
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
File: 23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa (raw, json)
Hash identifier: C0dmDVvSIBlfNgYq219elmjVfZCmHl0FX73M3YPGy08=
Subject key identifier: 22:8D:7A:9E:A6:BC:A5:2D:B8:BC:13:47:25:E3:B1:AF:80:00:42:51
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328584E6144AA84EBE26C43D797A700
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
Signing time: Fri 03 Jul 2026 21:00:11 +0000
ROA not before: Fri 03 Jul 2026 21:00:11 +0000
ROA not after: Thu 01 Oct 2026 21:00:11 +0000
asID: 14618
IP address blocks: 85.113.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:61:44:aa:84:eb:e2:6c:43:d7:97:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Jul 3 21:00:11 2026 GMT
Not After : Oct 1 21:00:11 2026 GMT
Subject: CN=1b5dbe5d-d1ae-4d6d-9972-8826c621846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8b:90:74:21:ae:0a:73:ff:09:30:60:2b:1c:
ba:08:75:a5:98:e7:58:67:0d:47:0f:8d:b2:e0:5a:
5a:e5:29:f1:a1:9a:e0:74:4f:36:4e:71:5d:54:f9:
ab:03:2d:64:ed:27:6b:3f:99:51:87:02:d3:6f:64:
d6:69:27:b6:4e:33:ce:3e:19:37:d0:d9:1d:dc:23:
22:1b:15:cd:a7:be:e6:cd:88:32:d3:fa:83:58:b6:
4c:03:db:08:59:01:47:96:0b:a4:44:51:48:8f:8f:
bd:17:3a:36:a0:49:cb:e6:f9:22:94:68:f6:a2:e4:
55:da:8a:b2:82:99:d3:2a:50:86:58:6c:98:f6:f2:
8f:7c:96:9f:00:d5:5d:de:5f:7d:e3:c2:72:73:2d:
db:e6:62:fd:75:a2:5f:19:2e:b6:a0:58:f8:86:ba:
57:75:2a:74:63:10:fd:85:05:3c:92:e4:f4:b7:26:
0d:73:2c:15:4a:08:aa:1c:26:2b:53:08:e3:84:c1:
d2:0f:c9:c3:de:87:28:eb:a5:3a:f1:0c:92:cd:8b:
64:f3:29:84:1b:78:bf:c7:c8:03:46:b5:ce:a8:b4:
6d:50:86:58:5e:ce:30:d3:ee:a6:34:e2:50:09:c0:
fa:5a:0a:7f:5b:82:03:34:1f:04:6d:76:5d:8c:80:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:7A:9E:A6:BC:A5:2D:B8:BC:13:47:25:E3:B1:AF:80:00:42:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
85.113.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:6c:d3:20:7d:23:4e:25:75:60:2b:80:3b:b8:10:c9:88:7b:
85:ab:8a:ef:c8:fb:6d:88:2a:50:35:ba:29:7d:05:57:9b:92:
c9:00:86:97:36:5b:ab:ae:4f:32:52:00:ed:16:39:3e:75:ff:
55:29:e4:3e:cb:5f:4e:e4:b5:8b:49:5f:76:86:7a:20:3e:fe:
ef:0e:d1:f4:02:b0:a1:ff:00:1b:1c:2b:51:61:08:8c:a2:78:
35:45:4a:77:38:6c:bf:82:70:95:27:98:35:5f:dc:e7:aa:54:
25:67:36:15:d2:90:df:5a:3b:96:8f:ea:f0:ef:44:be:f4:91:
30:b0:d7:46:b4:51:ea:3a:1d:9f:91:cb:d3:09:a6:36:39:6c:
41:0f:2f:70:8f:28:4e:6d:06:17:c1:92:5c:d8:1a:d7:46:9d:
c0:c5:4d:a1:d7:56:d8:46:50:44:b9:cb:7f:47:82:a6:ee:a6:
c5:6a:66:58:01:c5:24:48:b4:b3:4d:74:d0:d0:b4:89:0f:95:
4f:66:df:45:6c:af:8f:08:8c:8b:68:69:5a:1a:4f:98:0e:aa:
ad:5a:e4:0f:59:9b:ff:25:d9:b8:0a:16:c0:9d:c4:3c:f5:62:
3d:6a:ac:81:1c:b8:cc:d0:23:e1:eb:7e:2f:c8:de:86:97:7b:
e9:3c:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:18:03 2026 by rpki-client