
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/e713c88f-9462-36f3-9bfa-4fa5ba845b3f.roa
File: e713c88f-9462-36f3-9bfa-4fa5ba845b3f.roa (raw, json)
Hash identifier: 6J4pZtSwiehlu1/R4rUvcqok3v6NcysKk5LdE0Di9PM=
Subject key identifier: F7:8A:FC:CF:0C:B2:8D:AB:50:49:3C:E3:5B:8D:41:7E:C9:4C:C2:EB
Certificate issuer: /CN=08f6ab66-eae4-4119-a436-4dd733e17ebd
Certificate serial: 010D0C9F4328584CAC9958365A5943EB827634B8
Authority key identifier: E7:94:6F:8C:07:83:D5:ED:3B:1A:27:5F:03:4C:42:30:37:37:E5:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/e713c88f-9462-36f3-9bfa-4fa5ba845b3f.roa
Signing time: Wed 28 Jan 2026 11:02:39 +0000
ROA not before: Wed 28 Jan 2026 11:02:39 +0000
ROA not after: Tue 28 Apr 2026 10:02:39 +0000
asID: 205467
IP address blocks: 208.70.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/08f6ab66-eae4-4119-a436-4dd733e17ebd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/08f6ab66-eae4-4119-a436-4dd733e17ebd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ac:99:58:36:5a:59:43:eb:82:76:34:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f6ab66-eae4-4119-a436-4dd733e17ebd
Validity
Not Before: Jan 28 11:02:39 2026 GMT
Not After : Apr 28 10:02:39 2026 GMT
Subject: CN=412842a5-e362-44a9-abba-00feb51631e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:69:4d:ef:7c:d6:5b:cc:19:be:2e:db:4a:
09:e4:6e:56:ce:9f:2a:fd:0b:98:3d:c6:48:2a:c6:
04:85:5c:19:99:c6:e1:8a:f4:9f:b2:37:d0:eb:0e:
8a:00:ab:71:36:93:7f:98:4e:67:e0:1a:18:b5:4d:
3a:f0:cf:68:cb:6e:1f:57:bc:6c:ab:7b:3d:a2:b4:
e0:5d:de:82:e4:1a:1d:44:a0:0d:d3:a7:62:e1:61:
b8:d7:45:51:30:03:f8:f2:63:29:da:90:67:35:9d:
1b:f4:b5:fd:83:f3:9d:da:af:0f:9b:28:12:f8:2a:
b9:b8:55:38:d9:0e:45:ad:3b:d9:66:46:02:73:7b:
ea:e2:7a:bc:39:28:30:64:b3:53:3e:ef:c9:8a:30:
d3:35:f9:df:27:6f:2a:27:ac:d7:22:b2:20:04:66:
73:7d:c5:37:9a:24:28:b2:b2:58:b1:d8:78:94:98:
a6:c6:c5:47:d8:4e:d7:0c:55:11:0f:f9:91:43:da:
09:11:d2:33:45:56:b7:fb:b4:b0:86:38:ae:b9:97:
7b:96:5c:c2:eb:d2:50:c3:9a:c8:1e:c9:35:98:2d:
d1:6e:9d:db:50:d6:c8:14:ee:2e:a5:e8:3f:27:e2:
4e:b9:36:f6:ac:82:e2:69:bf:34:c1:7c:14:ce:4e:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8A:FC:CF:0C:B2:8D:AB:50:49:3C:E3:5B:8D:41:7E:C9:4C:C2:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/e713c88f-9462-36f3-9bfa-4fa5ba845b3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/08f6ab66-eae4-4119-a436-4dd733e17ebd.crl
X509v3 Authority Key Identifier:
keyid:E7:94:6F:8C:07:83:D5:ED:3B:1A:27:5F:03:4C:42:30:37:37:E5:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:52:33:24:2e:9e:3c:f3:09:12:1f:8e:ff:51:7c:5b:da:c7:
8c:ba:da:8c:42:91:8f:f6:08:36:0f:51:ec:b4:ac:1d:b9:99:
ee:0b:f0:11:fb:f8:59:75:17:0b:76:99:c6:57:31:1e:be:c6:
39:79:c0:80:3b:b3:da:3e:83:e4:10:29:3f:42:8a:fd:24:ec:
9b:12:f3:c2:6c:8c:47:8c:16:a0:18:07:9d:0a:a1:ec:c9:fb:
a5:4e:39:48:1c:5f:a6:ea:c6:1c:89:3c:ed:68:d4:4b:1f:3f:
21:db:b1:06:82:6a:8e:46:fa:4c:cf:8d:1a:15:ae:b2:a4:6a:
95:5f:c7:f8:e3:71:67:9d:20:29:bd:cb:19:39:4f:10:df:3d:
2f:78:69:39:5b:a7:c9:e0:95:75:e3:dd:c7:94:fb:2b:46:43:
fb:1a:26:7e:1c:56:51:7f:4d:1f:ed:59:85:e5:48:34:63:77:
dd:11:e7:21:39:87:d3:5c:33:ef:f5:01:6d:f6:11:fc:c7:3a:
58:04:46:cf:fe:e2:92:58:32:58:a1:2e:2b:68:4a:c9:30:f3:
40:aa:29:be:0e:f6:dc:e5:c2:38:53:4a:97:37:b9:7b:b6:60:
ee:02:d7:7a:4d:46:99:26:d6:ca:2e:b1:5a:9c:d6:ef:17:ec:
73:c4:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:49 2026 by rpki-client