
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0cfdff32-a435-3797-a856-f76c70feb286.roa
File: 0cfdff32-a435-3797-a856-f76c70feb286.roa (raw, json)
Hash identifier: 8RFN30p7g2nNyQqSrje2v2j0p42ElO34eSOvUxcCfpk=
Subject key identifier: 1D:0F:A7:14:A7:48:AC:01:95:BF:A0:C2:8B:86:3A:54:0A:14:84:C1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584EA796F6301826606160165EC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0cfdff32-a435-3797-a856-f76c70feb286.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 81
IP address blocks: 198.86.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:96:f6:30:18:26:60:61:60:16:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8bb89721-1e5a-4223-b0c0-dcdb035bc270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:00:b7:6d:54:56:0e:fb:3f:1d:40:6a:79:
7a:e5:15:19:df:40:6f:78:27:01:a8:2e:f9:eb:73:
13:ce:a9:93:b0:eb:5c:5c:0c:61:e1:bc:d1:57:9b:
d2:b8:b1:04:f3:70:66:bb:d1:28:03:46:89:7e:0d:
76:d1:50:ea:09:63:24:66:ca:a3:7d:ee:d0:a1:af:
4c:9f:5d:17:62:ca:fc:f3:ae:6c:1c:a6:f2:ad:bc:
34:85:80:e4:1c:b6:87:46:35:66:dd:6e:f5:2f:f6:
ed:b3:23:4e:20:52:a0:bc:3e:8a:90:ab:fc:45:89:
b5:7a:db:8c:a3:4e:9d:09:a9:8b:d4:78:60:fe:32:
b2:b3:52:7c:33:74:f9:3d:43:c3:07:86:39:cb:a3:
cc:49:ce:1d:45:56:bc:49:f6:38:d1:5d:8b:8c:06:
5d:dd:dc:c1:4e:39:29:9d:cb:be:38:49:2d:cb:62:
40:e1:4e:83:c6:26:8c:a0:f4:f7:6b:12:0b:28:41:
1d:b7:75:6e:04:df:37:b2:d9:d6:5d:65:de:b1:58:
ed:99:82:91:4f:15:ab:f2:51:4e:c3:92:34:9a:0b:
68:01:a6:57:83:37:b2:09:a6:c9:7f:77:c0:65:f8:
0d:3e:99:2a:82:0b:8e:21:a2:aa:de:a5:c4:7a:01:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0F:A7:14:A7:48:AC:01:95:BF:A0:C2:8B:86:3A:54:0A:14:84:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0cfdff32-a435-3797-a856-f76c70feb286.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c2:da:76:0c:fc:40:a4:a5:88:e7:d5:8d:ca:23:6b:6f:e4:
d1:93:34:1d:31:18:84:75:6f:58:7d:7e:32:b0:83:f4:86:d1:
ed:d2:9e:c7:91:cb:5c:59:fa:f7:1f:ff:52:35:d9:17:06:64:
e4:29:26:f8:29:f0:10:e1:24:52:6d:90:23:e9:55:91:7a:63:
ed:3a:89:4f:aa:18:03:54:7b:c8:5a:bd:46:2b:57:3f:dd:cf:
eb:64:d8:5a:55:40:b1:5a:3a:b2:7d:42:f1:94:d1:83:b5:35:
81:5a:68:22:0a:b7:bc:ca:10:55:30:36:10:6a:ba:ae:af:6e:
60:4c:f7:dd:de:80:d1:eb:06:d9:c8:62:8d:7d:9b:e4:69:7d:
15:ed:94:4b:bc:0b:03:3d:f3:6a:ba:45:83:d8:04:66:d4:00:
0a:4a:bf:c7:7a:a8:92:58:7a:dd:bb:49:98:64:41:86:d2:29:
8f:05:3f:4b:1c:ea:81:1a:ae:d4:f4:db:ca:18:bd:69:ff:69:
20:c7:1e:7f:7a:05:38:8b:ce:fb:c4:3b:09:df:81:4c:f5:e5:
db:9c:2a:72:c4:78:d3:78:d2:b9:c6:a8:fb:42:04:ff:d7:1f:
43:66:a5:72:3a:56:ad:97:59:01:33:92:4d:21:8d:cf:0c:a8:
dd:19:6f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:16 2026 by rpki-client