
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb25704f-5808-3257-a4a4-79acc329e388.roa
File: cb25704f-5808-3257-a4a4-79acc329e388.roa (raw, json)
Hash identifier: S++sLDNg0fAyxxMEQTVabpBcYlL5FiL9nE2LJUlNayU=
Subject key identifier: 49:0A:D6:A4:3F:B8:88:3B:A2:B7:F0:D5:50:51:43:C7:EB:34:40:CE
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F51D2A3A73E333F81C7EB6280
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb25704f-5808-3257-a4a4-79acc329e388.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 834
IP address blocks: 64.205.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:a3:a7:3e:33:3f:81:c7:eb:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=74828df6-92dc-4be3-a2ba-15f3d1ddd225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:ee:aa:25:1a:10:c4:87:2b:fb:b1:03:02:
c7:a0:7a:98:5c:0f:ad:7a:1f:b1:b3:32:db:32:a7:
2b:7d:c2:a2:05:5a:4c:4e:ce:db:6e:de:84:43:47:
7c:fc:2f:da:48:6d:e7:84:29:19:1e:48:6b:26:04:
7a:bc:8c:00:cc:23:9d:04:a1:f8:6e:36:da:e3:07:
92:ab:b6:9f:f5:67:0c:34:db:b5:41:89:a7:5c:14:
76:4e:2f:d6:61:39:74:9f:84:30:65:09:fb:b4:c7:
5f:90:a3:a3:aa:35:f8:74:d8:f3:21:85:37:eb:a6:
9a:ae:50:6f:72:3c:31:b5:38:13:29:0f:7e:02:1c:
bb:56:d8:04:8f:55:db:e6:78:d3:c4:8e:ad:af:01:
44:5b:22:88:59:30:5e:88:a0:a7:be:a2:1e:4b:1d:
75:71:c4:ec:e5:81:33:fb:fb:0a:5e:22:f0:ce:67:
33:94:0e:06:59:e3:db:c7:47:3a:98:b7:65:8e:60:
2f:6b:4b:e4:2c:e0:1a:7d:17:c9:39:c6:d7:5a:94:
04:ac:75:10:f6:eb:02:8e:e8:01:47:8d:0d:ad:b2:
e9:ff:5a:f9:90:0d:98:f4:e8:2e:f9:da:87:a1:35:
72:8a:ac:bf:d2:26:a0:b7:b5:9b:45:7b:74:c5:8e:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0A:D6:A4:3F:B8:88:3B:A2:B7:F0:D5:50:51:43:C7:EB:34:40:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb25704f-5808-3257-a4a4-79acc329e388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.205.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:5a:8f:e8:0b:6c:3a:94:3c:03:71:68:0f:69:6e:f2:3b:80:
95:51:2c:63:62:3d:0f:fe:de:2b:6b:aa:f7:90:7b:94:41:01:
0b:45:6d:1e:54:3e:79:55:d6:37:9d:89:dc:bf:64:dc:3f:8f:
6e:56:7f:ab:39:92:2b:2b:b4:75:a0:b3:c9:d2:c9:52:76:d5:
8b:30:0c:7f:d4:31:c6:fa:cb:e1:bf:e5:a7:37:04:a5:e2:e1:
44:5c:a4:43:d1:2f:ce:b6:f5:47:cc:4c:fb:fa:a1:73:77:35:
6e:91:7f:35:22:8a:0a:4a:f7:71:2e:94:b6:b9:c7:e6:88:43:
5b:3a:e1:f0:7b:82:de:22:d8:5c:7f:60:7e:fa:d2:05:8d:6e:
c5:cc:18:29:b0:3d:11:dd:d7:23:a2:21:e9:29:58:fe:44:4d:
5b:68:01:59:59:ee:35:16:35:a3:b1:43:f9:51:cd:75:da:8a:
fb:a3:a3:3b:1e:3d:6b:0e:81:0f:43:a0:b2:fd:d4:c7:c5:d0:
77:7a:0f:60:55:13:dd:e8:24:df:57:d3:3a:4d:8d:6f:1f:6c:
32:d4:b0:78:90:ce:4a:a5:b7:ec:72:71:71:72:5c:29:7c:08:
f4:7e:83:ee:8e:2d:da:67:18:e6:21:af:ba:79:66:82:91:15:
c1:34:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:57:51 2026 by rpki-client