
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/084d4dea-cd13-3639-9624-25ca1857c204.roa
File: 084d4dea-cd13-3639-9624-25ca1857c204.roa (raw, json)
Hash identifier: PHSKEK0SRil6DZ2vEhGO3UPG50k/0fft7JGTOXRucfs=
Subject key identifier: B6:65:3A:F9:D2:90:DB:DA:62:AE:00:EC:3C:47:05:84:F3:0A:0F:73
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584F2EED0B867C733297A6387040
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/084d4dea-cd13-3639-9624-25ca1857c204.roa
Signing time: Tue 15 Sep 2026 13:00:12 +0000
ROA not before: Tue 15 Sep 2026 13:00:12 +0000
ROA not after: Mon 14 Dec 2026 14:00:12 +0000
asID: 13414
IP address blocks: 64.63.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2e:ed:0b:86:7c:73:32:97:a6:38:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Sep 15 13:00:12 2026 GMT
Not After : Dec 14 14:00:12 2026 GMT
Subject: CN=5a7d9e60-ee68-48d1-b908-58f8eb55d316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:44:7b:f5:d3:c5:3c:dc:8b:ca:f6:b5:34:30:
ef:62:6a:8e:2f:50:09:e3:6d:35:50:4f:83:ad:67:
98:6b:40:50:60:11:1d:b2:09:29:c8:ac:0b:31:67:
00:65:d9:6a:77:de:41:c5:35:30:bb:1b:f8:bc:d8:
2e:5c:ac:34:fb:aa:ab:c4:85:ae:e4:5c:44:b9:69:
1c:03:35:b8:5f:7e:4e:d5:f6:43:26:64:3f:d5:aa:
bc:a7:6b:65:3e:05:38:dd:8d:0b:8f:c0:73:81:8f:
52:40:a1:68:9e:6b:6e:c8:b9:86:e0:ca:91:4a:ee:
47:3f:bd:32:92:6c:b7:a4:1f:28:ad:1f:e2:9c:74:
98:2e:87:4c:fd:96:c8:e9:d7:18:f4:14:9b:53:54:
de:1c:69:25:6c:6b:f2:69:1b:ab:15:a9:66:e9:68:
af:c0:66:0d:ae:9c:8f:a2:13:62:f7:a0:94:a4:7f:
95:27:87:28:e6:67:68:82:38:45:a5:e0:aa:1f:1a:
5a:9b:f9:61:2e:72:46:58:f7:8a:1d:c6:c5:58:bf:
9e:ed:e5:a4:09:59:aa:4b:5f:2e:81:0f:1c:80:d5:
c9:e5:14:f4:37:43:fd:2b:4d:ea:30:64:d3:5e:20:
e2:15:32:4a:f3:9f:c3:69:40:0b:63:29:f9:28:e9:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:3A:F9:D2:90:DB:DA:62:AE:00:EC:3C:47:05:84:F3:0A:0F:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/084d4dea-cd13-3639-9624-25ca1857c204.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:30:d1:7a:86:c7:dc:fc:b6:74:92:b3:ce:90:30:75:44:34:
a8:fa:41:2b:b9:19:ea:91:f0:92:9e:7a:23:8a:0c:fc:47:41:
78:dc:87:e8:01:db:7c:c2:36:1a:54:a9:62:4e:e1:56:8a:59:
6b:2c:28:78:2e:8c:4c:c5:98:8d:fc:ce:35:e7:ef:44:1f:82:
ec:71:f5:cc:3c:10:53:59:bb:cf:9a:21:67:7c:96:d3:72:4e:
51:43:90:7b:84:dd:22:4b:bc:7a:cf:2a:20:7f:87:55:b1:f4:
ea:ed:1a:6e:61:ff:0b:f1:3d:d4:21:b8:44:e0:27:9d:d1:0e:
54:0e:a5:9c:90:e5:6c:71:92:41:9f:4a:d2:a1:1f:cc:1e:47:
7c:52:47:04:ef:25:7f:75:63:8d:15:b7:96:8a:0a:90:3f:a9:
5a:d7:74:25:48:5f:d4:ec:98:06:f0:30:b0:7c:4a:59:1c:12:
9f:dd:b2:bb:bc:45:e5:07:e6:b7:15:5d:d6:2e:f2:5c:4c:0c:
a2:26:b8:8e:78:5f:39:5f:a6:2e:ba:0e:12:71:0a:99:f3:4b:
75:22:b1:68:fc:f8:88:13:2f:e5:ce:17:8f:00:2b:44:0e:5a:
6a:74:f9:98:c2:57:14:de:b2:01:ac:b7:55:13:22:4c:df:35:
0c:b7:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:01:12 2026 by rpki-client