
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab85abbb-d70f-36a7-b271-6d95096a9346.roa
File: ab85abbb-d70f-36a7-b271-6d95096a9346.roa (raw, json)
Hash identifier: cru69kfMhJV9NL84l8Vyv4wqBpU6eSk+i/UQ1K+cz/o=
Subject key identifier: 54:C2:E9:DB:D5:C5:C0:B6:46:87:6B:78:AE:93:59:2E:3A:AD:0F:3E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584EA795F7198234AD436BFDFD80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab85abbb-d70f-36a7-b271-6d95096a9346.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 81
IP address blocks: 198.85.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:95:f7:19:82:34:ad:43:6b:fd:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=7c3c1329-3459-4bac-a774-38904cdc35f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:8c:f1:ac:63:06:41:a0:ff:5a:5b:c0:da:
96:5c:9a:5b:60:c5:68:f6:e4:dd:25:2e:70:e9:2e:
33:b9:1c:29:1c:e5:89:e0:dd:11:91:1b:02:5f:11:
6c:7b:93:6a:a2:6b:7b:64:2e:5f:e7:e5:a5:21:1d:
48:a4:2c:81:eb:eb:d1:f4:80:9a:73:ba:04:a1:ff:
fb:da:96:0b:30:71:1b:a0:9b:35:d6:19:6e:ef:c1:
69:e9:72:6b:71:d4:1d:89:ca:30:37:a9:c2:ab:8c:
10:c2:70:bc:49:47:d4:48:16:e5:c2:36:6f:fc:ff:
1b:2c:d0:96:3c:5a:0c:ec:74:f7:38:ed:0c:da:99:
b5:c7:27:45:f8:86:ec:65:59:50:2c:c6:31:51:75:
33:25:a1:9a:36:91:57:ab:94:cf:22:9b:df:62:6d:
a7:9b:bf:9e:c0:f6:8c:31:05:38:8e:79:f0:6d:3d:
5a:d0:91:83:c1:a8:21:6e:d0:96:3b:0a:dc:25:5d:
98:3b:3a:38:64:a3:22:52:54:c2:32:aa:14:ac:80:
5d:66:7a:41:f3:1c:ce:fe:54:bf:cf:ce:44:cd:ea:
f9:83:03:ca:5c:86:19:b1:2a:8d:1a:f5:f9:7b:12:
ab:32:f8:1f:04:a7:f9:b1:33:21:35:c6:d2:5b:ac:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C2:E9:DB:D5:C5:C0:B6:46:87:6B:78:AE:93:59:2E:3A:AD:0F:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab85abbb-d70f-36a7-b271-6d95096a9346.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:19:7b:5c:52:d6:12:8b:17:61:fc:40:ac:a8:1d:27:73:08:
ca:d0:34:38:15:b1:e2:4e:3d:0f:5a:5e:9a:1c:9a:89:0d:63:
d2:8d:74:c7:0a:70:2b:b1:e0:23:7a:c4:fa:16:c1:4f:fb:ba:
d1:27:8d:01:65:bd:9f:14:ae:e4:bb:3d:5b:dc:6e:81:63:f4:
18:d6:94:56:25:18:d7:cd:1a:9a:3c:f2:73:c8:bf:50:61:55:
0c:e8:97:2a:14:8e:34:65:51:ed:03:8e:bd:f0:46:71:d2:88:
27:1e:c0:26:81:7c:15:db:ab:63:7c:22:e2:02:91:f2:06:b3:
ba:65:dc:c7:c9:69:2c:02:91:03:c1:eb:4f:46:04:0d:b6:3f:
bc:a6:45:ca:a6:2e:4c:6a:cd:64:43:45:7c:2b:a4:05:35:0e:
e4:b5:51:eb:08:4a:aa:5a:36:28:72:f8:1f:46:95:01:99:91:
f1:71:46:b6:22:71:ad:8c:77:25:6d:f4:49:c7:40:21:47:71:
0f:f9:83:a8:d4:9f:6c:c2:b5:dc:f7:71:26:71:f0:4b:74:9e:
43:b5:fa:aa:4f:f7:bf:e4:10:db:cc:20:12:80:db:f6:c2:e0:
ce:2f:dc:0a:78:0a:1b:61:25:38:f0:53:ff:8d:ad:d2:46:ca:
f5:1e:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:17 2026 by rpki-client