
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0334f83e-a4da-38dd-8d2b-488edbff6784.roa
File: 0334f83e-a4da-38dd-8d2b-488edbff6784.roa (raw, json)
Hash identifier: /f9ri3QBWWJGCP9BwEq38Psj8r9p+xpVjTqP+IgBucY=
Subject key identifier: 58:F5:A0:36:75:CC:A2:B2:12:DA:01:87:00:72:44:DF:03:1F:DF:59
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F146789BA6847897BEC2CAF80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0334f83e-a4da-38dd-8d2b-488edbff6784.roa
Signing time: Sun 06 Sep 2026 01:00:11 +0000
ROA not before: Sun 06 Sep 2026 01:00:11 +0000
ROA not after: Sat 05 Dec 2026 02:00:11 +0000
asID: 219329
IP address blocks: 68.166.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 03 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:14:67:89:ba:68:47:89:7b:ec:2c:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 6 01:00:11 2026 GMT
Not After : Dec 5 02:00:11 2026 GMT
Subject: CN=3e294c4d-f99f-449e-b5a5-38d65d897183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:3d:23:96:6e:47:ef:d9:da:d2:f2:8a:6b:
00:43:13:d3:7d:ac:c0:a2:9a:de:a4:47:a6:99:39:
76:24:e9:b4:de:34:ae:b6:e5:db:00:a9:9d:82:43:
65:e6:bc:62:4f:70:14:b6:60:57:bc:79:91:7a:48:
a6:c1:3f:0f:4e:c4:3d:25:d4:1d:8e:17:61:7a:77:
36:70:e8:11:df:47:b0:9c:9d:95:aa:40:06:7f:09:
51:08:71:d9:d4:eb:d2:c3:4c:ba:c2:0e:da:54:41:
8d:58:c6:f7:e5:a5:3d:f2:37:4c:ee:bc:30:29:4a:
b0:74:89:6d:32:27:c9:53:25:18:f2:4e:1e:a2:f4:
00:36:f0:27:2e:24:87:1f:db:e2:a0:4b:cf:61:27:
ce:44:3b:ea:00:61:4f:d3:14:e6:0a:5e:28:f5:3c:
2d:dc:04:76:d1:df:85:03:5b:d1:76:c7:f9:5f:3c:
ba:82:13:55:db:d3:41:c4:28:f2:a3:86:23:da:6a:
03:97:01:f9:90:18:00:a8:5f:6f:46:d1:5c:15:c7:
70:be:74:bb:76:89:71:a4:ab:b2:d3:f6:53:be:20:
aa:0f:7f:ae:7e:cb:89:a6:c4:07:4c:8e:41:d2:f9:
29:cc:50:e5:45:35:2f:f4:4e:91:e4:10:63:cb:59:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F5:A0:36:75:CC:A2:B2:12:DA:01:87:00:72:44:DF:03:1F:DF:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0334f83e-a4da-38dd-8d2b-488edbff6784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
68.166.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:21:2c:04:a0:da:67:86:99:1f:4a:13:bc:0a:aa:ff:57:25:
eb:94:61:c3:37:cc:0c:77:06:80:40:1e:ad:34:2f:19:f7:81:
a7:9a:f4:e2:38:ac:04:cb:9c:df:41:cd:1a:dc:94:b0:76:8d:
89:c7:38:b6:8b:6e:83:60:44:1f:9c:11:19:4d:59:5e:35:98:
9d:37:b2:78:9b:a2:58:7d:ac:c4:3d:25:a1:49:2a:45:48:7d:
56:ec:f2:3e:77:71:79:fc:67:2d:74:ea:43:17:d0:3b:c4:34:
94:44:18:6b:ac:6e:bb:18:48:90:27:96:52:10:93:d0:45:ff:
5b:ad:4a:9d:83:a0:da:cd:d0:ce:b9:32:98:81:6f:fa:1e:e0:
d8:87:3c:57:37:47:da:84:fd:f6:c5:e9:9f:c0:fe:2a:18:a3:
7a:6d:6c:28:57:04:7a:b7:12:b6:09:7a:c7:15:da:ae:60:43:
e4:2c:8c:3b:4e:10:05:f1:8a:30:2b:74:25:7a:e9:6d:93:37:
ef:d3:8f:39:24:fb:5c:e6:b1:80:c6:1a:68:dd:9a:c6:1e:ac:
75:8f:72:8a:c6:aa:05:d6:55:30:77:1f:f1:93:51:77:3d:90:
56:ef:05:32:0d:cb:77:89:47:1d:d4:2f:ef:98:d2:10:27:df:
8c:be:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:02:40 2026 by rpki-client