
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/71eec608-20a0-317a-8556-1a49b70badbb.roa
File: 71eec608-20a0-317a-8556-1a49b70badbb.roa (raw, json)
Hash identifier: 4U2HCmgrajY2S+Enpnqhp5rdyJT4lnMY9qYVCPJumzw=
Subject key identifier: 87:00:43:A1:62:70:0F:4C:0B:8D:E0:69:45:03:15:3B:7E:9E:8C:85
Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial: 010D0C9F4328584F6292E0252F73F8781072B480
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/71eec608-20a0-317a-8556-1a49b70badbb.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 16509
IP address blocks: 64.239.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:92:e0:25:2f:73:f8:78:10:72:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=dd19a7c4-a935-41a8-9a57-62ad0ee93a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:90:19:a2:98:1f:f2:b0:c5:33:d6:38:9b:
ab:5c:44:26:a1:c0:a7:04:2d:1d:89:e2:d7:f4:a0:
11:ee:58:f5:9f:d7:cc:5c:a3:71:d1:6f:a1:6c:42:
1b:c0:94:02:77:59:23:72:97:2e:e0:cb:3b:b9:38:
3c:c9:90:e2:bf:93:94:5b:21:b2:d6:39:8c:47:32:
6e:0b:eb:58:b6:e2:07:f0:78:71:f7:2e:12:84:12:
a7:fd:8b:05:c1:e6:88:74:ce:6a:8d:a0:ff:97:35:
39:4e:4e:d9:c8:0e:f6:72:60:d7:e8:81:92:d8:a2:
02:87:bb:0d:42:ac:64:4c:55:8a:69:27:96:0e:d0:
32:e1:43:02:19:3e:b6:13:00:50:8e:65:10:47:23:
be:4e:1a:9b:00:b3:51:88:01:ab:16:91:85:67:68:
c5:22:b8:e7:25:53:f5:47:2f:49:7b:31:14:37:b4:
d9:e7:f9:8f:88:48:04:b2:7c:fd:03:40:dd:5c:bf:
31:f9:49:a3:f0:0e:01:95:3c:1e:43:fd:e3:8c:7c:
ea:79:69:8c:ab:b3:d3:8d:89:7e:4c:06:d0:cc:d8:
90:88:7d:92:9a:b0:c6:10:1d:c4:0e:c0:25:11:3a:
ba:60:3a:34:b9:b3:b1:45:9d:e8:69:ea:c1:cf:cf:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:00:43:A1:62:70:0F:4C:0B:8D:E0:69:45:03:15:3B:7E:9E:8C:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/71eec608-20a0-317a-8556-1a49b70badbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
X509v3 Authority Key Identifier:
keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
sbgp-ipAddrBlock: critical
IPv4:
64.239.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
eb:50:30:bb:f9:0d:64:7d:35:e8:a2:fd:d4:da:39:bf:d1:8e:
f4:a0:d3:6d:bc:62:c2:9a:b1:11:fb:48:6d:0f:b0:8b:e4:88:
51:99:61:3c:9b:58:e7:24:db:5f:9f:33:8d:76:38:1c:c4:41:
a8:af:fc:c1:d0:34:51:d0:0b:13:6e:92:3d:1b:a8:07:52:61:
9f:cf:fc:fa:71:f7:53:15:62:0a:53:95:ef:5b:62:c9:ff:1e:
b5:a0:ac:30:b3:b4:5f:cc:30:09:f0:80:a8:5c:cd:32:8e:1c:
b8:9c:7a:04:d8:da:cf:c2:0c:5b:12:35:a7:81:37:d5:62:3a:
f9:f8:ff:ad:c0:2b:7e:4e:32:73:87:d0:fe:34:bf:aa:55:64:
f9:ed:c7:5f:c8:8d:9e:09:83:0d:f5:ca:6a:91:b3:d6:99:5d:
43:7a:8b:f4:fc:e9:6c:30:89:b0:83:55:45:5c:e3:95:aa:8c:
bb:ec:26:22:a2:db:85:70:7c:da:61:a5:34:24:d4:24:99:0a:
1e:7d:72:2c:4c:07:de:db:15:85:2c:3e:7f:fa:3d:99:bf:bf:
79:f3:26:f4:db:e2:7b:7b:52:f0:aa:cf:f5:fe:92:b3:24:55:
8e:15:44:ed:4c:10:10:1f:41:62:6f:c4:3a:da:7b:d0:cf:bd:
f8:b1:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:07:40 2026 by rpki-client