
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa
File: c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa (raw, json)
Hash identifier: GhJ5u5tp7NCi25dwZq4YggXhiBz8y3kzic6bq9s9/zY=
Subject key identifier: B7:44:D8:4D:44:26:D9:50:25:58:65:D3:8F:51:B4:01:13:6F:29:8F
Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial: 010D0C9F4328584F49757AC798E8626E16EF3100
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 3738
IP address blocks: 192.250.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:7a:c7:98:e8:62:6e:16:ef:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=517a919d-f97d-41f0-a994-89e7a8dbcd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:25:d1:af:b5:5f:72:a0:d4:5c:76:82:7f:
a0:4a:6b:41:c5:9d:70:de:5d:3b:b2:29:4c:96:1d:
c5:a2:ae:17:43:30:97:ba:39:97:13:33:0e:ea:ef:
2f:1d:2e:88:73:d2:09:b9:6c:00:fd:cd:19:a0:d1:
6f:80:d8:0e:cf:1d:aa:6a:84:03:31:e7:25:5d:2e:
6b:1a:54:8c:dd:63:79:d5:38:23:6c:9f:64:3c:75:
f5:fd:a6:62:c5:0b:6a:36:fa:a2:72:a2:8d:fb:4e:
e7:8e:49:f4:42:50:22:80:b3:7b:b8:01:5e:78:32:
b3:bd:65:b7:cb:02:57:68:34:80:5b:c9:e1:d4:8a:
9b:5f:10:e9:73:d6:d4:27:ef:6b:97:4e:7d:67:a0:
01:96:4f:67:1f:31:92:91:12:16:1b:f1:58:bb:e5:
bf:71:bd:4f:b9:0d:eb:54:2d:4a:b7:a0:a9:ed:94:
2e:31:67:08:e2:9a:e9:f8:54:1c:c9:35:8d:97:76:
9c:cc:16:21:58:6f:96:30:fa:8c:f2:2b:fe:10:2a:
51:be:cf:f3:93:d7:4a:4e:c0:b3:07:f6:ef:76:44:
95:53:91:eb:76:b5:39:56:01:92:55:c1:45:61:a7:
dc:92:49:b9:a9:ff:2d:0f:d0:01:75:30:95:10:a6:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:44:D8:4D:44:26:D9:50:25:58:65:D3:8F:51:B4:01:13:6F:29:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
X509v3 Authority Key Identifier:
keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
sbgp-ipAddrBlock: critical
IPv4:
192.250.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:b0:bd:4c:59:89:57:1b:48:49:88:2c:cc:39:21:97:3b:cd:
5c:d2:09:35:f2:19:29:60:31:0a:a3:81:92:df:79:9a:6d:51:
7a:d3:6e:92:17:4a:de:b2:97:ff:97:8d:af:3b:42:a1:c8:e8:
84:8f:48:e4:95:18:0f:ae:9a:0d:c8:43:0c:f2:e2:d9:8e:18:
04:3e:a8:3c:a8:41:44:f6:e2:c2:6c:1e:22:95:59:22:1b:f0:
f2:8e:5c:fb:3a:05:5a:bf:ba:e6:61:8e:44:11:db:51:33:19:
b0:7f:b1:14:ef:c9:27:37:11:4e:a3:2f:3c:14:4c:5c:bb:04:
69:4f:8b:1f:6c:dc:a9:9c:9a:6f:9a:b3:b2:6c:f5:b0:ff:4e:
1c:b2:b6:01:6b:fb:33:e6:86:56:97:88:a3:dc:f2:9f:26:cd:
42:3e:a5:2d:a2:52:47:d1:73:4f:93:17:0b:c1:2c:d9:cd:1c:
f9:9d:7d:b8:a0:c8:ec:8d:cd:7e:1e:da:4e:27:32:c2:59:0a:
2a:bf:e9:32:f9:f3:8a:60:d2:55:3c:b0:f8:8a:f2:f2:bb:1f:
29:bf:a3:cc:36:46:80:06:f4:7e:60:c5:f7:01:6b:c0:36:fe:
79:01:ff:ab:38:94:ae:4d:2a:f2:d9:3b:0a:ad:96:57:1a:26:
5d:ef:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:22 2026 by rpki-client