
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/64b1f14d-90df-3171-9bff-66d0fd94a68b.roa
File: 64b1f14d-90df-3171-9bff-66d0fd94a68b.roa (raw, json)
Hash identifier: csnkqFycDYd2jz0eF0X5hxYcwp1ggWPZIrY+XKKimPM=
Subject key identifier: 0C:B0:69:47:7F:25:F3:DD:C9:E4:CC:1B:B1:01:A4:54:0F:49:67:DE
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D237A730573F0BF0EBACA5EC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/64b1f14d-90df-3171-9bff-66d0fd94a68b.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 207266
IP address blocks: 65.22.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:73:05:73:f0:bf:0e:ba:ca:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=b6d0ab55-7c26-46aa-82e8-c7b9ac14f7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:b2:05:8d:36:5f:df:aa:68:ee:14:aa:55:
e5:21:81:2d:27:9c:1b:23:58:cf:fb:a6:50:81:06:
f0:f7:2c:5e:34:7f:4d:00:10:ce:2d:d1:b8:1b:c7:
2c:79:14:53:5d:45:eb:a8:eb:e5:87:81:91:03:28:
e5:92:77:e9:5c:a8:0b:9d:81:5b:27:e5:40:07:45:
e8:f1:66:59:d7:d3:80:fb:7c:be:d1:10:c0:80:cf:
4c:54:c5:8d:fd:9e:35:54:cb:57:3b:7a:20:b7:88:
c9:d8:db:a6:3e:74:af:1e:89:0c:b5:74:a3:32:c0:
42:ac:21:2f:a7:6d:a3:7b:a4:db:6e:22:fa:36:74:
df:3e:ec:46:ea:79:10:5e:53:9e:26:78:f0:5e:e9:
57:68:06:e4:e8:23:a7:42:83:09:2e:00:cf:d3:ac:
15:5b:b2:8a:44:3f:4c:8a:0d:c5:10:7b:da:d1:09:
d3:2f:77:33:bd:28:82:5b:87:d5:80:4e:ac:59:a2:
f9:5d:51:e3:e2:90:5a:ff:90:e1:eb:eb:20:ba:32:
dd:5c:5d:f0:87:3d:49:74:a4:e9:27:78:b6:05:3d:
af:96:e7:99:79:da:dc:31:dc:fa:28:78:f7:df:4b:
c4:33:c0:7f:ce:66:0d:aa:86:b8:14:40:0f:cd:02:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:69:47:7F:25:F3:DD:C9:E4:CC:1B:B1:01:A4:54:0F:49:67:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/64b1f14d-90df-3171-9bff-66d0fd94a68b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:d2:d6:66:fb:c0:fb:80:dd:30:f0:e7:69:86:2e:b5:ef:89:
77:75:c1:a3:0d:9c:21:bc:10:34:e3:c5:bb:18:bf:d1:a4:6c:
28:e6:16:ab:6c:8b:d9:b2:a7:27:b9:86:c4:99:4c:9e:6b:98:
48:e0:0c:33:b6:60:27:23:0d:bc:dd:39:10:3b:9f:0b:e4:af:
ed:68:36:ce:1b:e6:17:23:54:b5:30:d7:83:b0:76:1c:18:5e:
c2:77:9f:ed:09:e8:16:ad:ba:60:d0:40:60:26:e1:11:22:f6:
c3:67:43:d9:94:65:49:11:1d:91:7f:04:26:2b:e1:8d:92:0f:
e9:fd:b7:c9:3a:a5:be:a7:9b:02:de:07:f7:dd:bf:09:50:30:
17:d9:19:10:4a:37:d3:7c:fc:b1:53:b9:68:87:59:a0:51:57:
ac:dd:01:87:d9:9f:e0:61:76:26:33:e4:50:79:44:11:49:70:
fe:f8:58:e4:9e:9a:d5:99:cb:e2:2f:d2:a9:7d:92:de:00:cd:
cd:f7:32:db:f4:b0:07:5b:e8:3b:13:6f:91:9f:f8:2c:cb:c8:
18:2a:46:6c:49:f2:bb:eb:24:3d:55:7a:77:80:25:05:0a:74:
d5:7f:b2:5c:d2:4c:c4:34:47:bf:ea:63:46:1a:52:fc:ca:5d:
42:89:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:27 2026 by rpki-client