
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/71def192-8c86-302f-86e7-3f2a725dbb42.roa
File: 71def192-8c86-302f-86e7-3f2a725dbb42.roa (raw, json)
Hash identifier: ZvPezLsEI2nApUh1dv7IOAkJ5kAGI8DJwv0ekmJm4PQ=
Subject key identifier: 55:55:EB:D2:BF:4C:A3:70:4C:D0:2C:5F:E2:8E:19:D9:45:9C:A0:2C
Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Certificate serial: 010D0C9F4328584F06723266DC04B7E330E3C200
Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/71def192-8c86-302f-86e7-3f2a725dbb42.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 30176
IP address blocks: 67.223.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:32:66:dc:04:b7:e3:30:e3:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=07945f93-b902-4399-baeb-b9e38de88913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:97:82:0c:0b:00:87:f0:4b:41:71:f9:0d:61:
ca:37:50:9f:f7:4c:44:e0:2d:84:b0:50:b5:fc:87:
33:16:91:f9:ac:8d:e8:17:5e:63:c0:f1:3b:22:c8:
e7:93:13:0f:5e:6d:91:3d:39:a6:cd:6b:f8:69:31:
d0:cd:3c:01:2c:37:a3:a8:78:d2:33:36:63:d3:39:
fb:14:8b:11:b3:dc:d2:b6:ff:6b:b3:e7:95:10:b3:
9a:60:a5:75:25:b4:5e:70:8e:4d:8b:e0:45:b3:b8:
e1:46:d4:b4:ef:78:06:9e:a4:fa:89:00:2f:68:9e:
4e:d0:e1:ce:bf:cf:48:fe:43:c0:f0:aa:c6:1d:29:
74:4b:5d:f5:db:0d:db:78:ec:57:05:f3:7b:70:f6:
00:8f:89:77:d8:8b:bb:bc:f7:5b:34:1b:3f:a2:9a:
5f:c0:f0:79:0a:85:2a:6f:9e:e1:4a:d1:51:c9:b8:
5a:4a:8b:66:4c:ff:c1:da:63:eb:46:14:c7:dc:ad:
26:c8:f3:61:89:8e:18:8b:54:e5:7a:f5:e7:98:68:
c1:90:b2:5c:3c:ce:29:05:49:c5:3e:ea:72:2a:bd:
c0:e3:dd:41:0e:83:5d:82:bc:86:2e:7f:7c:34:d2:
7b:47:6b:40:5a:42:ed:c2:3d:fa:73:3b:78:68:95:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:55:EB:D2:BF:4C:A3:70:4C:D0:2C:5F:E2:8E:19:D9:45:9C:A0:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/71def192-8c86-302f-86e7-3f2a725dbb42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
X509v3 Authority Key Identifier:
keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
sbgp-ipAddrBlock: critical
IPv4:
67.223.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:66:68:f0:97:d8:4d:0b:a9:f9:f3:9a:82:52:5f:6f:9c:cf:
5b:fc:38:12:83:fe:26:d9:8a:66:12:65:2e:be:4e:f4:28:9b:
ac:9a:1d:9a:4a:f3:69:b1:89:a3:40:b0:2c:1b:59:4c:8d:03:
34:ff:12:73:5a:82:f2:0d:ed:87:0a:ff:5c:3c:c2:3a:e9:7a:
9f:03:7c:b1:a1:2d:cc:65:24:d0:48:0b:91:f9:81:f0:43:cc:
00:be:29:3e:ad:52:76:9d:20:08:c7:57:dc:48:c1:e4:2a:98:
67:05:1a:69:08:60:24:e9:2b:b9:46:31:4e:09:7f:4d:66:6d:
6f:a4:3d:4e:9e:b2:1a:38:ac:7f:24:09:e1:ff:d1:bf:85:31:
fb:76:14:a4:aa:89:9d:a4:ef:20:0a:13:a7:04:26:9a:72:e2:
04:87:1f:9b:77:55:4e:70:42:c0:70:b3:90:bc:e4:fe:64:97:
fb:92:1d:0f:76:fd:5c:3d:12:99:8d:48:4a:ce:19:06:3c:6e:
4f:55:0c:d1:9e:d6:90:0d:db:b9:62:e9:62:f8:75:c0:14:ea:
1b:b8:71:2b:0e:c3:2a:92:f1:6a:e0:81:4b:21:f9:88:c7:13:
29:14:e8:25:a8:f8:cf:51:27:4d:c2:9a:4a:5f:0b:34:63:f8:
13:5f:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:51:31 2026 by rpki-client