
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9095152a-38e0-3430-998c-371744f1abaa.roa
File: 9095152a-38e0-3430-998c-371744f1abaa.roa (raw, json)
Hash identifier: Me5Ai2A9L4SHiN8KG80xMX/GZhfD8e1PIMmh+2nwGSk=
Subject key identifier: 69:DE:37:B3:6A:48:03:55:9D:C2:27:EC:D9:67:79:55:A4:49:ED:40
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584D47C50441C3702BC884FB7B60
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9095152a-38e0-3430-998c-371744f1abaa.roa
Signing time: Wed 25 Mar 2026 01:00:32 +0000
ROA not before: Wed 25 Mar 2026 01:00:32 +0000
ROA not after: Tue 23 Jun 2026 01:00:32 +0000
asID: 25645
IP address blocks: 64.92.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:47:c5:04:41:c3:70:2b:c8:84:fb:7b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Mar 25 01:00:32 2026 GMT
Not After : Jun 23 01:00:32 2026 GMT
Subject: CN=518ac5cf-1bdd-4e2c-abe6-19710e8dac85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:a7:8d:96:f4:92:a5:89:c5:aa:ce:7a:28:
e4:38:61:75:6b:08:a3:04:08:5d:d6:0e:38:51:67:
21:63:52:68:0a:b3:60:aa:ed:e4:b6:34:27:14:e9:
eb:c5:84:2a:32:07:aa:76:59:7b:a6:26:8b:ab:fb:
49:01:f6:d5:14:64:48:6f:94:f6:da:54:10:44:0c:
66:18:98:e5:d2:2c:35:f0:e6:c0:63:df:47:5e:85:
a2:b1:9d:d9:ff:53:05:01:15:2c:11:f0:f6:2d:b8:
f4:85:42:76:80:ec:34:9c:64:cc:a1:0a:45:40:06:
7a:42:25:0b:9f:ea:7b:52:3d:3a:b9:e9:f2:ba:3d:
c6:8e:84:8b:ae:01:39:4d:e9:1d:f5:98:d3:a1:32:
da:d4:ca:61:a4:c4:99:e7:d7:4e:41:87:8a:d3:e5:
1f:df:89:14:91:72:2b:8a:48:fb:d4:49:39:22:05:
0a:5e:d8:20:70:51:3e:e2:41:2b:0a:59:d7:39:9b:
6f:7d:16:6f:cb:17:21:f8:05:93:87:92:54:02:dd:
5d:d6:38:84:5b:33:a9:36:2c:43:e6:97:14:1b:17:
c6:2e:c8:15:8c:74:4b:f0:73:13:2c:97:5f:68:e6:
e4:96:09:ac:5e:0a:6b:b0:ff:eb:73:a1:06:ed:83:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DE:37:B3:6A:48:03:55:9D:C2:27:EC:D9:67:79:55:A4:49:ED:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9095152a-38e0-3430-998c-371744f1abaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
64.92.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:60:25:6c:da:a3:21:9c:b2:c5:4d:5f:71:f9:41:df:33:0e:
16:7a:4e:2d:09:a9:00:fc:ed:76:26:d7:c2:af:d9:be:3b:67:
5c:29:01:0d:9f:c3:9b:70:c9:f4:5b:d2:4f:e2:e8:9c:1d:9c:
f0:cb:72:46:0b:4c:f3:41:eb:af:88:1f:be:a3:dd:d4:d2:8e:
18:45:23:b0:ff:73:ca:d2:6b:dd:1d:3b:1b:82:1a:39:42:47:
4b:07:aa:b5:7e:ef:50:89:cd:87:4a:65:75:f7:ac:94:e4:c9:
71:f1:09:2e:70:a1:a2:c1:3f:63:1e:2f:fa:c3:96:ed:ed:b0:
6f:b0:e5:ac:76:62:5a:c3:d1:ca:90:17:75:33:e4:5d:51:23:
5b:40:22:54:b8:4b:a8:00:f1:eb:37:7e:ee:b5:b4:a1:f1:3c:
12:38:22:57:7e:ea:73:57:52:f2:2b:a5:81:6d:dd:f7:ea:b0:
32:b9:53:95:bd:5b:56:4a:cd:66:8a:3d:06:ad:98:c2:9c:60:
38:0f:64:84:da:c7:7b:0d:83:f6:95:83:b7:3d:b6:f3:b7:ad:
ae:c5:47:e3:10:00:e9:8f:b3:b4:c1:4d:c5:9c:9f:30:ea:d0:
21:60:a7:c2:1e:16:75:17:e5:b5:77:5f:83:42:6a:9a:f4:f4:
98:dd:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:19 2026 by rpki-client