
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/28a48d2f-ce32-3db4-89fc-b6b2d5b4b909.roa
File: 28a48d2f-ce32-3db4-89fc-b6b2d5b4b909.roa (raw, json)
Hash identifier: e07ewU4aSCbomMZcZElQEIFkBpk87HKJpBAhiaOluvc=
Subject key identifier: 43:9A:D5:BD:A5:B4:5D:E8:3F:57:D1:48:DF:A1:84:EE:A9:9E:9E:57
Certificate issuer: /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial: 010D0C9F4328584F3A17CCF7DD202382D9778180
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/28a48d2f-ce32-3db4-89fc-b6b2d5b4b909.roa
Signing time: Sat 19 Sep 2026 13:00:12 +0000
ROA not before: Sat 19 Sep 2026 13:00:12 +0000
ROA not after: Fri 18 Dec 2026 14:00:12 +0000
asID: 53850
IP address blocks: 74.118.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3a:17:cc:f7:dd:20:23:82:d9:77:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Validity
Not Before: Sep 19 13:00:12 2026 GMT
Not After : Dec 18 14:00:12 2026 GMT
Subject: CN=d87d06fd-e37b-490b-82f5-106347bdf7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:8c:34:24:95:63:2a:93:3d:42:5b:5c:6a:
0b:5c:28:80:2b:df:94:51:dc:31:b6:ee:22:88:dd:
bd:89:ac:28:25:a8:e4:8d:0f:8a:91:61:82:5c:ef:
84:1e:52:e7:71:ba:52:da:25:17:a5:ab:82:26:bf:
92:f8:b5:a7:e5:38:5f:77:7b:4a:96:76:23:12:0c:
0f:8b:bd:79:44:09:17:5d:1f:2d:08:e5:39:56:53:
ed:72:81:33:89:d9:c9:e6:42:92:b8:80:9a:9d:87:
2e:6c:17:c5:69:43:44:69:9c:c9:1a:37:a9:2b:74:
e6:2e:1a:4a:f2:ca:12:5b:bb:32:11:c4:59:f1:ef:
33:43:42:e5:23:1b:ba:8a:c7:69:84:02:72:6c:87:
3d:ed:c8:62:40:de:f2:ec:2e:45:81:68:9f:78:52:
ed:1f:fe:c8:77:38:3e:6c:bf:e0:27:03:8f:e6:80:
50:71:b5:ca:95:20:67:1a:61:d6:4d:9a:8b:af:5d:
79:0b:c5:e5:27:0f:54:df:ba:da:44:49:a5:f8:85:
52:d5:01:5b:86:4b:16:b9:bb:0f:e3:c6:f4:17:04:
46:2c:30:84:b1:69:ae:f6:91:3d:60:9d:3c:11:2e:
fc:47:b3:17:f3:3e:f9:32:31:7d:79:6a:d0:c9:5d:
a0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:D5:BD:A5:B4:5D:E8:3F:57:D1:48:DF:A1:84:EE:A9:9E:9E:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/28a48d2f-ce32-3db4-89fc-b6b2d5b4b909.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
X509v3 Authority Key Identifier:
keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
sbgp-ipAddrBlock: critical
IPv4:
74.118.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:62:ad:81:e8:e7:99:16:03:f0:62:9a:8a:47:93:82:f9:08:
6a:cb:e2:b1:1d:3c:ff:ac:9f:6f:d8:5c:8b:90:ef:c5:55:1b:
6d:bf:2c:e9:20:ca:e1:58:09:c3:02:f2:db:cd:ff:dd:93:11:
d6:03:b1:bc:63:70:b6:ef:78:61:13:de:0b:aa:8d:6b:31:45:
cd:5a:6b:3b:1a:7a:ca:e8:15:9e:aa:4f:fa:e3:cc:b9:1d:0a:
1d:76:3c:15:04:82:b9:f3:3c:d4:56:37:da:12:ad:bc:e7:72:
11:5c:74:f8:ee:bf:9d:b9:1d:db:f8:92:41:7a:49:60:bb:76:
eb:e8:78:73:72:e5:45:13:d4:f0:b3:31:57:e3:6f:23:45:66:
8c:e6:9e:10:27:32:09:9f:3f:e8:5f:da:fb:ae:c3:1e:e0:b2:
f3:6e:9b:aa:95:73:63:dd:53:e2:0d:33:2f:6e:af:66:93:56:
5b:18:0b:4e:ad:05:68:55:83:84:73:51:98:ef:a0:c5:df:87:
60:e5:9e:a4:7d:cf:9b:44:d2:a8:76:8f:ce:33:97:6d:72:f1:
49:d9:bb:56:3f:90:45:7f:04:5a:62:95:2b:a8:e4:70:94:d8:
cc:b7:c5:3f:4d:d4:eb:11:f7:17:14:62:a8:cf:55:35:a4:fd:
cc:20:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:27:10 2026 by rpki-client