
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/31f07ed7-344a-38f7-8704-58eef4b20499.roa
File: 31f07ed7-344a-38f7-8704-58eef4b20499.roa (raw, json)
Hash identifier: /D4xddN+UHz5X1dl/CFDF5Qjvzb3ig1V8dDUURZlpQY=
Subject key identifier: 71:C7:4C:1A:15:D9:46:E7:53:D6:6B:90:64:E6:C3:18:1C:F4:19:E7
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F576818D49A27A822D77C9700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/31f07ed7-344a-38f7-8704-58eef4b20499.roa
Signing time: Wed 30 Sep 2026 01:00:12 +0000
ROA not before: Wed 30 Sep 2026 01:00:12 +0000
ROA not after: Tue 29 Dec 2026 02:00:12 +0000
asID: 11059
IP address blocks: 64.205.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:57:68:18:d4:9a:27:a8:22:d7:7c:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 30 01:00:12 2026 GMT
Not After : Dec 29 02:00:12 2026 GMT
Subject: CN=a1cdd965-0c7a-4d3b-b777-f5b64dddfa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:85:84:61:05:cf:6c:a2:db:6e:75:5e:77:
09:df:25:1d:26:03:8b:b5:81:be:18:c2:30:5a:53:
d8:b1:0b:37:3b:7f:19:18:bc:ca:ea:b8:d5:22:26:
ea:a2:72:22:e0:7f:0b:eb:98:c6:91:6f:ea:0f:63:
62:ea:01:3a:88:98:c2:cb:76:ed:88:f6:c7:a8:f1:
3d:10:22:9a:7b:10:2a:77:00:ba:f7:3e:ab:68:78:
a4:d7:32:7a:71:43:30:43:35:12:5a:f8:b1:91:15:
f9:7d:dd:22:74:8a:f9:fd:11:f6:7c:88:9e:f3:b1:
26:df:67:87:03:9d:86:7e:c7:dc:f4:0c:55:9e:5c:
3c:15:48:c5:f0:0e:6d:0b:1a:5f:f3:25:8d:86:b3:
68:50:4a:da:76:66:4c:8a:ac:3b:3e:39:39:4c:77:
7b:cf:f3:b1:e5:b4:5a:66:33:00:39:66:d4:c3:b9:
1b:2f:29:6d:89:6a:49:9f:c3:05:fe:04:53:8f:11:
b9:da:92:ac:b9:b4:b3:f1:a2:dc:2d:a2:3e:30:c0:
1a:d8:db:c5:1a:cd:59:11:c1:2c:0b:5e:3c:94:16:
70:32:bb:de:11:d2:fa:8e:54:c8:9b:b2:7a:50:ef:
b9:9b:c7:4e:01:80:ab:d5:1b:9c:91:e7:4e:7e:1d:
1a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:4C:1A:15:D9:46:E7:53:D6:6B:90:64:E6:C3:18:1C:F4:19:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/31f07ed7-344a-38f7-8704-58eef4b20499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.205.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:28:25:2d:45:09:47:94:6b:e4:a1:fd:50:59:5a:f8:df:cf:
56:3d:56:f4:22:f9:6f:d0:ef:24:40:09:47:65:9c:50:df:6d:
86:0a:a9:7d:31:8b:47:99:1e:73:e8:10:b0:95:ac:18:1f:4b:
fa:b8:84:85:60:17:75:4a:e7:2c:61:87:b7:2e:ed:cd:39:ac:
39:31:94:a6:59:c6:e1:97:ec:23:5e:b8:85:18:a4:8d:89:e2:
b7:32:2a:43:0c:b6:70:31:d4:73:bc:d2:31:01:08:d5:0b:83:
04:2c:a0:07:88:82:39:47:28:7b:53:89:bb:22:15:9d:3d:59:
e0:6b:5e:32:4c:83:8f:47:c9:d0:e0:07:35:a6:79:85:0b:cb:
af:29:93:5c:e0:ce:d0:98:91:74:e6:68:9b:94:cb:a8:d0:39:
9d:22:b6:8b:fd:a0:bc:fb:ba:8c:63:4e:19:03:dc:90:53:6a:
e9:3a:ef:c4:c9:83:61:90:80:7d:70:41:2a:54:83:6f:19:ad:
b5:f7:eb:b3:a9:85:2c:bd:17:ed:7c:d1:3c:d5:ad:c3:40:f5:
34:70:fe:41:66:44:55:bf:46:19:f8:31:5f:0f:d0:df:e5:00:
bb:b3:d2:a0:e2:5b:65:8d:2e:2d:59:f2:60:c3:fc:93:7a:2c:
13:53:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:02:26 2026 by rpki-client