
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/06b7fe3a-c402-3e2d-a08e-00bc55dece03.roa
File: 06b7fe3a-c402-3e2d-a08e-00bc55dece03.roa (raw, json)
Hash identifier: h0VtTKQBFCTpa0p2xt/SMw6JlJZGgdoqTMMyrjo9Peo=
Subject key identifier: C3:88:B7:EA:10:2C:61:FF:54:A7:DC:8B:87:4F:AC:52:F4:68:DF:75
Certificate issuer: /CN=394f8a71-e67c-4be3-b260-617b3f6602fe
Certificate serial: 010D0C9F4328584EFDD96C0ACD810B04AC77F600
Authority key identifier: CE:93:CA:03:FE:BF:F4:6C:2C:FE:B8:06:1C:66:46:1E:AC:A2:E5:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/06b7fe3a-c402-3e2d-a08e-00bc55dece03.roa
Signing time: Fri 28 Aug 2026 23:06:06 +0000
ROA not before: Fri 28 Aug 2026 23:06:06 +0000
ROA not after: Thu 26 Nov 2026 18:37:25 +0000
asID: 394581
IP address blocks: 172.110.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fd:d9:6c:0a:cd:81:0b:04:ac:77:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=394f8a71-e67c-4be3-b260-617b3f6602fe
Validity
Not Before: Aug 28 23:06:06 2026 GMT
Not After : Nov 26 18:37:25 2026 GMT
Subject: CN=8e8b1164-26ee-40ac-a305-3966e0f36d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:73:9e:b1:fa:40:dd:cc:9a:e4:8b:f6:5d:42:
0f:27:68:4c:c1:8a:46:b1:ad:c6:01:4a:50:15:7f:
41:83:5b:8e:1d:0c:74:ef:75:dc:21:d6:9b:c6:2d:
58:9a:1c:29:00:3c:8a:81:09:18:fe:c1:2b:7d:62:
b8:c4:ae:9e:25:30:0e:49:31:1d:2c:17:58:0b:2d:
21:17:8f:6d:91:e5:6b:05:7d:27:e0:1a:df:b2:75:
e4:ea:72:24:35:39:06:d0:95:65:3d:29:7d:57:95:
de:90:b1:51:3b:34:ad:a0:f2:c4:d4:d3:16:3e:08:
92:e1:0d:55:e9:f5:05:59:8d:c0:03:27:e3:30:d3:
bb:ff:4c:00:7f:d7:71:8f:2d:24:2b:14:30:48:0f:
3f:69:cc:86:a1:9d:77:5c:e7:a7:ec:36:bc:45:65:
c5:ea:c5:ff:1e:1e:2e:f2:07:e5:b9:6e:95:3e:e9:
f0:13:2d:cf:ca:db:8f:52:fb:23:b6:6d:71:91:36:
ef:e1:16:32:3a:76:7b:f9:c1:9a:91:14:db:c8:df:
f4:9e:ce:de:e4:55:49:81:75:c1:57:17:e0:43:8e:
31:00:69:3a:e6:74:c6:81:d9:3a:cc:9d:b6:6a:29:
3a:de:f4:24:be:aa:4f:ce:0c:e8:53:66:40:f9:69:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:88:B7:EA:10:2C:61:FF:54:A7:DC:8B:87:4F:AC:52:F4:68:DF:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/06b7fe3a-c402-3e2d-a08e-00bc55dece03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.crl
X509v3 Authority Key Identifier:
keyid:CE:93:CA:03:FE:BF:F4:6C:2C:FE:B8:06:1C:66:46:1E:AC:A2:E5:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe.cer
sbgp-ipAddrBlock: critical
IPv4:
172.110.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:bf:aa:07:55:18:22:84:df:08:b9:76:2f:4e:88:d7:36:b6:
2a:86:a3:29:e5:a2:54:eb:d6:3c:5f:8d:ba:d2:f1:e3:88:e5:
1e:65:f7:43:5f:38:6f:37:46:25:d3:ab:09:05:9a:af:f7:55:
76:0e:84:dc:1e:1f:0d:ad:e7:74:9c:06:ca:88:fe:65:5a:a2:
04:be:ac:fe:81:01:cd:76:8e:6f:90:b4:1a:c6:f0:d3:03:f7:
99:31:f3:de:09:26:e0:14:74:c1:ab:c0:d3:0a:2c:b1:39:4d:
6e:47:f7:27:7b:b4:d6:5b:54:08:d8:91:32:71:de:3c:1e:8c:
8e:19:16:03:60:96:00:57:54:89:dc:cd:06:69:bf:23:04:78:
62:34:ae:84:77:23:3b:69:d6:a8:58:ac:71:55:73:ea:3e:e7:
8f:2a:52:0f:fe:a1:27:92:84:33:cf:56:23:7e:35:03:40:5e:
26:93:b8:d4:78:d7:96:ca:d0:68:ed:f1:b7:a8:1c:be:d0:0c:
6a:fc:96:69:95:26:1b:4f:40:47:40:51:91:20:8d:b8:11:49:
44:db:95:79:e5:e7:ae:e7:e0:6a:a5:51:36:7e:96:87:05:81:
55:97:15:06:57:33:a6:25:99:2a:e2:4e:ba:cf:e2:5e:12:53:
42:5f:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:55 2026 by rpki-client