
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
File: 02fc3568-a294-3f7b-a040-efba2cd76305.roa (raw, json)
Hash identifier: H1tWuvvGxip3Zbyf0JywpbFYJGSrlP4EPdSOTEOeDcE=
Subject key identifier: 2A:BE:CB:A7:E3:94:46:4E:42:06:1F:87:67:C5:C2:98:13:95:97:39
Certificate issuer: /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial: 010D0C9F4328584D59EA728B677ACE9829E94780
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 8075
IP address blocks: 67.210.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:72:8b:67:7a:ce:98:29:e9:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=cf942989-2c94-4673-9fa3-f73dfbd9f614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:2b:06:e2:b9:44:9b:c5:73:a6:34:87:e7:
1e:db:17:dc:b9:c1:ff:0f:79:fe:53:90:f2:7c:43:
4e:b3:3c:57:92:52:1f:70:8a:5b:83:a2:47:fd:d6:
d9:14:aa:3a:fd:47:3b:d0:f3:c0:e0:53:c0:db:78:
19:28:8c:ab:fb:1a:05:58:b8:a3:92:34:d0:ce:67:
db:f6:71:fd:6d:70:bb:93:fb:a8:7d:ae:dc:28:56:
47:34:87:e3:c9:3e:39:43:f6:a0:df:f6:a5:af:ce:
e3:83:69:d5:28:7f:b7:5e:3c:9c:34:46:e0:37:07:
07:5d:c8:64:a1:b3:85:4a:64:5c:47:06:ca:0b:fb:
da:60:90:2b:31:6a:a1:d2:5c:2e:b3:49:64:3e:59:
52:fb:68:93:6a:1f:b9:95:53:81:1b:f0:e2:9f:be:
64:9d:74:95:42:9f:4c:ae:57:13:79:ec:42:b6:81:
bc:a2:b2:61:87:69:b4:da:64:94:48:7b:92:50:ea:
c5:4b:55:2e:48:4d:20:ec:47:35:8f:e7:02:13:0b:
5b:5c:6b:f0:ba:9e:d0:9f:43:a6:af:e4:15:c2:51:
a3:11:f4:79:cc:51:5a:84:9b:86:ae:b6:e7:e8:97:
f6:67:ce:1b:b5:83:69:39:e0:17:22:3f:d4:b7:8b:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:CB:A7:E3:94:46:4E:42:06:1F:87:67:C5:C2:98:13:95:97:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
X509v3 Authority Key Identifier:
keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
sbgp-ipAddrBlock: critical
IPv4:
67.210.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:22:53:70:0f:23:3d:1e:b3:f2:27:f1:8f:96:3f:2b:84:ca:
98:5b:2f:5b:22:90:51:27:59:61:2a:b6:1f:87:92:6c:86:aa:
34:fa:76:e6:c0:62:27:c7:40:34:d2:d8:79:fc:32:f3:fa:f9:
6c:02:8d:6a:a1:97:00:87:d4:48:cb:e5:48:67:b3:19:9e:bb:
05:cc:f3:19:45:ab:f1:d9:46:ce:91:2d:06:b4:40:9b:5a:3d:
47:83:4a:12:25:3d:b6:f2:a7:28:e2:77:00:01:0c:b8:4b:3f:
e9:3c:ab:88:22:16:28:ef:dc:20:31:2a:d9:f7:98:74:da:a3:
88:6a:7d:cf:b9:ae:43:ad:07:ae:d3:ea:62:14:dd:d6:c1:e3:
c5:ed:fb:8a:36:10:18:81:ac:c0:44:e0:60:07:6b:dd:e4:31:
79:98:a8:88:9f:73:8f:a6:1b:83:4f:cf:b2:7e:cb:3f:10:6c:
79:1f:cb:fb:de:ba:7f:00:06:fe:e2:e4:b7:d4:77:50:89:63:
68:34:a4:11:a4:8c:b7:33:9b:83:16:8d:8a:e5:20:74:04:a1:
bf:e6:3e:5b:3f:7a:09:cc:f5:84:ff:a7:33:5c:78:b2:7d:07:
6c:7e:18:f6:2b:77:9b:54:3e:94:8d:cb:25:1d:d4:c6:f6:22:
3f:ba:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:45 2026 by rpki-client