
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa
File: 2d8ee973-4f04-3f39-80ec-35239969bcee.roa (raw, json)
Hash identifier: ZX1dK9MEhnyo3LuCeAhDEv8pvWBuv2Q9+GjvgFXvgyw=
Subject key identifier: 7E:C6:9C:12:EC:1D:B1:9D:32:34:46:EC:DB:AB:1D:F5:23:3B:82:28
Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial: 010D0C9F4328584E0C1ED22DAFA124DBAE144060
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa
Signing time: Wed 03 Jun 2026 09:00:13 +0000
ROA not before: Wed 03 Jun 2026 09:00:13 +0000
ROA not after: Tue 01 Sep 2026 09:00:13 +0000
asID: 11892
IP address blocks: 168.146.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0c:1e:d2:2d:af:a1:24:db:ae:14:40:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Validity
Not Before: Jun 3 09:00:13 2026 GMT
Not After : Sep 1 09:00:13 2026 GMT
Subject: CN=09f9a01b-5748-4f73-920d-92c790de6e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:00:56:5b:ad:5b:a0:6a:21:f6:3a:5f:aa:
23:12:f2:25:9d:1c:64:7c:2b:28:fd:d9:36:7a:cf:
e6:14:b7:2e:0f:ff:b9:ac:29:e3:0e:30:f0:49:bc:
d5:f7:0d:61:ac:61:eb:85:70:9a:c3:ab:24:ba:41:
31:36:a1:00:fe:9e:bd:5b:7d:7a:78:96:61:ce:65:
49:38:94:71:62:99:c0:98:27:32:12:59:05:0f:2f:
e9:52:59:fa:23:2e:81:e8:74:cc:63:db:43:e7:52:
e3:65:67:0d:c2:65:a7:1d:61:f7:fb:5d:50:d8:71:
e3:8d:88:57:a1:4b:37:42:f0:ab:09:13:25:69:27:
6a:3a:e4:c6:f7:12:80:9c:e5:75:86:a4:8e:97:e8:
95:b3:c4:62:b3:3e:57:71:8f:c3:9d:14:fc:10:20:
31:1f:f3:1f:bd:01:5d:17:67:83:80:a0:e4:08:a1:
56:3b:cf:79:6e:e9:32:e6:2f:46:f7:35:d0:d1:29:
9a:09:6f:c4:3d:ff:df:62:c2:c3:68:ed:c9:f3:e7:
1d:b8:88:6c:ba:77:1b:c7:0d:0d:fc:f3:19:9f:9f:
7b:9a:f8:9a:86:dd:1a:97:9b:bd:63:04:48:71:74:
2f:a1:72:45:c0:ad:0d:ff:c5:df:b8:f4:5a:8d:dc:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:9C:12:EC:1D:B1:9D:32:34:46:EC:DB:AB:1D:F5:23:3B:82:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
X509v3 Authority Key Identifier:
keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
sbgp-ipAddrBlock: critical
IPv4:
168.146.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:d1:75:dc:41:cd:86:84:5c:4c:cb:a2:b9:49:91:3a:a7:bf:
5f:2e:22:87:ef:67:05:cf:12:34:95:b8:ed:43:05:0a:c1:21:
fd:10:79:fc:b9:2c:5b:a7:8b:01:b7:c9:32:14:3d:ef:9a:ea:
f0:4f:f1:5a:19:22:77:df:45:b1:22:ee:55:ce:05:cb:5c:14:
93:8d:f6:c4:88:5c:f4:44:85:09:86:17:30:92:3a:c1:91:bb:
89:70:c3:60:80:89:be:71:53:2c:24:3f:8b:c7:32:23:b7:67:
8a:41:0c:b7:6a:61:f1:49:88:c6:4a:89:64:fd:73:92:7a:48:
f3:7d:b9:25:3f:bd:99:5f:45:ab:c6:d3:a2:ea:64:99:01:05:
98:65:73:f9:20:b2:a9:b1:c5:8f:e5:48:ba:17:67:6e:8e:28:
9d:b5:58:39:5b:0b:17:d9:71:ca:99:70:bc:e3:6c:d3:bf:98:
51:00:db:37:f6:34:9b:7c:e7:e9:01:38:02:63:25:50:66:0e:
c3:e7:e2:c9:ca:e9:86:7c:d9:da:11:39:8e:3c:95:74:9e:9f:
b5:6b:6b:29:75:e7:6d:5b:88:b3:90:ee:05:b0:fc:93:b4:a3:
5b:2a:4a:21:8d:bc:16:97:6d:f5:ad:0d:ad:b7:71:da:4b:16:
50:bd:bd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:13:03 2026 by rpki-client