
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
File: a665e37a-2264-3b19-b8a4-ae270c10d73a.roa (raw, json)
Hash identifier: FZpa3DV8YNNqcCgLD58uBBNEyJgB2tqcCBsfvGFfZ1A=
Subject key identifier: E5:6A:58:D7:A1:61:5D:7F:88:A2:44:32:CD:45:A3:96:D8:F9:8C:81
Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial: 010D0C9F4328584D746FD9C16752C895AE64BD20
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 3565
IP address blocks: 208.68.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:d9:c1:67:52:c8:95:ae:64:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=a1c7ce32-1380-4a2a-9aa7-ad7f364d01f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:77:8f:ea:4c:c5:54:cb:c4:eb:35:b2:81:
d7:c6:46:80:ff:42:06:50:70:cc:e0:10:8b:d5:3b:
76:ce:39:f3:be:5d:ca:82:d2:93:c3:ab:5a:91:b6:
51:14:87:73:54:11:d5:2b:4f:b5:61:46:f0:dd:64:
b8:e1:14:eb:87:68:dd:f6:0b:57:e7:d7:c9:64:34:
32:c8:7e:c2:c1:d0:ed:ce:50:45:1a:4a:f4:e1:9e:
c3:55:d8:86:e9:b5:be:8f:fa:7a:38:02:e9:b6:6d:
d6:f9:0e:f0:7a:ab:4b:c4:8a:47:df:c9:0f:56:ad:
24:b4:10:90:f5:f2:56:b0:aa:90:dd:3a:2c:93:2e:
6a:e2:48:01:c7:21:3f:cb:84:3e:88:75:6e:89:f9:
24:23:c6:41:56:16:bb:9c:7d:83:5c:b7:7e:1e:cf:
6e:de:52:83:98:c0:2e:8f:78:3b:49:79:c6:ac:da:
be:de:e6:34:15:cf:87:b8:67:d7:5b:88:52:c1:32:
01:ee:7e:1e:28:f8:da:ee:b9:e0:6a:15:a8:dd:01:
c1:9e:8f:9f:bd:7f:c3:9d:60:6d:ef:6f:af:9f:38:
fe:87:cd:67:5d:66:a0:93:e4:42:91:7b:23:c8:ae:
e1:47:90:72:a0:09:04:44:73:59:45:bd:c7:8f:c2:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6A:58:D7:A1:61:5D:7F:88:A2:44:32:CD:45:A3:96:D8:F9:8C:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
X509v3 Authority Key Identifier:
keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:8c:d1:5a:fe:b9:0f:21:77:f6:16:0d:21:2b:9b:7a:ac:f7:
85:73:ab:ac:22:17:cd:f1:7b:6c:41:e5:45:a8:49:88:8f:1d:
34:2f:f9:45:cc:86:b3:b5:53:52:64:2c:92:36:97:2b:26:95:
77:ec:61:24:1d:51:82:ae:62:94:13:1f:73:d8:3c:57:0f:10:
d8:22:75:00:63:1f:22:a2:96:ea:14:a0:54:65:85:8d:47:d7:
6a:ae:7d:af:2a:58:fb:40:04:6b:cb:30:4e:8c:a1:96:51:7f:
f5:1a:50:6b:01:81:3a:c9:8e:2f:c4:b2:e8:40:50:9b:e5:a4:
2b:05:ff:5d:ef:a3:86:33:19:94:d2:2b:0a:fe:b9:02:4d:88:
6e:a1:c5:95:13:c0:50:e3:c8:40:ba:0c:d4:9f:3b:49:f8:f8:
02:fd:da:0b:25:cc:49:90:41:ca:b9:ad:e5:09:57:8f:a9:1e:
da:12:b8:8f:f8:a8:db:e6:b7:60:9d:b2:00:c3:01:60:7e:b9:
1f:a9:be:e2:98:6c:15:eb:36:f4:3a:9a:7e:da:43:07:4c:88:
5e:12:87:ef:da:17:af:de:c3:2d:43:d2:cb:6b:1b:45:d4:22:
d2:d9:d7:12:f0:08:3e:9f:40:85:da:25:a0:e2:9e:27:32:be:
ba:bd:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:48:22 2026 by rpki-client