
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8f751a6-d81f-3824-b1f9-396a8c060dd0.roa
File: a8f751a6-d81f-3824-b1f9-396a8c060dd0.roa (raw, json)
Hash identifier: jcvXq8Rui2TknxQpIOLasE07pmAQ/gw9ULPDPI6G7D8=
Subject key identifier: 21:0A:E1:A1:4E:50:E5:F9:DD:22:DC:0F:3C:75:22:CE:80:88:DF:AC
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F6F22F9A3BFF0256539C9AC60
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8f751a6-d81f-3824-b1f9-396a8c060dd0.roa
Signing time: Thu 08 Oct 2026 13:00:12 +0000
ROA not before: Thu 08 Oct 2026 13:00:12 +0000
ROA not after: Wed 06 Jan 2027 14:00:12 +0000
asID: 7029
IP address blocks: 65.86.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6f:22:f9:a3:bf:f0:25:65:39:c9:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Oct 8 13:00:12 2026 GMT
Not After : Jan 6 14:00:12 2027 GMT
Subject: CN=8ee32367-ebc9-497c-a74f-7563f666a1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8f:b0:58:8f:a4:61:42:79:e3:53:13:42:03:
00:eb:12:8e:44:d2:62:59:96:f4:30:66:1f:96:8e:
1d:2e:7b:5b:f7:26:80:96:b0:c1:6e:61:e4:c1:d7:
21:61:45:db:e3:ce:cc:0b:45:97:55:05:71:cd:79:
7e:98:98:a3:83:1d:57:64:09:07:66:bc:f4:4b:9b:
d0:2c:43:19:30:00:55:aa:34:6f:2b:c7:6f:1f:b2:
9d:2c:06:8b:38:f8:be:01:42:b8:93:4f:68:63:6e:
a1:ef:cd:a1:2e:6f:9e:43:a8:b4:2f:05:46:4f:57:
7d:91:8b:37:98:2a:a3:41:2b:92:32:23:2d:1a:e5:
24:77:36:6e:9a:83:79:10:11:df:94:6b:36:44:b5:
75:e1:e9:84:ef:fa:cb:08:51:8f:07:d9:79:ba:c7:
bb:b5:00:42:3c:41:f1:7d:cd:24:be:58:63:fe:b8:
70:0a:94:50:4d:b5:cf:c6:87:40:a2:9f:58:de:af:
23:29:c0:d4:e9:46:75:d5:91:5a:5b:4c:55:65:16:
ae:44:2d:c6:68:19:bf:eb:27:c4:d3:99:26:23:e9:
c3:b0:5b:ee:a6:15:4b:d2:11:eb:c0:36:31:82:5b:
f4:08:aa:75:c4:8a:3c:bd:3c:7b:72:c5:f6:7d:2e:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0A:E1:A1:4E:50:E5:F9:DD:22:DC:0F:3C:75:22:CE:80:88:DF:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8f751a6-d81f-3824-b1f9-396a8c060dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
65.86.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:fb:84:7a:f6:d2:09:7e:9f:e7:3a:9a:48:2c:72:62:6d:48:
a1:2c:25:2e:ed:d0:21:ab:c2:40:01:2e:69:5b:06:8e:d8:1c:
24:01:7b:60:05:c2:84:c2:bd:0c:35:2a:29:a0:74:57:fe:07:
b6:80:55:33:7f:ea:17:33:9c:44:40:c0:c9:bb:74:a5:e7:09:
6c:d7:72:89:c8:a6:2e:bf:72:db:9e:00:d7:b1:ef:3a:21:0f:
28:d4:00:fd:12:37:f3:4c:45:34:6c:84:3e:6d:67:19:e0:d5:
40:75:5e:16:bc:2c:68:93:9b:02:e6:dd:25:e6:e4:93:b4:51:
43:6f:1e:d8:9c:9e:01:74:3f:f8:22:91:7f:29:14:77:d6:76:
06:22:ae:6f:cd:a4:2d:b0:1f:ee:28:da:9b:fb:7e:6d:ee:5d:
ca:74:4b:8c:6d:8b:41:69:d4:2e:d5:29:a8:98:77:b5:fb:88:
2c:df:f6:5f:99:71:30:4d:e8:ab:c9:3a:89:27:8d:87:cf:06:
02:9f:2d:01:0b:b8:0d:74:a1:ad:37:5a:e6:13:31:6d:cf:ca:
f5:58:23:ca:3f:c2:f9:b0:a3:1a:d0:4d:70:cf:88:37:93:49:
6f:29:e1:ef:6d:17:b6:2a:00:33:9f:8b:94:ec:cb:58:be:59:
5b:5c:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:28:44 2026 by rpki-client