
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/67ef72dd-b75f-305a-a4a1-5212862e7eab.roa
File: 67ef72dd-b75f-305a-a4a1-5212862e7eab.roa (raw, json)
Hash identifier: EnxWZrsiwP/y2QbdfOuC2eXYYhOm6CmbUfhNCbLWs3o=
Subject key identifier: 6C:18:0A:F5:5A:DF:03:B7:3F:8E:3E:E4:B8:61:FC:66:76:B5:40:1E
Certificate issuer: /CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d
Certificate serial: 010D0C9F4328584F10379774C6ADDEC8E9781C00
Authority key identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/67ef72dd-b75f-305a-a4a1-5212862e7eab.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 401647
IP address blocks: 208.84.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:97:74:c6:ad:de:c8:e9:78:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=29673254-0bd9-40dc-9470-c41b651278e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:6c:34:7a:a2:82:9b:c9:c1:c3:e0:8c:5c:
b7:19:09:3d:ca:af:03:30:6f:21:f7:e1:82:e4:a5:
f9:3f:26:db:e5:8a:c4:a8:bb:07:00:18:1f:85:98:
66:2f:ef:10:bd:80:36:94:3f:d4:f0:ca:dd:e0:f4:
3f:09:7f:e7:49:ce:ab:34:aa:5d:72:97:d7:76:a4:
2e:b6:32:4a:6f:ef:75:4b:cc:41:8f:c8:c1:ae:00:
9d:38:d4:ee:41:0c:b1:40:06:cf:06:a3:3b:4f:a5:
15:14:ac:27:a0:f8:c4:38:64:ff:1e:b7:71:9a:a4:
3c:8c:ba:75:a0:d3:a2:e6:40:db:40:36:c3:7d:9f:
51:8d:d8:9a:d4:9f:81:87:59:62:4d:83:a4:3b:6e:
1c:aa:3c:a4:4f:30:4f:56:e2:3b:c2:c8:0c:39:20:
30:f7:1c:04:e3:2a:77:19:8c:2f:57:42:14:eb:bf:
2e:63:38:1f:19:52:6c:ac:d4:ed:cf:29:f0:68:ad:
51:8c:34:a1:c8:32:20:bc:31:16:36:58:29:f6:5c:
c1:5e:9e:fb:9c:d3:5a:b5:6e:5c:01:4d:11:41:96:
9a:97:08:42:9b:fe:57:22:7e:64:f1:35:14:ab:4a:
11:23:c8:11:3b:20:6c:43:a0:67:60:8d:3a:7e:fa:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:18:0A:F5:5A:DF:03:B7:3F:8E:3E:E4:B8:61:FC:66:76:B5:40:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/67ef72dd-b75f-305a-a4a1-5212862e7eab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl
X509v3 Authority Key Identifier:
keyid:28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.84.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:26:25:ae:67:ec:f5:4a:18:e3:3a:d5:63:20:f8:35:66:de:
83:32:e3:9e:dc:46:48:12:24:98:af:d2:80:70:c3:a5:8c:c0:
5d:5d:1f:d8:8c:0c:d5:0b:62:05:da:58:52:e9:d3:5a:25:06:
5b:21:94:e2:bd:8f:83:e1:1d:30:60:b6:df:27:0f:83:cc:da:
46:47:80:0e:14:60:4f:8e:c8:67:db:32:5d:34:8a:a3:a7:49:
dc:de:82:55:a9:1c:8c:34:e2:cf:8e:2b:5f:7f:14:a3:2a:c0:
58:16:d8:43:c7:a3:95:79:cc:75:ec:63:06:12:3b:c2:d5:aa:
8e:35:99:10:ec:69:31:52:39:58:af:99:c0:56:82:0a:04:f3:
7f:d9:64:e5:59:cb:ec:d8:61:44:40:d8:e8:02:28:23:ac:0f:
da:b5:74:7a:c6:99:d6:f1:0f:17:f1:55:8b:2f:5b:7b:b5:fb:
14:43:94:88:b9:fc:1a:8b:91:5c:d6:5c:c3:f8:54:00:42:81:
db:ed:a7:e3:b3:51:65:74:47:d3:3b:13:7d:8c:24:3c:af:1f:
eb:ec:60:78:0c:fb:5f:ce:15:63:9c:01:d3:61:ea:f1:92:2e:
12:a3:52:36:94:b3:e8:26:25:d9:49:6c:c6:1b:cf:14:d8:23:
18:1b:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:47:04 2026 by rpki-client