
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee379627-f396-37da-a628-ec2fe82e75f2.roa
File: ee379627-f396-37da-a628-ec2fe82e75f2.roa (raw, json)
Hash identifier: 2hQY2+39pdLGc8w19luPxFKaFprd45BGG7BRy0oduv0=
Subject key identifier: 3F:0C:2A:CC:B6:DA:DC:85:57:68:47:96:3E:BB:90:EC:6D:D1:B7:0B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CB55206C08878DADFA277ECC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee379627-f396-37da-a628-ec2fe82e75f2.roa
Signing time: Sat 31 Jan 2026 14:00:39 +0000
ROA not before: Sat 31 Jan 2026 14:00:39 +0000
ROA not after: Fri 01 May 2026 13:00:39 +0000
asID: 20940
IP address blocks: 104.86.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:52:06:c0:88:78:da:df:a2:77:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 14:00:39 2026 GMT
Not After : May 1 13:00:39 2026 GMT
Subject: CN=118d9a0a-5438-442d-a5dc-8cfbd11f9867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b7:62:e2:46:ff:3d:45:49:9f:96:c3:ff:8a:
b6:db:b9:fe:da:30:d9:ba:46:24:bb:06:f6:23:3f:
98:ee:0f:e6:87:ff:f6:53:33:a5:52:0b:d8:76:4d:
c3:10:46:9c:0f:99:91:95:56:18:1e:4b:09:19:ed:
24:67:08:7d:6a:4c:d8:fb:ae:d7:59:ac:22:d6:be:
78:55:57:56:ab:19:63:ff:bc:37:36:66:46:84:f0:
a7:9c:5d:5e:c7:91:9a:cd:a0:09:28:97:ac:dc:0b:
1a:ec:d4:be:40:8b:35:0d:13:8a:a3:c4:f8:93:5c:
f2:70:7b:78:d6:c0:bd:42:3c:d7:50:6b:5b:08:0e:
22:75:96:54:ca:22:84:49:4a:60:3f:14:ec:09:b6:
27:29:9c:ac:01:14:9a:67:db:e9:96:5b:9a:2e:1f:
ba:fd:aa:57:02:e1:ea:b4:c0:17:be:36:42:ef:24:
53:da:63:e6:af:5e:e9:3c:74:e7:ad:42:ad:f4:3c:
94:0b:7a:b0:31:b9:57:c7:f2:94:f3:25:a7:70:15:
e4:72:0e:24:12:d9:03:f8:e7:58:23:38:12:f2:18:
1e:22:19:f6:4a:aa:30:58:64:65:8f:46:5c:1c:9e:
a2:be:be:4f:bb:a5:51:93:ca:18:c3:2f:bc:7b:00:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0C:2A:CC:B6:DA:DC:85:57:68:47:96:3E:BB:90:EC:6D:D1:B7:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee379627-f396-37da-a628-ec2fe82e75f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.86.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:a1:b9:eb:58:a5:ad:c2:74:2d:de:14:6b:ff:96:e3:87:00:
5b:24:e0:4b:fa:9a:c6:ba:e8:a3:85:82:f1:04:f8:80:be:9e:
90:f6:43:57:c7:bc:38:fe:a2:33:ed:e9:72:ba:42:7c:72:15:
bd:b2:28:06:3d:d0:60:43:96:5d:90:e8:12:2a:75:a8:77:25:
f7:d7:a3:c5:05:f7:ac:1e:3b:b0:20:79:de:84:73:63:90:e3:
e9:6a:49:55:70:50:9b:3b:87:1b:6a:ce:f0:59:19:30:17:78:
73:07:91:5d:0f:ab:ca:ff:68:1e:1e:f6:c5:fc:38:05:b6:cb:
cc:10:ec:f6:ad:ed:be:63:e6:8e:24:7e:cd:4b:8e:69:e6:58:
87:85:ca:72:6d:9a:9f:6a:e1:c8:7c:a2:67:40:41:6b:4b:69:
a0:07:a2:c6:c6:b4:cd:74:00:30:6b:25:37:85:75:d7:62:a0:
bc:54:0f:76:55:ca:f2:bc:5b:35:09:4e:13:21:23:eb:c0:fd:
28:cd:32:2f:ce:84:c6:5a:4e:3c:58:62:36:0a:05:6b:b9:49:
ac:d6:3b:27:0e:03:1b:6e:d6:3a:51:67:05:17:51:cb:d0:66:
e9:fd:81:a0:8a:e5:ed:7f:70:5b:ae:3b:c9:c4:83:96:8e:01:
d9:3b:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:51 2026 by rpki-client