
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa
File: 4168211f-81ee-3a06-a39d-59f42a3495b8.roa (raw, json)
Hash identifier: WQAVQlC0x/CTl77Son0x/gIT/ffdSUt+bjxGteQmMss=
Subject key identifier: CB:70:EE:1D:7C:0A:60:B0:48:C2:43:8B:4F:2F:A9:1A:19:36:69:FB
Certificate issuer: /CN=84052649-3401-4ba6-ad82-6f310741b104
Certificate serial: 010D0C9F4328584F6F230928460B264CE8CABB00
Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa
Signing time: Thu 08 Oct 2026 13:00:12 +0000
ROA not before: Thu 08 Oct 2026 13:00:12 +0000
ROA not after: Wed 06 Jan 2027 14:00:12 +0000
asID: 395129
IP address blocks: 108.59.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6f:23:09:28:46:0b:26:4c:e8:ca:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104
Validity
Not Before: Oct 8 13:00:12 2026 GMT
Not After : Jan 6 14:00:12 2027 GMT
Subject: CN=a2c67d59-9588-481d-b90d-5399c2e0d35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:17:8b:36:e7:83:28:ef:c0:3d:1b:34:8e:
a7:8c:db:7c:16:19:8c:77:4d:43:92:0e:0d:4f:2a:
92:18:25:34:eb:45:f6:eb:b7:02:97:20:60:34:ce:
0f:9b:1a:76:29:af:3b:eb:58:84:9d:5c:fc:b6:ab:
ee:e1:8d:e8:5b:e1:3d:c0:12:fb:30:86:12:68:a3:
04:2b:17:cc:72:fe:92:b5:51:23:ae:ff:66:2e:fa:
86:3e:c4:6d:e8:e9:c0:6b:94:f5:97:4d:f6:4f:71:
7c:b3:c0:9a:03:10:21:94:5d:65:aa:9d:91:ae:ca:
e9:1b:c9:d1:d5:a2:dd:3a:05:58:76:58:35:80:ae:
2e:a4:28:17:6d:bc:d7:2d:57:13:6c:39:e1:2a:95:
68:60:b6:cd:81:98:1b:05:c5:83:41:59:7c:a4:c6:
e5:8d:45:a1:34:b9:b7:fe:70:3f:9c:99:a4:57:79:
68:c6:c3:ac:c2:c8:cb:0d:82:40:3d:01:fd:9b:4e:
fe:60:3a:ae:ab:4d:b1:80:32:e5:25:34:ba:d6:38:
8e:cf:10:38:c3:79:49:aa:80:e3:89:19:04:7e:bf:
0f:e2:24:04:1c:87:63:2e:ea:d5:03:91:bb:e6:3d:
ed:17:33:6a:0e:98:56:cc:96:7b:38:a6:87:65:c6:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:70:EE:1D:7C:0A:60:B0:48:C2:43:8B:4F:2F:A9:1A:19:36:69:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl
X509v3 Authority Key Identifier:
keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:01:f4:35:5b:c7:e0:6a:6b:f0:45:30:68:93:27:2d:cd:7e:
a4:e8:e7:22:e6:f6:68:da:60:80:66:c3:11:cd:f2:c6:47:1a:
71:2c:12:46:80:52:a9:1c:4e:64:86:80:f4:2f:f3:48:a5:c6:
7e:d1:42:ad:5a:49:77:f8:0e:15:6b:57:d0:66:0a:b4:7f:40:
5c:f4:82:b8:b7:50:ad:4e:a5:6a:17:d7:94:da:5a:6a:11:94:
aa:f2:f9:1d:f0:8a:0d:1d:20:32:78:2b:9f:3b:75:2c:92:48:
e0:8c:27:34:47:17:be:78:ad:59:88:7b:1d:ed:15:fa:62:79:
dd:bf:09:82:92:3f:41:7b:e6:b9:6e:df:fb:ca:87:b2:80:ab:
35:eb:e9:9e:4d:c1:7f:de:58:ad:6e:80:6b:62:86:26:bb:0e:
9e:5b:f7:8c:d4:4a:8a:4d:aa:6b:0a:22:df:c1:e9:e5:40:a8:
aa:1b:a7:f3:22:2d:83:60:57:c0:ac:ab:d5:37:27:06:09:15:
2a:4c:cc:86:bc:08:6c:50:c1:52:4a:ca:95:16:64:d3:36:96:
e6:65:5d:7b:f7:77:dd:87:d5:c0:11:59:07:55:6c:45:0c:c1:
5a:56:f9:5f:14:ca:23:2a:8b:aa:6e:88:2f:ac:df:84:99:c4:
ee:b8:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:53:21 2026 by rpki-client