
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/2e8acbff-1552-3529-94f8-0a925c87a027.roa
File: 2e8acbff-1552-3529-94f8-0a925c87a027.roa (raw, json)
Hash identifier: IGgT0hzWrOSSIWuw3nbfSTxFsxqegcujG76RUeIetD0=
Subject key identifier: BC:C9:2F:7A:95:FA:7A:D1:E2:29:0D:51:0F:5B:E1:11:36:A0:92:E1
Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial: 010D0C9F4328584D95F00746739E5E2DAECA90A7
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/2e8acbff-1552-3529-94f8-0a925c87a027.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 58182
IP address blocks: 64.7.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:07:46:73:9e:5e:2d:ae:ca:90:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=9568dcc6-32d0-4fda-b0d4-5eb28203523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:c0:1d:67:06:ae:07:e0:47:ea:4b:07:ff:
ee:a3:55:ce:4d:ef:b9:05:a4:58:bf:20:41:47:73:
4d:dd:2b:25:ef:a0:8e:cf:39:88:b0:dc:d7:58:5e:
dc:bc:52:02:83:bd:2f:e3:3c:08:e8:6b:24:19:f5:
df:d9:e0:1a:1e:b0:e5:ac:7d:9d:c6:11:7f:d4:97:
75:d2:70:24:c5:70:a1:83:23:e8:82:f5:40:3d:f0:
a5:18:a1:9e:c1:60:b5:94:72:54:4c:23:5c:f0:b0:
ed:68:51:29:20:13:db:f4:48:80:5e:88:4c:0a:63:
2a:98:98:93:75:26:8f:2e:84:1b:cb:cc:03:04:48:
39:7d:89:14:7f:d4:bc:69:e4:96:ce:10:fd:8b:7f:
33:cc:54:bd:ee:eb:b3:b2:c3:66:85:72:ae:b5:07:
26:20:ae:75:30:17:9c:99:90:53:67:ff:73:3b:ab:
96:d8:4d:62:7e:9b:ee:f2:57:d6:a9:8b:ce:f1:b5:
9d:b3:69:0f:10:1c:f1:bf:de:47:07:0c:d8:13:fa:
1e:0d:88:37:af:54:4c:3a:55:38:4b:4f:88:c1:aa:
0b:24:9d:50:ea:4c:32:a1:77:fc:40:5c:c4:e7:6e:
57:2e:86:3e:98:43:25:97:5d:9e:97:d5:cd:f9:8b:
4b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C9:2F:7A:95:FA:7A:D1:E2:29:0D:51:0F:5B:E1:11:36:A0:92:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/2e8acbff-1552-3529-94f8-0a925c87a027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
X509v3 Authority Key Identifier:
keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
sbgp-ipAddrBlock: critical
IPv4:
64.7.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:bf:35:3a:33:aa:18:e7:f7:5d:67:c0:7f:20:48:ba:a8:4a:
2e:6e:85:ef:7b:d9:c7:8a:89:9b:cc:ef:64:c3:eb:f6:02:ea:
8c:ad:a9:1e:84:33:10:39:b3:02:91:b0:1f:29:2e:dd:2c:82:
74:c8:70:be:9b:c2:08:2b:d1:0d:b6:86:41:1d:f3:e9:c1:2a:
07:8f:ae:17:46:93:95:88:11:b8:58:c7:4a:92:9f:6b:dc:86:
03:a4:cc:8f:15:18:ac:5a:df:8e:17:bf:50:59:cb:30:39:d7:
bd:75:21:fc:cb:7c:3f:ca:c3:64:35:07:3b:c6:a1:d2:b7:d3:
16:e2:66:e4:ed:02:09:ae:0a:8b:2e:47:28:3a:4a:bf:2f:4e:
f7:51:d5:18:7f:10:55:80:3a:7c:69:d1:58:4d:3d:eb:0d:47:
a1:3c:00:78:4c:39:c0:b3:49:77:78:f2:c7:ac:49:1f:e2:b5:
8a:d2:13:8f:70:b3:d3:c6:5b:c3:61:86:d2:69:14:f4:a3:91:
f8:6d:7b:53:7a:31:b0:da:1b:54:98:d5:30:2c:f8:3b:04:1c:
93:09:24:85:95:b0:54:f0:d3:b2:6a:05:0e:d1:91:ab:dc:6b:
20:d2:a7:0b:a0:ae:0d:de:6f:e8:3f:93:9e:77:4d:0c:73:78:
aa:56:a3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:52 2026 by rpki-client