
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa
File: 09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa (raw, json)
Hash identifier: iS/fq/uVv+Mr6xMkXNYOUwlzk8WYbPnxuWGSGXLJNi0=
Subject key identifier: 6F:71:ED:0E:53:77:91:4A:71:E7:DF:9A:5D:B6:C1:52:DA:1A:9D:1D
Certificate issuer: /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial: 010D0C9F4328584DAAE023DFF2DA1874A7336B00
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa
Signing time: Wed 29 Apr 2026 13:00:31 +0000
ROA not before: Wed 29 Apr 2026 13:00:31 +0000
ROA not after: Tue 28 Jul 2026 13:00:31 +0000
asID: 803
IP address blocks: 142.165.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:aa:e0:23:df:f2:da:18:74:a7:33:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
Validity
Not Before: Apr 29 13:00:31 2026 GMT
Not After : Jul 28 13:00:31 2026 GMT
Subject: CN=b2657547-a680-47ce-a689-bcc4756bd9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cf:0d:84:e4:3f:e6:92:50:75:ec:51:14:60:
c5:70:7f:c9:78:90:1d:08:5b:60:97:64:81:6d:4d:
b8:af:07:cd:6a:5b:a7:92:04:d6:fd:3b:b1:98:45:
fb:c5:31:c9:ee:51:88:3f:af:b1:c4:00:ce:4f:51:
3c:1e:ac:bb:ca:c1:62:99:bd:60:bb:fa:8c:f1:ce:
72:a5:a6:59:79:91:44:6b:47:75:72:9f:dd:9d:38:
fb:4d:07:72:6b:1c:94:0a:22:14:23:ed:71:aa:3f:
8c:65:1d:d9:2e:36:d3:66:e3:a0:1f:0f:f8:74:d5:
a4:d6:85:1b:d2:6c:4a:38:b9:3f:3a:7a:ba:ca:b2:
b8:b1:5a:6c:fd:11:a6:9c:61:00:6d:e9:f2:f1:59:
df:f4:a4:67:71:c6:77:80:60:6e:76:e8:67:85:1d:
6b:16:ce:1e:87:1f:ae:ca:9d:be:f1:8d:ab:92:44:
4d:0b:57:58:62:01:16:f4:8e:1b:bc:f8:9e:02:6b:
06:6e:6f:4b:62:3d:43:c5:ea:de:ac:0e:4c:db:42:
7e:dc:6e:52:69:22:75:13:79:b2:3b:99:86:5f:4b:
90:95:9a:f6:67:94:06:96:bd:d9:cd:46:21:1d:de:
62:d5:46:57:50:2c:0a:d9:a0:53:74:2d:a5:86:4f:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:71:ED:0E:53:77:91:4A:71:E7:DF:9A:5D:B6:C1:52:DA:1A:9D:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
X509v3 Authority Key Identifier:
keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
sbgp-ipAddrBlock: critical
IPv4:
142.165.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:f5:40:30:3a:37:0f:86:95:63:30:b7:2c:ff:b4:d6:f6:f7:
e7:6f:a0:26:76:4a:a4:84:ca:2a:fe:8a:82:61:7a:a2:52:8f:
fa:c6:d6:29:c3:18:4b:58:39:8a:e9:8f:15:f0:63:68:4d:4b:
15:a3:ec:00:98:b3:a5:76:60:af:b8:ce:1d:dc:ec:6b:10:00:
b1:4f:9e:31:76:65:8c:22:84:36:9e:1c:0e:21:db:df:b2:ce:
28:bf:f6:57:8e:02:1d:20:cd:18:5e:3c:ce:bc:80:37:b7:e4:
20:81:8c:7e:c8:43:ba:b5:25:ee:f4:67:e0:c0:e5:a5:e9:aa:
ea:ca:7a:30:2e:34:cf:d6:8b:b8:f2:6f:37:bc:1f:dc:33:21:
ca:47:96:a4:82:0b:00:00:44:a8:76:67:f1:83:5c:1c:7b:57:
91:68:83:89:51:3a:56:33:70:af:98:f7:eb:b6:d3:f8:8b:3b:
89:de:e6:35:b5:0f:03:a4:b1:c0:c1:76:50:1a:e7:38:de:1b:
ae:97:f6:14:4c:3c:34:4c:b1:29:0f:0b:d6:f9:a0:68:b8:04:
b1:7a:f8:27:b5:eb:c9:41:be:60:f4:7d:19:7e:6a:dc:6a:ea:
8c:07:e3:45:31:b7:c8:0b:90:3a:b4:20:ca:a0:5a:8d:3f:4d:
41:f3:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:22:19 2026 by rpki-client