
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cd29f346-7584-364d-aa9b-157195ad0ec2.roa
File: cd29f346-7584-364d-aa9b-157195ad0ec2.roa (raw, json)
Hash identifier: lNRnpXhRYfdZrIG+o3V1+QcrIUbQxwQkVzVy2/j9iH8=
Subject key identifier: 1A:C3:E9:C9:21:C5:8C:40:CA:67:7A:87:CC:DC:52:58:A9:C5:E9:CD
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584DAAE02609684742FC544047C0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cd29f346-7584-364d-aa9b-157195ad0ec2.roa
Signing time: Wed 29 Apr 2026 13:00:31 +0000
ROA not before: Wed 29 Apr 2026 13:00:31 +0000
ROA not after: Tue 28 Jul 2026 13:00:31 +0000
asID: 13414
IP address blocks: 64.63.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:aa:e0:26:09:68:47:42:fc:54:40:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Apr 29 13:00:31 2026 GMT
Not After : Jul 28 13:00:31 2026 GMT
Subject: CN=47d13c62-26ca-4d14-82da-fd0a12e4e9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:26:c2:9f:c0:ea:9f:37:8a:40:35:82:3a:
71:c1:c6:c5:6d:b2:37:03:53:fa:8c:b3:c3:0a:f1:
01:71:ca:06:45:28:0a:c8:8f:cf:6b:f8:3e:ee:77:
32:51:2e:d4:28:a6:63:1c:40:5f:c0:50:2f:88:26:
9a:47:57:53:57:8d:e7:e4:d4:e6:f0:55:bc:d5:c4:
80:d1:d3:79:97:19:e2:be:25:42:c5:4a:f4:4f:7c:
8f:67:e5:48:52:f4:43:f9:26:92:6d:5c:4c:0e:94:
ce:cd:36:45:04:5e:f8:99:6b:1f:2f:74:d3:89:20:
70:eb:7d:79:6c:97:8e:70:6e:2d:e7:ae:cd:46:6a:
de:ea:7c:37:42:1d:1c:7f:46:28:a7:dc:19:04:26:
51:9f:44:8a:62:af:76:f2:b1:02:13:5b:d2:f2:24:
65:47:41:85:e5:a5:86:17:ad:c9:8e:12:f7:9e:38:
09:3a:ae:03:11:6e:64:e7:d9:fd:f4:71:df:0b:37:
c1:fd:7c:1c:ba:81:9a:be:03:58:b3:1e:fd:f0:b9:
1b:1a:d8:e3:2f:30:6d:69:b0:e6:7c:8b:d2:04:f1:
77:02:f0:c9:f4:e7:1d:c0:81:c3:3d:b0:1b:81:01:
e8:3e:bc:41:34:5f:d0:27:85:9d:00:a2:1a:92:fa:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C3:E9:C9:21:C5:8C:40:CA:67:7A:87:CC:DC:52:58:A9:C5:E9:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cd29f346-7584-364d-aa9b-157195ad0ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:0e:c8:5c:a7:66:b0:f7:28:45:2a:59:bb:d3:43:8d:23:ae:
45:14:2d:36:39:bc:33:51:ab:a6:a9:b7:df:a3:b8:7a:0d:86:
07:9c:0f:1d:53:9f:11:77:97:ec:50:b0:4c:63:00:dc:6c:b4:
fa:32:5b:03:1e:e1:f0:2b:3f:f8:d5:77:f4:9d:d8:39:0e:30:
6b:43:44:a6:6e:cd:3e:8a:7d:d0:3f:34:6e:5f:5d:95:5e:36:
fd:18:36:71:89:ee:9d:cc:98:ca:d2:2b:fb:57:ff:87:f2:ae:
86:10:60:96:18:53:af:9f:10:37:3b:ff:28:54:13:35:9e:5b:
42:f2:ac:f5:b8:d6:0f:3f:7d:0d:0f:58:f1:03:8b:37:7f:64:
41:7a:a3:d3:05:8f:58:16:7e:1b:a0:c8:0a:89:6a:76:f4:2f:
b0:14:45:eb:9b:22:d7:2a:b1:88:e1:dd:4c:25:f1:c7:41:24:
09:9d:c5:03:88:ed:1b:97:c9:ae:1d:19:70:ab:34:f4:79:2f:
02:81:55:0c:b8:d8:a7:3b:94:bf:01:48:64:e0:ea:00:e8:3b:
57:5f:53:e7:6c:07:5e:15:b5:e8:d6:8e:31:31:f0:57:97:23:
14:66:23:8e:28:1f:90:8d:f7:11:38:01:35:f8:5e:32:36:81:
49:7e:e8:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4CYJaEdC/FRAR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
NDdkMTNjNjItMjZjYS00ZDE0LTgyZGEtZmQwYTEyZTRlOWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiImwp/A6p83ikA1gjpxwcbFbbI3A1P6jLPD
CvEBccoGRSgKyI/Pa/g+7ncyUS7UKKZjHEBfwFAviCaaR1dTV43n5NTm8FW81cSA
0dN5lxniviVCxUr0T3yPZ+VIUvRD+SaSbVxMDpTOzTZFBF74mWsfL3TTiSBw6315
bJeOcG4t567NRmre6nw3Qh0cf0Yop9wZBCZRn0SKYq928rECE1vS8iRlR0GF5aWG
F63JjhL3njgJOq4DEW5k59n99HHfCzfB/XwcuoGavgNYsx798LkbGtjjLzBtabDm
fIvSBPF3AvDJ9OcdwIHDPbAbgQHoPrxBNF/QJ4WdAKIakvqyRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrD6ckhxYxAymd6h8zcUlipxenNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvY2QyOWYzNDYtNzU4NC0z
NjRkLWFhOWItMTU3MTk1YWQwZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkOyFynZrD3KEUqWbvTQ40jrkUULTY5vDNRq6apt9+juHoNhgecDx1T
nxF3l+xQsExjANxstPoyWwMe4fArP/jVd/Sd2DkOMGtDRKZuzT6KfdA/NG5fXZVe
Nv0YNnGJ7p3MmMrSK/tX/4fyroYQYJYYU6+fEDc7/yhUEzWeW0LyrPW41g8/fQ0P
WPEDizd/ZEF6o9MFj1gWfhugyAqJanb0L7AUReubItcqsYjh3Uwl8cdBJAmdxQOI
7RuXya4dGXCrNPR5LwKBVQy42Kc7lL8BSGTg6gDoO1dfU+dsB14VtejWjjEx8FeX
IxRmI44oH5CN9xE4ATX4XjI2gUl+6DA=
-----END CERTIFICATE-----
Generated at Wed May 13 11:43:54 2026 by rpki-client