
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa
File: 2d8ca45f-228d-3ffc-9008-f26a1700290a.roa (raw, json)
Hash identifier: hGwLXCwJNwupmw7EXuAJw6j+Kt23ICEyLN+Y2nR9Bcs=
Subject key identifier: D6:92:10:83:2C:7A:BE:52:8F:56:13:8A:15:72:7C:28:B3:8A:94:94
Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Certificate serial: 010D0C9F4328584CA5F7100644824735C3FDF100
Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 8075
IP address blocks: 216.99.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:10:06:44:82:47:35:c3:fd:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=87420784-54a4-4901-89f8-3072bfaa18d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:2e:15:e9:69:7f:a2:d7:e5:30:da:c8:d2:
c3:08:e9:6b:39:83:6c:8f:f4:03:5a:14:7b:24:96:
ee:f2:cd:f8:08:13:b6:6d:30:56:bd:0e:d9:f9:9e:
17:7f:ef:d7:78:d6:42:79:5f:73:e3:57:58:d6:f1:
2b:8f:3e:91:0d:4f:a6:39:a4:93:6d:47:d7:a3:4f:
5e:b9:49:45:2c:cf:58:0f:b4:00:b8:2e:77:cf:61:
41:2c:eb:48:de:24:d0:4a:d3:ab:ff:46:d4:f3:2f:
c9:3c:ac:59:6e:b3:7a:d6:63:ec:91:ed:da:bf:c8:
dd:99:e0:fb:99:8a:ba:11:5b:5e:7f:47:17:49:23:
ef:64:c6:26:b5:bd:7d:57:88:b2:1c:9e:63:70:15:
5c:13:e3:40:45:41:0a:4d:2e:bb:35:74:df:dc:a7:
5b:1d:f1:90:44:9f:a3:7b:35:86:77:94:48:a4:9f:
3a:d1:ba:00:3a:94:a1:67:e2:1b:9d:27:6a:9b:ff:
09:3e:60:79:31:a6:6f:b5:e9:12:5d:21:2a:d2:71:
ed:95:3b:5c:f4:ae:21:dd:e7:fb:f4:95:01:b3:16:
05:99:32:d3:20:1c:6a:a1:c5:20:f1:b3:50:29:a8:
8c:fe:bc:27:66:00:ce:2c:20:b9:4e:7b:04:da:15:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:10:83:2C:7A:BE:52:8F:56:13:8A:15:72:7C:28:B3:8A:94:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
X509v3 Authority Key Identifier:
keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.99.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:71:44:4f:24:4d:25:bc:12:5b:5b:f4:6b:cd:93:0b:92:da:
e3:a6:a3:b2:2e:3f:50:3a:70:21:7b:e1:03:24:78:c5:3c:90:
e4:98:66:5f:63:3d:e1:35:ef:45:b9:e8:e4:05:24:8f:e6:33:
f1:55:da:31:74:1a:8d:04:50:e0:8a:6e:fd:08:80:e5:92:41:
af:4b:0c:ec:6a:7a:21:89:81:87:a1:b0:ae:69:f3:28:28:60:
95:99:ed:30:1d:74:f1:46:51:80:d8:cd:59:f2:69:92:88:11:
94:0c:01:9b:9c:45:f2:2f:20:03:b1:5c:e3:2a:ae:59:3f:b8:
39:0a:9f:07:49:c6:79:f5:7c:d5:a8:4c:f2:5e:6b:24:46:07:
28:bc:6c:81:76:57:69:1f:92:29:f9:0e:47:3d:c2:61:64:7c:
86:7a:2b:a0:04:92:3c:ea:89:d4:3c:17:b8:1e:db:bd:8f:44:
3e:7f:e9:e1:3d:93:71:45:f9:08:84:f5:25:9f:f1:ff:60:f3:
36:cc:eb:13:e2:e8:c6:0f:0c:87:91:3d:a1:54:da:90:d3:b5:
99:27:69:08:e1:27:02:39:c3:13:63:64:59:b1:d9:99:89:2e:
35:98:a3:10:57:8f:71:7a:a1:7f:95:63:36:37:41:74:55:a2:
df:11:3f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:46 2026 by rpki-client