
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/b86c8153-8eed-3c82-878a-5f781ef3ae78.roa
File: b86c8153-8eed-3c82-878a-5f781ef3ae78.roa (raw, json)
Hash identifier: +b3jgVaPCl+P64PZyaDE1HdLSd1r5V6wDMCvsp41Tbg=
Subject key identifier: A5:82:DE:FC:DD:A2:5A:42:62:45:DF:DA:03:77:1B:3A:E4:CD:95:A9
Certificate issuer: /CN=374c2f21-6f14-4735-b65a-b9bf6142515e
Certificate serial: 010D0C9F4328584E2C39A2156CB02CCD3B7F05C0
Authority key identifier: A4:21:FB:4B:59:9A:B7:0C:FD:75:DE:40:05:96:6F:A9:D4:B6:6D:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/b86c8153-8eed-3c82-878a-5f781ef3ae78.roa
Signing time: Sun 14 Jun 2026 21:00:12 +0000
ROA not before: Sun 14 Jun 2026 21:00:12 +0000
ROA not after: Sat 12 Sep 2026 21:00:12 +0000
asID: 11600
IP address blocks: 208.88.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/374c2f21-6f14-4735-b65a-b9bf6142515e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/374c2f21-6f14-4735-b65a-b9bf6142515e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2c:39:a2:15:6c:b0:2c:cd:3b:7f:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374c2f21-6f14-4735-b65a-b9bf6142515e
Validity
Not Before: Jun 14 21:00:12 2026 GMT
Not After : Sep 12 21:00:12 2026 GMT
Subject: CN=3bb4e973-d950-47c7-b8e7-ac06bd8712dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:00:9c:b3:22:6c:e4:0f:7e:74:09:58:17:
cc:36:e7:43:6f:29:83:6d:cd:8d:cf:63:84:c7:1d:
1b:dd:f2:81:71:d5:ca:aa:c3:d6:e0:c3:b4:1f:84:
d6:7e:b2:46:76:5a:98:09:61:ef:72:fe:f4:d6:44:
df:4d:5d:b8:c3:0c:1e:4c:45:d8:00:24:38:6f:52:
17:bd:91:67:fa:4b:07:b8:f2:66:70:1b:f7:f8:b6:
e4:12:51:5d:18:29:01:e6:96:5c:50:57:6e:4b:85:
94:ac:6a:cc:cf:ce:d1:59:9d:a1:67:64:94:19:f3:
a1:d9:85:1c:2a:56:70:00:62:d3:1b:23:80:3f:55:
a7:4d:33:55:7c:b5:de:5f:57:fb:01:25:c7:56:3b:
3b:c1:5b:80:f2:08:64:4d:03:e6:41:7f:54:c6:53:
ae:69:ae:f7:ab:ed:6e:2b:cb:9d:87:3d:1a:31:ab:
94:2a:86:85:61:d6:59:10:2a:8d:80:8f:53:e5:c2:
16:3a:ad:b5:ba:dc:e2:68:5d:9b:5c:b3:c8:27:98:
0d:85:85:c1:f0:69:e2:6d:76:6a:3b:c9:bd:ba:ab:
3b:12:7f:ad:24:5b:d4:9a:22:f6:6a:55:34:dd:c4:
36:d7:b3:fb:7b:ee:1f:95:4e:d0:f7:b7:d7:df:04:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:82:DE:FC:DD:A2:5A:42:62:45:DF:DA:03:77:1B:3A:E4:CD:95:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/b86c8153-8eed-3c82-878a-5f781ef3ae78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/374c2f21-6f14-4735-b65a-b9bf6142515e.crl
X509v3 Authority Key Identifier:
keyid:A4:21:FB:4B:59:9A:B7:0C:FD:75:DE:40:05:96:6F:A9:D4:B6:6D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:ce:ed:0c:4a:05:1e:5e:c2:36:e0:aa:50:97:af:4b:65:96:
72:de:aa:66:f0:78:24:70:3c:31:7a:93:46:87:ea:57:fc:4b:
86:5f:73:d8:77:70:b3:0b:df:10:f9:d4:df:ba:15:0d:bf:6c:
a0:0b:1a:de:91:e5:a7:03:19:14:d9:3f:e9:3d:4d:5d:6b:f3:
71:e6:67:12:d7:30:a3:93:dd:4f:c1:a1:5b:cf:cc:8a:20:93:
97:42:03:23:31:a8:7d:69:4f:81:a3:58:5e:82:4d:66:09:9f:
12:c6:36:2b:3e:70:41:3a:75:6d:2d:dd:d8:0a:45:4d:06:ec:
58:8f:95:de:d8:50:eb:ea:dd:b3:d0:5e:14:8f:fb:04:c5:80:
78:bf:79:99:6e:29:85:04:76:fb:83:3a:33:65:a0:ab:39:14:
58:cc:e7:1b:19:b5:91:7f:f4:90:64:42:29:81:80:bc:b5:5f:
29:95:aa:bc:32:36:57:35:82:81:91:1b:08:0d:9e:32:64:bd:
d2:8a:7f:ba:76:ed:00:d7:74:71:0b:2b:52:e1:f3:bc:5a:aa:
52:96:54:1e:38:27:07:95:23:7d:af:3f:49:f9:83:1a:e9:69:
22:e0:7e:41:70:8d:91:31:8a:81:81:25:01:bb:5a:e5:81:d9:
ed:33:f2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:32:43 2026 by rpki-client