:93:82:18:fa:d3:e5:38:05:07:45:0a:
76:98:a8:be:37:3d:6c:20:02:f1:b1:45:c7:c6:30:67:92:f8:
54:32:02:de:c2:44:5c:13:ec:d2:58:33:4b:7a:d8:72:44:4a:
54:6c:3a:7b:9d:f4:41:57:ef:de:e5:dc:38:a8:ee:e2:c1:b5:
11:14:7b:e2:9b:8d:52:3e:23:53:28:97:4f:9c:e4:a6:be:3b:
12:95:40:4d:b2:4e:53:0e:f8:99:aa:e6:73:05:c8:4e:97:9f:
74:47:98:9a:a3:54:dc:d8:74:db:bd:ba:bd:34:0c:47:35:e1:
35:34:3a:7d:93:31:c2:21:97:7d:5f:3d:5d:c4:b0:93:6e:40:
e2:17:2d:d9:00:ad:ea:fd:4e:7d:fd:83:63:1c:4c:69:00:e3:
9d:fb:ab:7b:e9:98:0e:3f:44:1b:cb:07:44:f3:5e:24:e8:39:
2a:98:fb:dc:20:6e:78:55:b5:c4:08:2b:26:f2:3e:a1:40:6f:
0b:94:ca:6e:3f:a5:ae:33:9f:37:a1:e5:f8:24:3b:8e:f5:56:
ed:c5:3f:27:b9:63:9a:85:53:11:c0:80:1c:af:3a:71:89:0c:
81:be:2e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:15:53 2026 by rpki-client