
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1431a1d7-012b-3584-837e-5bdbc50b6e1d.roa
File: 1431a1d7-012b-3584-837e-5bdbc50b6e1d.roa (raw, json)
Hash identifier: Q1AMXtIdnv1qBP4O4OqKXrMLQwEKB5+4ZfgLWHyZEcw=
Subject key identifier: 38:76:7C:F2:4D:17:00:80:94:33:DB:9B:FA:77:FF:4E:BE:64:18:72
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584EA7999614FB818ABCE8965F00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1431a1d7-012b-3584-837e-5bdbc50b6e1d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16417
IP address blocks: 68.232.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:99:96:14:fb:81:8a:bc:e8:96:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a90a9cb8-f901-42ba-a42e-4a4135af1f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:ff:4f:45:a9:6b:27:8b:1d:7f:e7:03:22:
03:3d:cc:80:1f:15:5a:a5:44:99:08:b7:31:5b:e3:
11:1e:ec:c2:cc:f0:31:fd:e9:e0:1a:03:8e:e6:0a:
ef:d6:d1:ef:d2:7e:f0:b0:49:89:aa:e2:59:a2:60:
0b:d9:e3:17:ff:78:2e:cb:02:4d:50:89:13:b3:bf:
85:6f:87:64:be:b2:8d:22:45:a7:d8:68:f4:a7:f6:
0c:13:7d:b6:c4:40:48:6f:d1:7a:d9:62:b4:12:cf:
da:0f:df:3c:dd:84:71:3a:49:ed:f7:4d:b9:ac:4a:
dc:64:46:e7:2e:40:87:c9:e2:11:a6:f2:ff:56:8e:
7a:c2:c9:83:97:ff:ed:b8:6c:a2:38:87:22:8e:7c:
d0:08:a0:66:51:0c:62:07:09:e3:fc:9b:36:18:fd:
c8:d0:4d:64:12:92:c6:8c:78:74:50:8c:ae:19:f3:
b0:06:e3:29:21:44:95:38:df:89:4b:78:66:b3:a4:
00:a6:fd:a9:c8:ff:a7:25:07:5c:54:ed:a4:f9:28:
ce:10:a1:e1:5c:8e:cd:c9:3f:70:15:0a:fe:54:9f:
54:75:08:9c:71:16:54:c3:6a:41:2f:d1:9c:51:0f:
13:9b:01:0d:10:23:6b:54:d6:cf:14:59:3a:6b:24:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:7C:F2:4D:17:00:80:94:33:DB:9B:FA:77:FF:4E:BE:64:18:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1431a1d7-012b-3584-837e-5bdbc50b6e1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
68.232.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:ff:68:f8:81:31:99:a5:d9:b1:f1:c1:1e:11:50:d5:20:5f:
c8:8d:b7:73:ca:ac:8a:56:b8:c7:21:31:ef:59:e1:e2:fc:9e:
5f:c9:3f:c1:14:42:3f:3a:1f:85:54:cd:0e:aa:01:4c:4c:af:
8c:7f:83:07:ce:ef:b6:e0:67:90:ee:fa:76:e2:82:76:97:79:
13:70:67:43:87:6f:c7:da:1f:8f:e6:bd:75:f4:15:0b:65:8c:
7e:64:f0:85:68:ac:a4:7c:57:1b:57:9d:e2:a0:fe:5e:7b:8b:
94:ca:e0:6d:eb:ed:77:20:dc:a3:b7:dd:0b:d4:0b:7e:95:e0:
31:2d:f6:cd:a1:7c:ac:ef:c3:b6:3d:14:51:09:fd:ed:5f:2a:
bb:c9:4b:9c:af:29:d9:b0:06:18:71:94:3f:16:86:5f:e0:9d:
ff:07:19:6e:29:a1:a4:c0:07:8e:f0:a2:aa:8d:75:69:d2:40:
49:15:d0:e1:fd:1b:c2:94:25:a2:2e:08:17:6c:54:69:18:66:
37:59:2a:07:a3:12:f8:8b:ae:c5:81:0c:9d:c6:19:92:23:71:
79:16:92:f3:49:72:2a:4b:43:6f:fb:42:b8:47:db:70:59:59:
50:35:5a:99:7a:4e:f1:99:be:33:e7:38:61:3b:ac:dd:7a:3f:
b0:e2:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:27:01 2026 by rpki-client