
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc90fb1f-131a-319f-8021-f5cd2b494e41.roa
File: fc90fb1f-131a-319f-8021-f5cd2b494e41.roa (raw, json)
Hash identifier: ZDjp8hjFR+3eJQzR9GJf+WGkiX4aZHzK8eydU2M99SQ=
Subject key identifier: C2:E9:D4:93:6D:8C:AA:AA:36:AD:01:13:BD:34:66:0B:E4:8C:50:02
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584EE38CA67108F5CB94665E1120
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc90fb1f-131a-319f-8021-f5cd2b494e41.roa
Signing time: Wed 19 Aug 2026 13:00:11 +0000
ROA not before: Wed 19 Aug 2026 13:00:11 +0000
ROA not after: Tue 17 Nov 2026 14:00:11 +0000
asID: 398112
IP address blocks: 66.128.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e3:8c:a6:71:08:f5:cb:94:66:5e:11:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Aug 19 13:00:11 2026 GMT
Not After : Nov 17 14:00:11 2026 GMT
Subject: CN=89f5c0c6-eef4-4033-a6c4-293814d0da26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:e3:92:82:2b:0b:b3:95:6c:5b:c2:43:0b:
18:83:b3:cf:a6:4a:21:c9:5f:1f:42:67:93:f0:37:
f7:d3:68:f0:82:12:6b:fe:a2:45:dd:e4:1e:4e:43:
d8:1e:10:d9:bc:bf:1f:3d:e9:06:4a:23:e3:ec:4e:
02:27:36:85:9e:d3:dc:b5:e9:61:ea:da:89:48:12:
24:b6:2a:c2:16:1b:71:dd:9c:0a:8b:16:0b:c1:2b:
fd:63:34:0f:58:a0:54:95:43:81:22:38:2e:ef:ff:
62:52:55:74:31:17:a6:e6:4f:71:37:4b:f9:62:c5:
f5:d0:1d:8d:19:99:21:91:8e:dc:32:27:07:cc:31:
b1:75:c8:9a:4c:a2:ff:25:15:e5:17:cc:96:55:18:
16:01:d4:ce:b2:b7:6b:d5:ed:b9:03:37:95:5f:77:
dc:04:e3:65:30:80:cc:4d:61:9a:12:50:9e:f9:a6:
c3:89:b3:d5:56:5c:fe:29:ea:39:c8:d9:1b:d4:98:
94:11:47:69:e1:32:7b:68:c2:4c:18:ad:cd:2e:35:
ab:7c:37:5d:92:f1:fa:06:ec:94:16:ae:96:09:14:
6f:e8:2f:00:de:36:c3:c9:73:00:81:27:65:91:31:
e5:fc:0c:e1:2f:ca:11:d8:fa:cd:8c:a0:48:d9:e7:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:D4:93:6D:8C:AA:AA:36:AD:01:13:BD:34:66:0B:E4:8C:50:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc90fb1f-131a-319f-8021-f5cd2b494e41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:0d:06:9e:02:86:6a:2d:2c:0f:26:0d:75:a8:37:1b:2d:2b:
28:f6:cf:b2:82:a1:33:02:67:4c:ab:8f:60:45:84:59:a0:65:
f9:6e:a9:79:b2:fb:51:1e:db:39:df:71:50:9e:15:63:38:f0:
91:03:a3:1a:11:78:85:83:a9:b1:d6:f0:d1:ab:f0:8c:1f:37:
35:54:60:56:60:66:63:6e:32:5b:67:e9:99:85:cb:16:6f:52:
b1:da:6f:d1:3d:38:a0:a8:e9:2d:34:d6:3e:06:ec:c6:f9:ae:
e0:90:ac:a6:1d:d2:fa:23:99:8e:14:c4:19:62:ba:dd:d9:c7:
54:72:c4:9f:da:b3:9a:2f:25:ba:72:93:a3:24:e2:af:c2:64:
a5:6b:b6:94:d8:2c:89:4b:64:97:6f:c1:29:e3:42:d2:86:41:
ed:be:49:c3:52:74:5c:08:d0:a2:c3:16:52:27:67:ce:b2:5a:
56:46:f7:11:14:4d:ca:e5:ff:68:d6:d9:ee:64:3b:9e:52:be:
06:89:38:6a:5b:d8:11:bc:93:f1:1d:0c:4c:ee:59:5a:3e:3b:
48:c8:e4:e3:f7:c1:35:16:a3:1f:5f:92:4f:c6:2a:c4:fd:ab:
68:a3:28:8a:df:ba:a4:82:48:6c:93:6f:7c:4a:c2:89:37:80:
ad:da:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:16:52 2026 by rpki-client