
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa
File: 468e47db-5e5d-3b56-8599-c0d6de193ee1.roa (raw, json)
Hash identifier: 9Xa+wT+g7ApT7RxUJRdJ+LJxsmHVLZvVVCpunheqMcQ=
Subject key identifier: FA:DA:B1:8A:44:D4:71:51:ED:47:33:02:7A:01:1D:DB:C4:BA:CC:7C
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584F18979A54815376E1AA704F40
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa
Signing time: Mon 07 Sep 2026 13:00:12 +0000
ROA not before: Mon 07 Sep 2026 13:00:12 +0000
ROA not after: Sun 06 Dec 2026 14:00:12 +0000
asID: 25645
IP address blocks: 208.85.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:18:97:9a:54:81:53:76:e1:aa:70:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Sep 7 13:00:12 2026 GMT
Not After : Dec 6 14:00:12 2026 GMT
Subject: CN=d3671558-be3b-42e6-8ae1-164c5c333754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:61:01:3d:42:03:1a:e0:cf:4e:e1:35:ac:
f2:a9:aa:09:e3:03:8c:8f:bf:da:d4:59:8e:90:3c:
5f:b1:56:63:fd:e4:74:50:6f:dd:4d:36:16:b7:4f:
b0:8b:60:b0:5a:11:dc:4c:68:b1:df:8b:c4:2e:94:
94:f6:88:6f:9e:8a:2f:d3:8c:cb:6f:76:0b:92:c9:
26:8b:c3:66:d8:c0:f5:39:a6:86:83:b9:05:24:fa:
a0:f9:7a:9e:96:c2:a9:33:43:ee:16:39:85:20:86:
02:ba:35:ed:b3:f0:f3:36:4a:41:90:c5:4a:15:49:
dc:87:72:b9:1d:c3:11:32:d1:82:27:e3:d2:22:ba:
67:8f:3c:37:47:8e:bd:4c:86:61:85:17:46:7e:70:
e8:e3:b7:fd:ba:73:a0:82:ee:45:90:ae:a0:91:b2:
06:b0:90:32:db:f2:87:7c:f4:f3:17:de:d2:52:e3:
81:c8:4c:c7:11:2a:7b:4f:ea:1f:c0:9b:32:97:11:
dd:41:d5:a2:ad:d0:62:61:5c:55:16:47:f7:7d:10:
ac:b5:96:d8:cc:ce:d7:fb:25:39:fe:3c:8c:b2:8e:
3b:0f:cf:b7:dd:2e:20:3d:f1:51:dd:d9:bb:dd:81:
f8:3a:2c:78:47:bf:7b:01:5c:e2:78:f8:ec:35:19:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:B1:8A:44:D4:71:51:ED:47:33:02:7A:01:1D:DB:C4:BA:CC:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
208.85.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:8b:5f:da:60:60:a3:25:0e:7b:33:a4:be:a0:41:1a:96:7a:
0f:83:bc:90:5d:d2:32:ab:27:1b:ae:34:62:9f:46:a1:44:d4:
0e:74:04:99:9f:34:40:cc:c2:03:7f:6b:18:aa:30:ed:a9:6e:
01:2b:66:a2:e5:7f:98:45:37:ee:1f:ef:3e:62:4c:d4:86:b0:
a2:79:39:04:a0:55:42:65:0b:e7:f1:1e:97:b1:02:d8:28:26:
a5:67:6d:2c:08:93:f3:51:50:0d:e6:c3:8e:4a:f7:b0:18:a5:
bc:a7:16:35:a1:36:9c:de:54:97:df:c8:a7:0c:03:dc:7c:61:
1b:9e:08:75:60:10:72:94:1c:83:d3:28:77:31:75:16:1b:a6:
b4:43:26:62:1a:64:e9:9c:48:4e:17:65:34:da:1e:7d:55:48:
21:99:19:00:0c:13:27:f9:8a:be:bb:53:90:81:07:74:d3:d8:
63:84:f0:98:77:dc:6f:1d:dc:9b:52:20:45:ae:fb:04:1d:09:
e0:64:bf:f9:ca:7f:53:a7:05:ae:14:19:2c:e9:8d:a8:c6:05:
99:af:a5:57:76:ac:0e:5c:eb:d1:90:ac:4c:a2:16:a5:ff:3a:
54:36:7c:e9:9b:06:71:eb:d8:d6:4c:e6:7f:e6:f1:81:e9:eb:
bd:c4:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:58:30 2026 by rpki-client