
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa
File: e4e25509-90e2-3048-8aef-d1f4b44a806e.roa (raw, json)
Hash identifier: tV4kCXH8Jqfj2ZQAgGvAkwOKbyKAn1mazCQT+XTl3E8=
Subject key identifier: 75:04:7D:4A:E4:8F:A1:EF:DF:1C:A9:20:4B:09:85:53:8A:FF:1C:31
Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1
Certificate serial: 010D0C9F4328584C50D12BA1ED1608C040278960
Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa
Signing time: Fri 26 Dec 2025 14:00:39 +0000
ROA not before: Fri 26 Dec 2025 14:00:39 +0000
ROA not after: Thu 26 Mar 2026 13:00:39 +0000
asID: 22987
IP address blocks: 152.86.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:50:d1:2b:a1:ed:16:08:c0:40:27:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1
Validity
Not Before: Dec 26 14:00:39 2025 GMT
Not After : Mar 26 13:00:39 2026 GMT
Subject: CN=11a5948a-c5b4-4feb-b4b0-9893156db25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:80:21:fc:ff:13:80:0c:4a:4b:a8:ae:94:
77:48:85:d2:62:ef:3a:be:7e:2a:87:b2:1d:52:f5:
37:e0:dc:bf:db:09:ae:52:9a:68:b0:80:7b:d1:0e:
21:fb:d7:00:c6:31:26:33:b2:ae:32:e9:18:76:96:
4d:19:aa:e8:0a:9f:a9:9e:20:26:73:0e:d2:eb:74:
d6:0d:2b:f5:76:f9:a9:c8:72:d1:00:72:9f:70:d0:
70:67:4d:77:91:f3:02:b9:25:33:b7:1e:a6:dd:a8:
78:0a:c2:35:ce:53:26:89:ec:44:cb:15:41:d3:7b:
4c:32:e7:dc:54:be:a6:30:16:ec:61:a1:bf:1e:21:
30:22:3b:27:04:0a:b6:50:94:c2:e8:63:52:03:12:
aa:48:b6:53:63:7a:7e:5d:21:75:fa:9f:13:16:22:
e5:6d:09:ed:19:f6:6a:ca:ef:41:55:a3:78:9f:09:
41:ac:b2:6a:89:e2:5e:36:84:8e:14:59:6c:fb:cd:
b4:5b:71:1e:d1:20:49:29:27:0b:ca:74:c4:2a:b1:
3d:37:25:c2:02:c1:90:19:eb:01:6f:3a:84:7a:54:
1a:b2:32:e6:a6:48:56:37:95:1c:85:be:85:ea:9e:
e0:e9:bc:c1:9c:ed:06:5e:1f:a5:9b:5f:74:35:12:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:04:7D:4A:E4:8F:A1:EF:DF:1C:A9:20:4B:09:85:53:8A:FF:1C:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl
X509v3 Authority Key Identifier:
keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer
sbgp-ipAddrBlock: critical
IPv4:
152.86.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:d1:a7:36:b6:3e:de:5e:42:57:d4:42:1f:56:6a:0e:b4:1d:
36:35:1c:59:00:16:d7:78:4d:d3:af:8e:c8:13:ce:14:68:8a:
a5:f2:17:2b:a9:e6:cb:23:b0:13:08:6b:a3:66:19:4b:3a:e9:
2e:14:f7:e6:a8:16:7c:c5:90:4d:d7:bd:dd:38:fc:6b:df:77:
e6:29:e2:df:9f:65:bd:f9:24:b3:38:e0:dd:52:9a:22:2d:8f:
23:c2:ef:d3:9e:18:52:02:ce:8e:b8:58:39:6f:39:dc:6c:4c:
8a:42:40:41:d1:61:d4:29:ea:f6:26:3d:db:06:15:d2:f4:7a:
b7:69:8f:f6:de:1d:45:33:3b:3d:4a:4e:cc:75:57:62:df:3e:
97:3c:e8:91:55:e6:2b:b3:30:4e:0b:2d:7e:05:b6:03:6e:bc:
46:4f:3e:3e:f4:37:39:22:89:af:5b:27:9d:58:ef:49:3d:55:
ba:06:9d:b3:0f:5e:c5:4e:6f:f3:a9:c8:d6:99:6a:32:0f:71:
2c:aa:99:95:7a:2e:d2:22:69:e1:52:02:90:69:bf:0b:0b:bf:
6a:e6:fb:e4:58:ce:9d:8b:6a:87:7f:29:dd:a6:d6:4b:bd:ec:
1a:8d:73:0f:70:be:f4:6f:4e:db:4a:b8:0d:68:e5:13:ab:d8:
22:9b:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 21:37:01 2026 by rpki-client