
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa
File: 8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa (raw, json)
Hash identifier: VQ19V7i9N5R6cpSQqF6N02bkkqcLeWL8uFcmtVUmiOM=
Subject key identifier: 94:35:15:FB:EE:CC:B8:A5:20:A9:91:F2:B3:54:92:23:86:00:05:E7
Certificate issuer: /CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b
Certificate serial: 010D0C9F4328584EA788D4F95084CB83961C58C0
Authority key identifier: 35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 40111
IP address blocks: 170.118.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:d4:f9:50:84:cb:83:96:1c:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ff4c1539-19f2-4a97-8d54-64475afa9ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:c6:85:cf:5a:5d:89:20:76:fb:2e:b8:78:
65:3b:25:30:ea:c9:50:28:f1:96:ed:32:d7:28:82:
30:76:46:7f:b9:d7:8b:9f:92:0b:ee:b0:77:9e:a4:
23:2f:74:cf:f0:22:b7:ac:d6:50:dc:be:76:d6:a5:
f1:92:7b:1d:02:25:b5:8f:bd:3d:6b:14:d9:59:6d:
2c:e3:e7:85:16:f0:df:73:cb:1a:5b:84:33:86:7b:
13:cb:e0:2e:2e:3f:5f:ff:c2:98:c0:ae:24:4d:d3:
c3:dc:1c:24:6b:ad:11:3d:5d:fd:a1:b2:a5:a8:7e:
cc:62:06:df:4f:b3:a8:e6:97:8b:26:05:39:6e:41:
84:2e:60:f9:61:67:f7:52:eb:5e:7c:b0:57:f3:33:
cd:35:71:3b:0d:56:7d:89:02:ff:a3:37:eb:98:7e:
47:ad:0f:ec:32:12:49:68:76:56:63:22:9b:92:23:
86:f9:86:34:da:48:c7:3b:9b:d9:7b:07:45:4e:41:
96:e5:77:87:53:9d:33:32:c3:57:8c:a0:5c:40:ec:
9a:12:1a:94:dc:75:a0:d8:c8:e4:a2:14:2b:eb:76:
7e:d9:5d:2d:2a:f5:c1:05:02:86:92:a4:b7:bf:e8:
29:b5:8d:a9:79:f0:33:1b:aa:3d:56:db:89:01:c7:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:35:15:FB:EE:CC:B8:A5:20:A9:91:F2:B3:54:92:23:86:00:05:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl
X509v3 Authority Key Identifier:
keyid:35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer
sbgp-ipAddrBlock: critical
IPv4:
170.118.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:0a:62:da:0e:c5:25:f3:43:c8:b0:ca:88:0f:1d:b6:a9:35:
7d:65:1f:54:c0:4d:ba:91:92:02:5a:f2:24:de:ad:af:5b:ce:
71:f5:da:96:e0:aa:33:ad:09:be:37:8a:f0:4e:2b:8b:09:e7:
02:79:aa:76:7b:1e:be:ac:a4:4b:07:5f:30:5f:75:ec:96:c8:
34:5d:76:cc:5f:95:aa:46:55:4d:f8:69:5c:4b:78:1b:13:dd:
55:be:7b:91:8a:a5:1b:c7:00:57:5a:10:2a:aa:fd:28:cf:4a:
82:97:d1:dd:a4:73:52:a7:7a:49:1a:87:4e:62:cf:cd:73:6c:
ad:f7:64:89:e4:8e:86:c6:b4:b4:9b:f2:ba:d8:f2:ef:a5:03:
cf:13:e6:27:ca:aa:51:d0:69:6c:e5:e3:e7:0f:79:ad:e6:3b:
ea:05:81:eb:04:3c:c1:ab:8d:ee:54:47:98:86:01:e3:01:b7:
05:34:e1:d8:10:30:e3:73:d9:24:da:d1:e0:4f:fe:fa:58:0a:
e1:18:ea:18:3c:f3:53:d8:e0:df:e0:ca:0c:a6:0a:04:0c:12:
7e:4f:f9:20:06:8a:5b:83:4c:a3:03:76:85:c0:72:b1:be:46:
92:2b:dc:25:cd:ba:05:fc:1f:aa:60:30:55:d8:11:8d:34:d8:
5d:8c:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:47 2026 by rpki-client