
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a4a2cdfe-7a35-3ab7-8158-98ef9e73fa69.roa
File: a4a2cdfe-7a35-3ab7-8158-98ef9e73fa69.roa (raw, json)
Hash identifier: H5JP4vQEdfB7ccrdoqTuHAxrRs8U682zAeGeePpqnSY=
Subject key identifier: F4:1C:64:0C:FE:EF:C2:30:9D:22:EE:D5:59:B6:EA:A9:F3:55:F5:A7
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584DB079A7E657E2481FF18CC080
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a4a2cdfe-7a35-3ab7-8158-98ef9e73fa69.roa
Signing time: Fri 01 May 2026 13:08:58 +0000
ROA not before: Fri 01 May 2026 13:08:58 +0000
ROA not after: Thu 30 Jul 2026 13:08:58 +0000
asID: 834
IP address blocks: 64.204.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b0:79:a7:e6:57:e2:48:1f:f1:8c:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: May 1 13:08:58 2026 GMT
Not After : Jul 30 13:08:58 2026 GMT
Subject: CN=a3d19718-47ca-45da-93a8-c86a126ad641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:22:c9:c6:fe:c5:f0:ea:e5:41:9b:1b:c6:
95:12:87:0c:96:3e:d9:a2:8e:41:bc:e4:13:9a:7c:
1e:e1:59:fc:c1:c7:03:35:11:0e:1f:12:f6:96:e9:
c9:51:5e:c9:2b:fd:60:7c:32:0e:e3:c7:81:a0:87:
c3:99:39:7f:a7:58:8f:77:de:1c:4f:ff:76:da:ee:
1b:c5:8e:40:a9:09:51:fb:2a:8a:89:db:46:ae:36:
a5:6a:51:ab:61:a8:c1:a3:ac:0e:4f:52:7c:55:c3:
f3:33:88:09:43:1a:31:02:9f:e0:bb:9f:c7:de:bf:
01:5f:e3:02:0a:93:38:4c:28:75:c6:e3:5e:82:45:
22:85:30:3c:0b:3c:bb:d6:e6:6a:e4:17:a0:6f:6d:
44:31:68:26:f3:1d:9b:28:c7:65:bd:d3:47:80:14:
71:10:fd:15:f9:c9:d5:37:95:fc:e0:6f:c4:76:42:
bb:99:98:60:2f:08:57:16:b3:52:a5:70:ad:21:be:
f7:ca:a5:0f:e8:ef:a9:1f:80:fd:43:b7:ba:23:75:
f5:10:c7:54:49:53:77:e2:fd:64:0d:f3:13:75:1b:
5e:9e:47:10:46:5e:3e:e3:b7:cd:f6:2f:46:01:f5:
f1:5a:c5:57:7d:d8:78:34:5d:c8:50:33:85:95:5d:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1C:64:0C:FE:EF:C2:30:9D:22:EE:D5:59:B6:EA:A9:F3:55:F5:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a4a2cdfe-7a35-3ab7-8158-98ef9e73fa69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.204.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:9b:d6:78:6f:bf:35:2a:f2:ec:2a:30:16:86:a5:b0:e8:78:
d9:15:40:e3:c3:ae:25:e4:9c:bd:7f:05:46:14:af:6f:6d:88:
59:65:6b:58:0d:69:1f:9b:49:11:a2:48:04:4e:03:f8:ee:67:
01:7a:2f:cd:48:e2:ec:dd:8c:91:af:11:86:47:c3:a5:8a:5b:
91:ee:85:e6:32:76:c5:7f:14:75:fb:ba:f4:61:71:c6:76:ba:
8a:0b:8d:6c:7b:0c:87:e7:9d:23:83:5f:18:e4:e8:79:9c:4a:
b6:88:88:67:53:f2:02:e2:d5:2c:e8:8d:01:63:ef:60:3d:7f:
52:e2:ab:bb:76:83:a8:8e:42:3e:d6:cd:c5:75:6a:9b:f5:66:
a6:b8:a7:55:76:64:c0:34:3c:90:59:d0:c8:a8:9a:e0:47:09:
d0:96:0f:4c:b9:10:66:30:ad:45:b7:ba:eb:28:45:89:57:5c:
aa:6c:90:3c:82:94:77:3f:d2:25:0a:83:3b:de:b9:3d:59:ef:
f6:9b:28:9e:5b:28:91:4d:6f:70:2e:e8:90:36:94:9d:23:df:
04:c8:2e:f0:28:ef:72:8c:69:7b:ee:e8:36:56:69:03:78:68:
55:65:bc:c2:8f:8c:8d:7f:5a:e1:44:b4:33:27:0c:38:c5:af:
18:a8:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:00 2026 by rpki-client