
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa
File: 66c24ca4-75ad-3583-bab3-0d338b0cb433.roa (raw, json)
Hash identifier: k6wBQShWVxORgapNX4l67TEJTS8x5hIEee6sQFNRIq8=
Subject key identifier: EB:F6:14:4A:75:5F:AE:30:6E:A1:6B:0C:8A:50:B1:F5:8A:1F:96:0D
Certificate issuer: /CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
Certificate serial: 010D0C9F4328584F2D87C55102B1219432667C00
Authority key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 271
IP address blocks: 198.162.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:c5:51:02:b1:21:94:32:66:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=aa324740-72fe-4470-a174-2867725b405c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:79:3a:ad:75:21:cf:4e:8a:9b:e3:34:25:
7f:ed:49:8f:7a:17:7f:72:2c:f7:02:ed:1c:90:bd:
f0:30:e5:7b:4c:3b:78:e2:4d:8a:5b:85:2f:2b:a9:
f9:47:db:0b:b5:c2:c8:52:bf:73:9b:a5:a7:5a:d4:
0a:1d:6b:6d:6e:42:5b:b9:e7:81:10:1e:0d:1c:ea:
c2:a7:a6:23:fb:cb:14:c9:66:e8:db:07:87:de:dc:
c0:a3:90:ff:01:3d:fc:58:fb:b9:cf:a2:b8:2f:05:
b3:9b:e2:82:d1:87:7b:0a:cf:71:34:63:1b:e1:00:
9a:54:39:0b:c4:62:c7:b6:a0:a6:a1:89:58:f4:0a:
be:b5:68:cf:10:83:b1:5a:be:a5:87:15:56:af:60:
0a:a1:09:19:a9:b4:24:cd:02:ff:03:af:c3:ad:98:
28:ec:95:17:0f:bf:cd:0f:ad:9c:0d:1a:df:3a:b1:
6a:92:ce:40:79:db:8f:17:2e:97:a6:b0:c4:ff:0c:
d8:b5:61:35:57:2e:24:58:43:e5:52:32:fe:28:a8:
83:58:67:33:05:3c:a8:bb:89:ea:f7:3c:36:d0:f9:
ac:64:15:55:de:eb:24:70:7c:78:64:c0:74:2d:02:
d2:12:b6:f9:66:71:c1:30:40:ea:47:b2:7a:ff:55:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:14:4A:75:5F:AE:30:6E:A1:6B:0C:8A:50:B1:F5:8A:1F:96:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl
X509v3 Authority Key Identifier:
keyid:98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
sbgp-ipAddrBlock: critical
IPv4:
198.162.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:21:86:6a:12:5b:20:d7:d1:34:13:63:62:82:c6:fb:c8:0f:
d5:96:98:45:7b:83:23:3e:c3:f3:94:e7:9a:5d:be:14:e0:56:
18:0b:c8:22:f9:00:a5:b6:3b:a0:c6:5a:d5:96:49:23:28:7c:
c0:a4:fc:41:e6:b7:bb:eb:fa:cb:ef:38:b1:10:0e:81:90:dc:
5d:cf:42:5f:f9:47:b8:64:ba:0b:ed:ce:44:86:d7:fe:17:1c:
b5:aa:86:37:c2:a3:9f:05:17:13:5f:e8:18:ee:73:21:79:8f:
6d:84:a7:5f:43:58:67:11:c2:ec:b9:aa:77:6c:cd:c6:a0:db:
b1:26:e8:96:12:24:81:c6:08:bf:a1:7a:2d:35:75:53:7c:d1:
ea:3a:62:f8:2f:06:11:de:d2:b2:8d:fc:61:69:64:7a:7d:ef:
b6:e3:9a:2b:b3:13:02:a6:0b:59:61:71:a7:bb:94:0b:76:3e:
47:7a:7c:86:92:44:4c:3f:30:6a:b5:3a:29:96:9a:4e:65:07:
cc:bf:ee:48:2d:3e:f6:f4:d2:27:25:b3:15:dc:3b:98:ee:29:
43:57:a8:e9:94:86:ea:64:7b:67:ff:c0:f9:b8:4a:76:76:0c:
23:24:af:f5:dc:56:86:d3:fc:e6:7e:a4:8c:c1:a2:ed:8b:46:
76:4c:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:26:44 2026 by rpki-client