
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa
File: 880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa (raw, json)
Hash identifier: kjGA5IzI0MZiuIfI1+zp3TqruH2HHjzKjrd+Xn9k4I0=
Subject key identifier: 95:87:E5:42:5F:6F:AA:F9:00:C3:1F:BC:92:E3:9A:67:CD:C3:B0:F1
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F4328584F1467A1A08BDB663356BC7280
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa
Signing time: Sun 06 Sep 2026 01:00:11 +0000
ROA not before: Sun 06 Sep 2026 01:00:11 +0000
ROA not after: Sat 05 Dec 2026 02:00:11 +0000
asID: 36352
IP address blocks: 65.99.193.0/24 maxlen: 24
65.99.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:14:67:a1:a0:8b:db:66:33:56:bc:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Sep 6 01:00:11 2026 GMT
Not After : Dec 5 02:00:11 2026 GMT
Subject: CN=683a436b-d79f-42b2-a873-4b3a4b135f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:b1:2e:a0:c4:2b:f7:28:7b:e2:c5:c0:64:
ee:da:a8:d6:ee:4e:44:9a:bb:9a:b4:7c:9f:bf:e0:
95:9f:56:cc:54:2f:ce:82:e1:d7:ef:59:4c:60:97:
7d:ee:cb:d6:d9:c0:92:17:71:8f:f7:94:73:e1:d8:
00:88:e6:1c:b5:2e:b0:58:12:de:98:21:c7:86:62:
4a:55:41:13:75:2e:e5:63:81:e3:7e:03:1f:2b:c7:
db:80:1e:13:a3:60:d8:8f:7b:2c:95:72:b2:e1:74:
8c:22:22:34:b5:32:c5:7a:c7:62:e4:01:33:cf:ab:
70:c9:a2:8a:22:58:b0:c8:e1:14:12:43:5c:0e:0c:
84:a4:e7:01:7d:8b:a1:09:93:3e:36:9c:14:4e:08:
92:99:dd:a6:d7:76:50:5c:c0:fc:da:a6:25:f3:db:
a6:92:53:13:1c:a6:b2:28:9d:ec:41:c1:08:26:db:
66:f2:b4:22:6b:d5:96:79:ea:a5:bb:89:0d:16:93:
4d:60:23:28:ef:d1:bb:82:80:db:02:bb:2c:61:54:
a0:41:c1:9f:2a:71:e1:ee:d6:76:12:e8:c1:ff:ac:
10:92:66:a8:32:a9:a2:1d:bf:01:e3:b5:0a:22:81:
c6:4b:de:9f:36:77:12:a7:b8:2f:b3:4d:ee:46:f5:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:87:E5:42:5F:6F:AA:F9:00:C3:1F:BC:92:E3:9A:67:CD:C3:B0:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
65.99.193.0/24
65.99.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:bd:fb:88:bf:28:f3:b9:89:69:d2:ff:85:bc:60:ec:d0:dd:
18:3a:58:5d:5f:e0:ba:54:ce:9c:19:a4:03:08:82:ed:a0:7f:
c3:35:93:a3:ce:53:11:c3:62:fd:4b:5c:d3:ae:5a:83:1d:9d:
59:c5:e3:c6:33:ef:20:2a:e9:1b:52:52:84:09:cb:2f:0d:11:
fd:34:fa:e5:0f:b4:cd:0d:7e:c5:7f:6e:4a:27:c5:b1:6a:95:
f6:8d:d6:8f:ca:ba:98:97:2e:98:02:30:13:88:e1:a9:5d:7d:
e4:ab:ea:86:0d:17:93:0f:78:a8:75:4d:82:23:02:88:6d:60:
38:62:8b:9d:f7:ef:fc:a9:7f:8d:75:f5:51:e3:75:db:1f:d3:
7a:71:32:02:d4:f0:dc:a8:f2:61:61:e0:a3:ca:ca:4f:a0:74:
f5:78:f4:3e:d6:99:93:48:c5:23:a8:8d:43:7d:ac:a3:dd:e5:
ba:9c:22:6c:9a:fb:13:35:94:f6:fb:90:0a:56:ce:1a:2a:7b:
2f:02:48:b8:b1:d4:45:66:c5:8c:07:c5:5a:83:b0:0d:b4:3c:
41:ae:0c:6b:bd:c5:aa:f0:7e:5c:12:42:ff:a2:32:58:c9:5c:
23:52:4a:27:1f:5e:65:e0:e0:db:1d:7e:25:cd:7e:31:d9:3f:
63:f9:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:20:09 2026 by rpki-client