
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa
File: 1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa (raw, json)
Hash identifier: Gqk95ewHiiNyfnP833jPkNmqVILthhKs/I5onOZxf5s=
Subject key identifier: AB:AE:14:13:E3:72:F1:71:40:09:F5:70:3A:93:13:6D:D5:65:DE:FA
Certificate issuer: /CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
Certificate serial: 010D0C9F4328584C8476D486C07917C0808911E0
Authority key identifier: 2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 25875
IP address blocks: 69.165.96.0/20 maxlen: 24
208.88.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:76:d4:86:c0:79:17:c0:80:89:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=147d7d2a-dfa7-4c8b-881e-77e201221353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:c6:92:31:dc:c4:15:ba:b1:d3:48:60:9a:
55:73:5c:89:36:92:49:c1:09:e0:74:86:cc:dd:64:
66:d6:b7:75:34:28:55:97:7e:c4:b1:f2:07:02:e5:
c2:f1:e3:9b:54:80:e4:19:9e:ae:a5:c4:b0:d8:1e:
a3:14:5a:f9:e7:d8:00:da:54:9b:75:fd:b0:64:1f:
f6:29:ce:be:95:72:c0:ec:47:4f:bf:49:c7:49:47:
b8:48:ab:b6:8a:57:c2:80:eb:89:0a:b8:2f:24:a6:
46:5d:91:a7:35:81:fb:1e:72:27:94:e5:6c:16:8c:
92:ce:8f:4a:e2:93:28:7b:ae:ab:26:71:3d:32:dc:
05:9c:bf:d5:57:62:38:55:04:d7:25:16:fa:3d:f1:
ca:75:60:bc:1f:e2:46:26:d9:72:c7:7f:87:cb:b3:
38:e3:9c:05:f9:1b:49:40:f8:7c:8e:df:3c:bc:27:
5a:d9:b3:c1:bd:01:6a:0c:6c:5e:1d:38:d1:0f:7c:
71:ac:50:95:97:fd:2e:29:3f:62:b9:cc:d8:0c:3c:
9e:55:2d:6d:90:93:8e:9a:7b:c1:33:72:28:a2:4e:
bc:75:b7:34:0e:20:ef:c9:2a:20:cf:00:f7:0e:2d:
04:6c:ca:c4:3f:0d:2b:49:63:36:0b:14:b7:78:49:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AE:14:13:E3:72:F1:71:40:09:F5:70:3A:93:13:6D:D5:65:DE:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl
X509v3 Authority Key Identifier:
keyid:2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
sbgp-ipAddrBlock: critical
IPv4:
69.165.96.0/20
208.88.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:88:9a:fc:33:24:72:92:7f:4c:9c:ec:68:80:cc:e8:05:3a:
a7:8a:bd:9a:f1:35:71:c6:db:51:d9:7e:8b:25:54:3b:61:fd:
1f:e1:14:bf:a9:5d:a0:41:87:06:6a:e0:02:fb:b0:ce:3c:c7:
88:cb:94:e5:21:f2:68:c5:32:59:6d:20:c7:c1:a0:e4:3c:3f:
45:6e:71:44:7f:1a:03:2c:82:7e:90:74:a8:54:c0:61:68:93:
76:9b:f7:68:81:01:9b:d4:40:97:24:71:0e:49:ab:58:bc:68:
ab:b0:50:13:03:57:26:64:d5:87:b0:c3:c1:40:ef:a6:96:90:
be:59:f7:f0:77:be:44:16:1c:8c:2d:9a:d6:f3:35:4e:f0:47:
94:3e:f3:b4:ad:30:a3:cc:61:c6:a7:23:9b:7d:3a:61:ff:c8:
2d:b1:a1:30:53:f1:5e:f8:b6:a0:9f:35:67:f1:1e:79:de:16:
4e:ee:73:09:8b:6b:6f:37:2f:af:b1:2d:f3:2b:8a:82:35:23:
5b:a6:db:06:3c:01:f4:1e:dc:34:c2:53:27:7a:29:68:f6:41:
bf:bf:f0:e7:44:7a:a8:bc:90:e4:65:43:f3:a9:6c:bf:13:19:
1d:91:71:22:4f:fe:bc:99:fa:9a:c6:46:30:18:d3:8a:d1:e7:
25:7f:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:33 2026 by rpki-client