
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa
File: 5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa (raw, json)
Hash identifier: LszGWiZfka4Yo92FdKjFG6WLGL44LOoN8h3EJr1YYpQ=
Subject key identifier: 7B:53:FC:79:FC:CA:DE:85:04:22:2E:53:E4:DA:21:BF:AB:3F:F6:6D
Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial: 010D0C9F4328584DD78B10D3531E2A6C95C4B8C0
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa
Signing time: Fri 15 May 2026 13:00:30 +0000
ROA not before: Fri 15 May 2026 13:00:30 +0000
ROA not after: Thu 13 Aug 2026 13:00:30 +0000
asID: 21782
IP address blocks: 68.66.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 26 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d7:8b:10:d3:53:1e:2a:6c:95:c4:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Validity
Not Before: May 15 13:00:30 2026 GMT
Not After : Aug 13 13:00:30 2026 GMT
Subject: CN=bd457bb3-6c55-4e0d-ac21-02a406abb876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:a4:e9:69:44:a0:3f:27:d4:06:f0:02:b1:
fd:e4:92:dc:0b:5d:17:a6:4a:9f:9d:41:f8:e3:e1:
5e:81:08:15:25:b3:33:bb:86:07:30:3f:f1:94:dd:
d7:ee:f4:8f:93:a0:a0:4f:19:ca:e2:b2:aa:95:dc:
30:ea:c5:99:c1:c8:d7:4a:f0:32:3e:fb:7d:dc:52:
21:07:f6:4c:ec:06:c5:e5:de:b9:40:e8:ac:84:c9:
d7:48:c9:4a:93:11:6a:9d:66:25:4b:9c:0c:26:f7:
cb:22:9e:d4:b5:e7:84:69:31:af:5f:c7:3e:22:5b:
16:b4:67:e7:40:70:88:6d:91:5e:06:a5:ce:e6:c1:
60:a7:66:1c:aa:4e:22:a2:b4:ce:56:a6:d0:77:33:
cc:24:ec:54:fe:bf:0d:8f:ed:94:7f:ea:e8:1f:1b:
cf:ed:1d:36:8b:3e:10:45:df:7a:68:3f:ab:70:36:
f7:43:70:06:39:14:b7:b4:2b:91:de:da:95:da:b4:
e9:03:15:61:37:e6:68:f9:f5:fd:c7:a6:05:d9:28:
d2:b4:70:14:db:c9:1d:72:ba:37:1d:b6:00:39:a2:
61:d7:69:57:6c:92:d2:88:c8:96:29:db:ab:a3:97:
bd:7d:e6:7e:5a:2a:66:01:6f:02:8d:ec:3f:fd:ea:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:FC:79:FC:CA:DE:85:04:22:2E:53:E4:DA:21:BF:AB:3F:F6:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
X509v3 Authority Key Identifier:
keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:c3:8a:80:37:a2:60:59:b0:92:64:64:03:50:23:68:db:37:
d4:94:9e:0b:b9:33:a1:f2:a1:29:32:89:89:73:4a:b6:00:e8:
5f:b8:fe:0a:bb:92:66:5e:b5:66:f3:09:32:18:db:67:5a:54:
c3:29:5a:b9:52:d2:27:75:40:f0:70:08:ba:3f:71:97:50:a0:
b5:6e:dd:93:54:02:29:4f:62:ea:cd:cb:39:e0:f3:2a:81:69:
18:3a:81:f5:97:c1:56:29:fc:03:74:cc:1d:7e:56:0a:41:86:
47:e4:3b:de:e7:5a:75:a0:07:d9:4c:ce:c4:33:7d:21:b1:7e:
02:5b:50:f4:56:c2:7d:5e:31:97:d5:c8:6e:59:f1:be:90:b5:
83:6c:5e:5a:c2:b8:44:af:ca:c1:c3:34:9d:a9:67:14:bc:21:
fb:26:ab:aa:33:26:d5:45:0e:06:f4:d5:94:83:7f:de:eb:2d:
0a:16:0b:5b:d7:0f:56:d0:85:11:7a:a8:e7:be:bc:6c:e3:16:
38:76:28:7a:35:88:2d:3c:95:0f:91:46:3b:d4:e3:6f:43:ba:
76:3c:17:f9:98:c2:e5:08:71:6c:36:b9:9c:44:fa:82:03:46:
36:59:0f:91:d2:fd:f6:65:21:e3:4b:d8:a2:6f:08:b6:76:44:
1b:76:e1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 05:40:13 2026 by rpki-client