
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7d11c1cd-a605-36a4-8f89-95f86ea8a5a5.roa
File: 7d11c1cd-a605-36a4-8f89-95f86ea8a5a5.roa (raw, json)
Hash identifier: 20EUGExne550cBWcrLgu7y+N9v7/UzVQunzsO6PyUDY=
Subject key identifier: 95:B7:D7:58:29:B5:3F:36:39:36:51:D4:67:9D:38:21:AD:EA:07:47
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584F655DA1DBC6ABB5999DBAB700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7d11c1cd-a605-36a4-8f89-95f86ea8a5a5.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 12271
IP address blocks: 68.172.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:a1:db:c6:ab:b5:99:9d:ba:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=bce8583b-3a12-4ae7-99b9-d112296b863f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:14:3d:46:25:25:18:13:15:61:88:31:4f:
a6:1d:10:16:62:ac:81:ae:57:d3:fd:4b:61:95:58:
a2:2e:7d:26:70:9a:79:b0:e2:34:b5:a5:8b:bb:9a:
8a:9e:4c:db:61:b6:9e:0e:76:b3:0a:25:50:d5:83:
ca:d2:69:f5:62:0e:f4:f8:53:2f:de:48:6e:f3:96:
66:ce:5f:a5:79:41:fc:b2:18:55:53:4d:5b:c0:26:
46:4b:84:56:3a:3e:dd:4c:63:f3:f9:07:40:8d:b6:
a7:c3:d0:c2:28:70:31:8c:b5:4a:c7:7e:ac:f9:b5:
71:d5:47:ba:f9:61:07:1d:48:c8:84:fa:06:04:7a:
09:0c:f4:72:ee:f9:72:5b:54:fb:5c:61:f9:fa:86:
7e:b8:e6:15:89:fa:ff:3f:8f:4d:47:5d:e7:0b:91:
32:1c:d4:7f:58:de:bb:40:db:b7:ad:b2:c0:5e:7c:
54:0b:58:83:ff:ed:34:a4:72:0a:22:a2:a4:39:af:
9d:1e:4b:4e:1b:6a:f4:3c:e8:3e:1f:dd:34:b3:6f:
00:f2:96:93:3b:0b:88:68:4f:17:e1:6d:84:69:46:
b6:ca:0e:98:25:20:a8:8c:0d:3d:ab:a2:de:4f:c1:
e7:42:22:e0:4f:52:f0:c9:5b:ff:94:18:81:5c:e6:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B7:D7:58:29:B5:3F:36:39:36:51:D4:67:9D:38:21:AD:EA:07:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7d11c1cd-a605-36a4-8f89-95f86ea8a5a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
68.172.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:99:da:b5:d0:28:02:aa:0a:c6:dc:ab:44:a9:27:86:86:e1:
37:c3:86:e9:e8:24:68:5d:e2:f6:b0:d9:ca:68:1f:20:32:82:
76:dc:9b:e0:cd:6b:c9:3c:77:f7:a0:2f:d4:5b:92:72:dd:8c:
fc:27:3e:5c:66:f8:e2:31:ba:e3:08:32:aa:39:a3:3d:3b:a3:
22:41:9a:fc:da:f1:73:8b:a7:e8:b2:b9:14:35:f6:3b:84:59:
e2:35:ab:e3:fc:63:64:82:6d:65:5b:0e:9b:0c:9a:fb:b9:3e:
f9:f5:fe:e8:ee:3a:ff:7e:d3:fb:43:45:e7:9e:a2:80:fe:38:
b4:05:8c:15:dc:9b:c0:c8:b4:1c:86:68:05:d0:48:68:a5:34:
7d:9f:25:c0:f5:fb:6d:d6:e1:cd:6b:57:ab:7f:b1:2c:58:b5:
6a:f2:cf:08:2c:93:0f:40:cd:65:43:0e:5b:2d:d9:96:0c:04:
43:e0:37:d4:6f:ab:30:17:72:b3:f8:63:3d:1b:df:95:67:45:
34:a2:fe:e3:6c:2a:4b:dd:7c:3a:92:78:73:33:89:eb:73:66:
66:16:ff:6d:da:e9:13:fd:de:35:52:c0:cb:23:4a:16:2c:f1:
18:a9:0f:d1:19:b3:02:91:df:55:b7:d3:4a:b4:4d:fa:c7:fd:
a4:d8:13:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:49:04 2026 by rpki-client