
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/ea249163-4763-355b-bc29-66594b81396f.roa
File: ea249163-4763-355b-bc29-66594b81396f.roa (raw, json)
Hash identifier: YhfHAb1mrzpUQhPw+KcKJp9YkFuYIX2W1vsfbixQwQc=
Subject key identifier: 42:02:8A:AB:32:F5:18:AD:43:59:69:8D:9F:30:90:F3:51:1D:7B:16
Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial: 010D0C9F4328584ECD371F1C791A05776F600BF8
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/ea249163-4763-355b-bc29-66594b81396f.roa
Signing time: Tue 11 Aug 2026 13:00:11 +0000
ROA not before: Tue 11 Aug 2026 13:00:11 +0000
ROA not after: Mon 09 Nov 2026 14:00:11 +0000
asID: 40627
IP address blocks: 208.87.40.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cd:37:1f:1c:79:1a:05:77:6f:60:0b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
Validity
Not Before: Aug 11 13:00:11 2026 GMT
Not After : Nov 9 14:00:11 2026 GMT
Subject: CN=e0b4eadb-b630-45cb-8f0b-56be6950a3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:4d:b3:7e:76:cf:d3:53:1f:f4:60:66:ab:
a8:c5:70:8f:6c:c3:e0:c6:a7:df:ea:ba:fa:e0:29:
e4:74:c5:e0:e1:f4:50:78:3d:f4:3f:22:10:f8:15:
4d:85:a1:b8:8c:53:c6:73:b9:40:f6:0a:d9:b7:5d:
9f:9b:fd:6b:45:77:de:fe:32:d2:a9:97:dc:2d:c8:
de:dd:49:89:3e:9f:94:cd:d0:0a:d4:4d:4e:a8:0b:
0b:eb:88:04:e9:e9:ab:17:9f:ad:4a:86:16:d1:a7:
c9:1b:80:69:b5:84:e8:e2:88:7c:67:db:92:54:d7:
e0:d1:63:04:a0:95:1a:37:cb:9d:54:41:ae:ae:f1:
75:76:69:fb:4b:a3:c9:70:4d:62:b9:30:b6:4a:6c:
b7:19:02:e9:3c:48:54:7b:29:30:cf:94:f6:57:87:
4b:ff:c2:2d:34:b3:4a:6a:a8:d0:c6:38:41:c8:4c:
93:bb:b5:84:15:0a:c8:f4:e8:29:66:bb:be:f7:e0:
a1:36:ac:b1:77:17:d4:5d:5f:ba:00:aa:fb:dd:ce:
8e:c8:82:96:52:49:9f:86:0d:56:5b:84:61:a9:f0:
74:00:a0:9c:bf:fb:9f:f3:04:00:67:a3:0f:83:03:
ab:0b:a4:b1:ef:a8:9e:69:43:ae:22:f6:cb:54:40:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:02:8A:AB:32:F5:18:AD:43:59:69:8D:9F:30:90:F3:51:1D:7B:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/ea249163-4763-355b-bc29-66594b81396f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
X509v3 Authority Key Identifier:
keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
sbgp-ipAddrBlock: critical
IPv4:
208.87.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:22:5b:c3:ce:43:01:69:e8:72:78:d5:8e:16:e9:b7:c7:f8:
26:88:32:04:d5:47:1e:52:29:17:05:c5:81:3a:1a:9c:39:85:
57:2c:55:74:ff:87:4b:b7:9a:5e:77:ae:52:4c:ed:4d:c4:b2:
9d:81:f0:46:5c:29:36:86:ad:8f:a9:37:cb:bc:bd:ec:3f:95:
90:ab:2e:94:68:0a:b3:5c:25:11:63:9f:59:b2:1d:b9:ab:cf:
4b:84:7b:5a:fe:19:48:ab:4e:c4:bb:5b:ee:fa:44:ee:4d:f0:
9f:01:06:ae:58:e4:b3:cd:6f:44:09:34:d6:fd:de:11:e6:8f:
9f:88:c0:7a:b1:13:fd:47:af:f5:c3:13:c3:38:f7:2b:06:71:
7b:a9:6c:58:5b:12:e7:3d:98:2d:66:9b:b9:59:03:0b:a5:1c:
4b:9f:87:86:46:37:55:55:4d:f8:2c:75:15:97:f9:c0:95:6a:
5e:00:dd:a4:16:91:ac:fe:ce:0c:93:1b:55:5b:2d:c8:e3:17:
c4:bd:ec:85:c2:46:d9:75:cb:57:88:cb:1d:0a:09:59:f9:e6:
14:ff:69:69:e3:2d:50:d3:c5:7a:44:23:77:21:65:49:b8:b5:
8b:70:40:a8:89:03:b7:c9:c7:0a:18:47:99:58:a8:41:20:c5:
09:63:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:56 2026 by rpki-client