
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa
File: 528a072d-fb5e-3209-b0b6-eff453de4aaf.roa (raw, json)
Hash identifier: uyFT5mLdRV0n0XQw5Y7RAdhBaOTeqDKfCGnLt5JGHfA=
Subject key identifier: 02:E4:77:A1:20:B5:E4:05:8D:FF:70:B3:F7:20:3A:63:E9:76:16:7D
Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial: 010D0C9F4328584ED001DA3612795E87331A9FFC
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa
Signing time: Wed 12 Aug 2026 13:00:12 +0000
ROA not before: Wed 12 Aug 2026 13:00:12 +0000
ROA not after: Tue 10 Nov 2026 14:00:12 +0000
asID: 6639
IP address blocks: 208.168.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 14 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d0:01:da:36:12:79:5e:87:33:1a:9f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
Validity
Not Before: Aug 12 13:00:12 2026 GMT
Not After : Nov 10 14:00:12 2026 GMT
Subject: CN=a8f11f96-1b37-48b5-87eb-6b01d31a60e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:c7:50:ef:87:d8:25:5b:09:a5:49:37:0c:
15:94:83:66:c2:3b:58:ea:5e:10:fa:2d:02:05:45:
47:65:5a:e5:78:32:da:7e:c4:a0:b4:55:8d:d3:65:
e6:29:eb:00:e0:c7:5c:9f:b6:5f:04:01:2f:80:49:
e0:aa:fe:ba:4c:0f:d5:81:69:f4:c4:22:91:3c:30:
65:f1:8a:e5:73:14:bd:db:ff:e6:55:39:68:40:31:
25:b0:c5:a7:44:8b:7d:0a:69:ac:78:7f:1b:02:aa:
44:49:47:ee:d7:79:04:b5:2c:16:1c:48:0a:ae:82:
d2:7b:7d:dd:9a:4b:b8:d9:8b:fe:8f:9d:a5:db:f4:
ff:e0:65:b7:c9:68:6f:06:81:65:12:d9:35:bc:77:
8c:a6:e1:ab:c5:e9:86:c9:7c:40:ea:04:60:23:3c:
e3:37:1e:7e:4a:a5:cf:ea:86:0e:3e:f8:d3:22:4d:
c7:47:dd:02:c1:df:9b:5e:fa:cf:1e:f5:65:61:67:
b2:73:26:0f:7f:64:3a:fd:6b:c8:fd:03:be:32:94:
d3:be:c1:87:22:7e:8c:69:8e:fa:eb:90:93:18:91:
27:bf:19:58:4f:1c:9f:30:70:e0:c8:fe:b6:d3:15:
23:5a:00:81:ed:7b:14:ab:eb:04:72:e7:7f:11:c0:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:77:A1:20:B5:E4:05:8D:FF:70:B3:F7:20:3A:63:E9:76:16:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
X509v3 Authority Key Identifier:
keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
sbgp-ipAddrBlock: critical
IPv4:
208.168.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:fd:f7:41:88:f4:35:79:ea:4f:2b:98:e3:14:7d:5c:aa:2d:
e5:81:20:a0:86:60:d3:24:c2:4c:aa:c1:b0:28:49:12:f6:ad:
20:f9:ad:d2:7d:42:ca:76:f5:e5:01:25:3a:e6:f8:ab:e6:7c:
54:29:b8:67:5e:23:b1:ed:08:e2:72:88:ed:2d:41:01:36:dd:
13:bc:5d:84:62:ff:43:af:17:6b:5c:fe:1d:76:6f:cc:40:79:
af:ae:04:1b:2b:c6:67:78:26:00:46:75:f0:45:e8:9f:c8:40:
bf:96:26:8e:67:f9:30:fe:a3:3b:97:78:1d:89:42:f5:3b:38:
77:24:3f:bf:1b:05:03:b7:12:c6:ad:d5:e9:d0:96:ce:ce:22:
eb:0d:fc:9a:af:8d:c8:a4:35:38:0f:e3:d4:6b:d7:13:6e:9e:
a0:94:db:14:d2:df:c9:55:48:ee:fc:5c:b5:34:a4:7d:88:0f:
52:00:0f:b4:2a:8c:04:18:42:5b:2a:2f:57:51:03:de:07:aa:
9e:f4:d9:81:ee:54:85:49:c9:9a:6c:42:b2:c1:f1:f8:ad:8c:
5d:1e:6e:ec:cb:5f:78:2a:93:2e:13:4d:24:b6:1f:82:a3:6e:
b6:c2:e6:d0:b2:6c:8d:89:ba:c5:a2:b6:e8:21:0d:5c:69:ca:
72:02:a7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:52:32 2026 by rpki-client