
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ecf93550-f07a-3473-911d-90e1b9fad9c1.roa
File: ecf93550-f07a-3473-911d-90e1b9fad9c1.roa (raw, json)
Hash identifier: MDqZGPGfm3BaSF23kx2ZGJ2NuDForVOzlYKGfT0H5PA=
Subject key identifier: 89:F0:24:BF:8D:6C:EA:46:35:C0:87:79:5B:1F:DE:13:70:BF:B5:6C
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F4328584F3E47D813CE557935CE59F180
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ecf93550-f07a-3473-911d-90e1b9fad9c1.roa
Signing time: Mon 21 Sep 2026 01:00:11 +0000
ROA not before: Mon 21 Sep 2026 01:00:11 +0000
ROA not after: Sun 20 Dec 2026 02:00:11 +0000
asID: 14618
IP address blocks: 208.95.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3e:47:d8:13:ce:55:79:35:ce:59:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Sep 21 01:00:11 2026 GMT
Not After : Dec 20 02:00:11 2026 GMT
Subject: CN=80e82802-61f0-4755-9b5c-5ef792a9aa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:37:d5:67:80:25:be:96:ff:80:49:41:1e:67:
f8:d9:14:13:14:60:b9:67:06:ae:07:4c:2c:5f:a0:
a2:35:c9:2d:30:41:31:eb:41:22:17:e8:88:8d:43:
1a:5d:33:b2:05:e5:07:3f:28:9b:ef:d3:75:c4:7b:
f7:21:19:7e:73:4e:1c:59:e3:39:07:be:7a:01:1b:
87:c8:49:d1:7c:8a:1e:97:86:26:30:1e:1e:00:ae:
8a:1c:92:2d:d4:33:82:e4:8a:62:f8:f6:04:f6:8a:
8e:69:f8:9e:f0:61:d7:b2:17:dd:47:31:29:70:0b:
61:21:67:5d:ae:65:b6:5a:6e:9f:b2:50:69:d6:e4:
f4:8c:8c:33:a1:c7:0a:d4:4f:9b:91:58:e4:58:26:
df:68:cb:c0:3b:84:16:20:64:53:6a:a1:1b:8a:cf:
cb:77:94:16:27:57:98:6a:b9:41:10:4d:73:a5:1a:
39:7f:f6:34:36:17:b7:d7:87:0c:8f:fd:8c:53:fe:
38:f3:07:32:9e:c0:d4:e0:c4:0f:67:cb:91:20:60:
cc:2d:ef:77:ac:d5:08:2c:99:23:e5:b8:e7:44:71:
12:95:80:e1:ac:6e:cd:62:89:6a:98:27:2d:33:70:
e5:ae:3d:02:84:f1:dc:77:e1:bd:8f:5a:91:1a:54:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F0:24:BF:8D:6C:EA:46:35:C0:87:79:5B:1F:DE:13:70:BF:B5:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ecf93550-f07a-3473-911d-90e1b9fad9c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
208.95.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:a8:c8:7c:b1:22:02:6f:4e:9c:b2:e5:5c:54:a1:f2:32:96:
53:62:75:c0:7a:d7:a7:05:9f:7e:b7:37:fe:77:e2:2e:ec:46:
b4:e1:13:4b:c0:05:6a:ab:65:8b:86:4e:d8:4a:ff:e0:a8:de:
55:2a:b1:5c:64:af:0c:08:50:51:87:a5:93:03:cf:2b:7c:80:
7d:99:fe:eb:a2:53:73:02:2b:2a:c9:64:5a:bc:1b:a0:5a:b6:
14:61:ca:65:8e:97:84:33:a0:1f:5f:17:95:2b:7d:35:76:07:
eb:fb:25:2b:77:72:93:98:41:ab:d5:73:bc:ac:d9:f9:f1:92:
c2:73:46:62:54:c7:8f:47:a8:d2:e8:7d:07:77:b6:16:bc:47:
06:40:9a:7b:f7:10:2f:a5:28:d1:30:8d:93:28:d9:b8:6c:9a:
17:9f:3b:95:cd:73:a9:90:db:5d:8f:2c:5a:c9:15:42:46:f0:
89:7e:16:de:db:fb:51:9a:55:1c:d7:ef:91:2c:81:dd:af:f4:
da:c5:34:db:31:42:96:9c:de:d9:38:c1:d5:00:fa:9b:8d:db:
ef:c6:df:d1:6b:91:1d:ab:e2:2e:4b:cb:4e:90:cc:57:f2:51:
80:6e:7f:41:f4:64:25:50:af:89:8e:84:3d:c5:0a:d5:2c:d8:
62:46:1c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:45:11 2026 by rpki-client