
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563/72084fb9-f383-3ccf-b433-03ee7aba3a10.roa
File: 72084fb9-f383-3ccf-b433-03ee7aba3a10.roa (raw, json)
Hash identifier: 4OJ2hwhO1G1QaF21CG+mibWKT2aQt9n/TkoPqPDWc34=
Subject key identifier: BB:5D:2D:90:11:C1:0A:8E:EB:70:FD:4D:A7:15:DB:50:BB:F5:09:A3
Certificate issuer: /CN=2c212b17-58af-41bd-91e5-6527210da563
Certificate serial: 010D0C9F4328584F698D780FDD3F50A430A37900
Authority key identifier: 88:6A:9D:50:EA:BD:E8:22:B1:9F:A4:1A:32:80:41:18:1F:E7:FA:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563/72084fb9-f383-3ccf-b433-03ee7aba3a10.roa
Signing time: Tue 06 Oct 2026 13:00:13 +0000
ROA not before: Tue 06 Oct 2026 13:00:13 +0000
ROA not after: Mon 04 Jan 2027 14:00:13 +0000
asID: 11917
IP address blocks: 66.111.48.0/22 maxlen: 24
2620:13e:1000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563/2c212b17-58af-41bd-91e5-6527210da563.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563/2c212b17-58af-41bd-91e5-6527210da563.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:69:8d:78:0f:dd:3f:50:a4:30:a3:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c212b17-58af-41bd-91e5-6527210da563
Validity
Not Before: Oct 6 13:00:13 2026 GMT
Not After : Jan 4 14:00:13 2027 GMT
Subject: CN=fbadcf51-532e-41d3-b3f1-97bba2937c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:8c:60:e6:16:16:24:04:57:c5:28:38:71:
67:9c:2e:ae:e0:a3:d4:2e:5f:43:09:4e:39:1c:ce:
2d:8e:62:e7:45:4b:19:a3:4e:65:c2:a7:fb:39:98:
8c:87:bb:b6:15:9d:92:00:e6:23:bd:bc:c4:69:7c:
b2:7c:f4:fa:97:3a:e9:71:9d:ed:05:50:5c:41:13:
ee:d0:e3:84:b2:cb:3e:fe:4a:5f:de:34:7d:db:60:
53:f5:1e:fd:41:cd:83:84:b3:05:9f:8d:54:d5:9c:
3a:40:a9:23:c0:b4:ca:56:6e:88:b9:8b:5d:a4:17:
b1:ed:1b:06:f1:62:b9:98:31:fd:b5:81:bb:08:32:
54:bf:7b:e3:2e:cd:1c:bd:02:78:7a:00:48:d0:43:
a3:bd:51:9a:6f:d7:d9:42:9f:92:41:eb:67:00:77:
3b:08:43:9a:a3:a6:fa:95:bb:6e:ef:9d:45:c6:b4:
01:21:58:84:80:9b:d4:39:9c:7d:d1:9f:b4:cb:9e:
21:8f:0a:50:c0:c4:6b:b4:5a:32:a4:1b:87:04:9a:
12:3a:23:99:2d:c5:2e:22:48:85:48:51:88:d6:2d:
a7:30:b3:ff:21:f5:ea:ca:5a:e8:ce:de:01:9b:66:
b0:66:0b:ee:0c:de:85:54:ac:9c:ce:07:3d:b1:b2:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5D:2D:90:11:C1:0A:8E:EB:70:FD:4D:A7:15:DB:50:BB:F5:09:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563/72084fb9-f383-3ccf-b433-03ee7aba3a10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563/2c212b17-58af-41bd-91e5-6527210da563.crl
X509v3 Authority Key Identifier:
keyid:88:6A:9D:50:EA:BD:E8:22:B1:9F:A4:1A:32:80:41:18:1F:E7:FA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563.cer
sbgp-ipAddrBlock: critical
IPv4:
66.111.48.0/22
IPv6:
2620:13e:1000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:76:f9:67:1a:27:12:2f:2f:19:ad:14:93:35:de:ac:d7:8e:
0c:09:3e:71:fe:59:28:d5:6c:2d:f7:a6:13:40:66:9d:b6:38:
91:75:1e:ae:37:7c:75:6f:da:eb:1e:2b:2a:48:a1:e2:eb:eb:
5e:e5:61:9e:12:b0:f2:92:ec:76:62:31:95:b3:56:45:1a:69:
5b:cd:44:1a:6c:19:5d:ca:c4:20:12:b5:c2:79:78:8d:a4:df:
cc:47:71:65:0b:45:bb:c8:5c:8c:a6:bf:c0:d2:9d:f2:70:2a:
24:b2:96:f1:88:92:e3:62:f7:2b:52:4a:4f:25:f7:52:fa:e6:
09:ea:01:39:60:af:1f:0b:c6:4c:00:54:40:15:bb:2d:5b:79:
db:d0:26:79:ad:f7:17:9c:b1:ac:6a:7b:ef:75:be:22:ce:2c:
a7:73:e3:ca:a6:86:59:dd:6d:8b:b5:16:f6:5a:97:28:67:93:
58:96:63:9c:ec:ad:c6:2f:81:62:62:09:5c:ad:e2:3c:37:f2:
e5:d7:f2:d7:ff:80:f8:43:ef:1d:e2:6a:d5:62:63:5e:21:e7:
5d:25:40:a7:d9:2f:b4:b8:d9:c8:80:1b:32:e5:b3:f4:fb:fe:
87:b2:9e:80:db:02:1e:f4:47:a5:ef:b0:8c:31:c7:b6:13:3f:
ed:b4:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:32:56 2026 by rpki-client