
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa
File: 2d8ca45f-228d-3ffc-9008-f26a1700290a.roa (raw, json)
Hash identifier: +CPw0OWaM1rzylMDSL2NuJZJRVkZ2CZH4fRLCrxy7Nk=
Subject key identifier: B8:C6:61:64:C9:0C:F6:04:12:CD:9C:54:FB:51:6A:BC:D8:08:8F:9C
Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Certificate serial: 010D0C9F4328584F093CEDFDAC97884DF0515420
Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 8075
IP address blocks: 216.99.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:ed:fd:ac:97:88:4d:f0:51:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=25d7b103-b3c2-4251-8e31-6909d1480de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:f5:36:e2:4c:98:65:e3:8b:2d:86:bf:50:
fa:cc:0f:31:78:52:b5:13:b1:61:25:72:52:7b:93:
9f:1a:d8:60:d6:d3:e8:ae:68:e1:dd:cd:0d:a0:7b:
e0:0e:64:1e:69:28:ca:ba:4c:09:02:fc:7b:57:97:
02:6e:f2:5c:7f:ef:fd:2a:f4:d7:a8:af:5d:a9:e9:
09:23:36:17:d4:62:e8:3b:22:a1:27:cd:de:e4:fa:
02:ad:93:71:07:6d:e1:e3:e4:7c:c4:98:2e:03:df:
13:2a:6a:8f:1a:29:60:73:02:19:b8:a8:41:17:84:
17:98:c0:73:83:10:fa:7d:66:f7:f8:d2:00:d4:0c:
03:10:c1:fd:6c:6f:1c:e1:0c:76:4d:66:bb:8a:10:
a0:de:7d:97:ea:3a:1d:23:b3:43:80:47:26:62:c7:
01:69:88:a8:2a:91:9a:d7:cd:a4:8c:43:fa:19:e6:
7e:de:ff:b9:f8:98:1d:a7:1a:c8:b0:82:8b:3a:aa:
32:0c:46:41:91:6c:06:fa:c9:8b:a4:2d:9e:01:c4:
a7:76:61:06:15:4e:41:85:22:63:85:42:0d:fa:0f:
4e:e9:5d:c5:9a:ba:7a:e9:c1:10:02:79:e4:b8:d6:
05:ec:cd:2c:4b:60:54:80:ea:75:f9:63:65:4a:2a:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:61:64:C9:0C:F6:04:12:CD:9C:54:FB:51:6A:BC:D8:08:8F:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
X509v3 Authority Key Identifier:
keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.99.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:ef:d2:29:2e:39:3c:7b:f8:fa:16:e4:d4:41:28:e6:03:f1:
d0:ba:54:02:5a:1c:ed:2a:67:1f:64:72:7c:9d:20:c8:10:c5:
78:54:b8:44:a9:52:d7:90:4b:58:02:4a:09:d3:a1:51:03:76:
5d:b2:b2:6e:dd:58:ae:3a:39:d7:a9:7f:2c:d3:16:26:d9:c6:
80:73:b9:a3:ff:57:e2:6f:af:46:c9:a9:4d:ac:d1:41:41:3b:
ff:11:00:8a:09:4b:43:4d:71:89:2b:ab:99:80:cc:c8:c4:af:
98:58:cb:42:59:9f:69:56:33:16:00:cf:bf:bf:b4:ff:47:25:
08:a5:53:88:72:14:dc:3b:2b:2a:8e:fc:27:3a:67:49:1b:0e:
3d:5f:9d:d5:a1:48:b1:59:9c:30:99:5c:6f:d3:1c:0c:a8:35:
bb:8c:ad:20:41:63:63:a3:38:d2:cc:60:09:db:e3:6b:02:a9:
af:61:f7:2c:24:2e:f6:d3:3a:f8:5a:62:7f:ec:2c:49:c8:c6:
6a:b7:e1:68:26:60:98:2f:b9:2a:69:d4:2d:c4:3f:d7:22:5c:
8f:2c:ce:4b:b0:05:fe:04:1c:63:07:e9:cf:c3:e0:d5:23:0b:
85:7a:ff:e9:0f:1d:26:e5:c8:53:4c:0a:be:9c:b1:1c:9a:cc:
43:c7:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:51:32 2026 by rpki-client