
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa
File: 643bc75f-3310-37b8-a7ac-664e69139fad.roa (raw, json)
Hash identifier: sa02u+8iha5UB25K7WamaigW98jS7ywX1u0eojyV2Tk=
Subject key identifier: E2:11:2A:9D:14:64:94:72:2E:04:7E:A5:58:B0:D5:31:99:E9:31:7C
Certificate issuer: /CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Certificate serial: 010D0C9F4328584E210EFB096029E50181696BC0
Authority key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa
Signing time: Wed 10 Jun 2026 21:00:11 +0000
ROA not before: Wed 10 Jun 2026 21:00:11 +0000
ROA not after: Tue 08 Sep 2026 21:00:11 +0000
asID: 16509
IP address blocks: 195.85.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:21:0e:fb:09:60:29:e5:01:81:69:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Validity
Not Before: Jun 10 21:00:11 2026 GMT
Not After : Sep 8 21:00:11 2026 GMT
Subject: CN=bbbbe3b5-b597-4c5b-ae10-f5748749078f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:d8:87:d6:5f:92:1f:32:b9:47:5f:57:dc:
a1:e2:65:4c:42:8d:e5:ff:08:3a:b1:9f:de:20:13:
78:d9:e5:58:02:2b:d6:d9:55:96:5e:d9:8b:fc:c4:
f6:f4:d3:db:ec:04:42:9d:af:17:e0:80:eb:0a:28:
20:ed:67:b7:26:e0:20:73:49:d8:7c:ef:41:0e:23:
4b:14:99:bd:33:bf:e9:6f:54:b2:25:e6:a2:89:96:
93:95:5e:74:0b:84:ec:fe:31:80:40:21:85:0e:d1:
9c:ea:c6:49:07:b5:66:c2:3c:02:3a:35:35:47:5c:
1e:64:d2:71:5b:22:6b:29:c1:9e:b2:70:86:59:d8:
26:ae:96:0b:37:e5:43:71:e3:cc:a5:be:08:86:be:
06:28:b4:0b:49:9b:74:e6:80:cb:45:06:78:90:aa:
35:cd:2d:2a:0e:8e:df:b5:5c:37:43:9d:7f:db:41:
86:00:6b:7f:93:4c:cd:f4:ca:8c:b7:b2:49:4b:49:
7e:4c:1e:b6:ab:7a:58:a2:90:1d:0d:8d:d9:9f:f3:
27:b7:98:4d:87:85:90:0c:d8:fe:b6:59:c2:07:78:
fd:93:98:39:86:b8:b3:07:79:d8:2d:6f:8b:29:f5:
3f:69:81:d4:b9:d0:0f:20:f0:48:b4:13:31:af:05:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:11:2A:9D:14:64:94:72:2E:04:7E:A5:58:B0:D5:31:99:E9:31:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl
X509v3 Authority Key Identifier:
keyid:9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
sbgp-ipAddrBlock: critical
IPv4:
195.85.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c8:4b:53:5f:50:0f:5c:f4:d9:f1:66:26:fa:a6:b7:02:47:
31:89:de:0c:a4:1c:f0:d6:11:37:1d:49:d9:38:09:41:ef:e8:
69:ac:97:f5:e2:2e:51:02:6b:e5:db:40:5e:b6:eb:88:be:1e:
0f:48:c5:ce:0f:5b:ac:75:0d:d4:25:38:f1:50:94:dd:b4:1d:
c9:d6:f4:e5:b2:67:c7:63:70:a5:ff:30:5e:87:0e:5e:e1:ed:
64:d1:e5:fc:3b:af:4a:3f:f5:15:d1:58:21:6c:2b:5c:c0:d9:
cc:d0:7f:51:7f:fb:ba:6e:7a:7b:87:49:fa:d4:63:df:5a:ef:
9f:47:3d:96:09:ac:e5:9a:6c:d1:08:70:18:69:5e:73:f3:be:
e2:43:b5:5e:e8:79:4a:f0:5b:51:1f:56:e6:be:5d:d6:33:a1:
16:e5:a9:59:aa:73:6e:14:65:ac:a6:8a:48:db:4b:da:df:61:
81:69:c3:53:fe:08:e9:54:b0:78:2f:4b:e2:ff:c2:63:e6:dc:
66:5a:71:22:3f:d2:0e:e9:86:5b:e2:49:48:52:64:e0:1c:cd:
a4:25:9c:07:18:bf:ce:74:d2:94:ba:aa:60:b9:a5:9f:08:e7:
79:69:54:d1:73:ea:0d:cc:4d:8b:76:bc:b5:fb:a0:1d:43:41:
40:84:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:48:49 2026 by rpki-client