
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa
File: a608f687-956f-3a69-a09e-16935b98a870.roa (raw, json)
Hash identifier: WnSy1RvkirQ8t5ShgkLRsJFcRCtSMafCcwJH9HGwG/8=
Subject key identifier: D9:0F:8D:67:6F:D4:C9:2B:A7:A5:19:D9:27:3F:D5:D2:EC:8B:C3:14
Certificate issuer: /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial: 010D0C9F4328584CFB1CFF736B475ED921DEA540
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa
Signing time: Wed 25 Feb 2026 14:00:39 +0000
ROA not before: Wed 25 Feb 2026 14:00:39 +0000
ROA not after: Tue 26 May 2026 13:00:39 +0000
asID: 0
IP address blocks: 198.179.18.0/24 maxlen: 24
2001:504:2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fb:1c:ff:73:6b:47:5e:d9:21:de:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Validity
Not Before: Feb 25 14:00:39 2026 GMT
Not After : May 26 13:00:39 2026 GMT
Subject: CN=a66f72ec-1f4e-44c8-93b1-2e460e20217e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:04:e8:d1:25:46:78:9e:f0:f7:50:12:b5:
3c:33:b0:09:67:51:c8:d5:ff:6e:48:f3:3e:5b:a2:
5f:f2:7e:18:c2:5b:7f:54:68:49:10:6a:85:17:e8:
96:f5:09:b9:c7:08:46:9e:8f:fc:72:83:60:56:d4:
08:c7:c0:ec:ae:ed:be:20:96:ff:aa:9f:c8:82:7a:
67:45:68:c8:49:e2:9b:3b:c3:6f:f2:82:cb:58:51:
70:7a:4f:64:b3:55:9e:0e:85:d3:b3:3d:d3:5d:a2:
2e:42:16:62:74:82:f0:e7:2c:5d:e1:79:6e:9d:df:
3e:fb:df:60:d7:27:5d:8e:f9:8d:10:0f:e6:78:79:
dd:66:cd:5f:8e:17:bf:f5:97:61:42:c7:01:32:25:
fc:e3:e2:99:47:59:57:42:90:03:bc:57:1a:7d:0b:
88:3e:48:08:38:c1:63:f5:5d:af:ad:3c:6c:b6:b4:
20:ed:9b:23:ad:96:e8:ea:3b:2a:54:ee:fc:00:cb:
d7:a5:d9:dc:14:32:e9:5b:b0:8f:ef:3a:73:c7:60:
a6:57:76:2b:bd:57:41:3f:5a:ea:b3:cd:21:59:c7:
e9:4b:32:34:34:ac:82:d2:7d:2b:93:09:54:4c:f3:
8c:8e:e3:2d:29:4b:44:bc:ce:6b:38:01:5f:a4:ff:
76:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:8D:67:6F:D4:C9:2B:A7:A5:19:D9:27:3F:D5:D2:EC:8B:C3:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
X509v3 Authority Key Identifier:
keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
sbgp-ipAddrBlock: critical
IPv4:
198.179.18.0/24
IPv6:
2001:504:2d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:30:c3:27:8f:58:e3:a2:85:9b:37:b3:5d:75:94:98:0b:52:
0c:3b:eb:91:f5:8d:51:5d:12:33:77:ee:29:ff:d6:32:18:8b:
fa:8c:81:23:3f:31:f2:b7:4d:04:b6:52:ae:19:2e:37:0f:9b:
4a:e9:8d:46:30:b2:c4:f2:83:92:39:eb:7f:97:36:ad:07:b8:
22:b4:1a:5a:c5:d9:f7:bc:72:cb:2f:e1:a0:09:2e:f8:38:c7:
e3:7e:01:7f:76:54:85:36:e8:af:b2:97:12:be:f0:ed:7e:67:
75:a6:61:f4:ac:ca:51:88:54:74:d8:bb:38:7f:85:55:2d:4e:
f4:f8:1d:db:98:c6:b3:a0:3e:11:1d:f6:b8:28:69:26:f3:30:
22:7a:5e:34:64:2c:3a:56:2f:c6:51:55:4f:03:89:8d:79:7f:
43:7f:44:96:3a:5a:f2:4c:b2:5c:5a:c8:ea:8d:14:a7:ef:e1:
95:16:e7:d7:b5:19:c5:f1:42:82:e0:28:99:08:7a:94:0a:17:
73:b4:6c:62:4d:13:c2:b8:d5:8e:b2:7e:0e:ff:f6:49:06:55:
c4:a4:7c:5d:ac:ec:8b:6d:05:0d:86:cb:bc:e3:02:9f:15:d6:
69:e2:24:08:d0:ba:4d:b5:eb:7d:97:83:aa:09:e5:2f:64:65:
af:7d:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:59 2026 by rpki-client