
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8bc24f30-bed9-35fd-8cbf-9492fbd82409.roa
File: 8bc24f30-bed9-35fd-8cbf-9492fbd82409.roa (raw, json)
Hash identifier: pliAfxaENyKNCjSJVzJP2f+65JVZaqUToh0NBsTq/U0=
Subject key identifier: BB:23:B0:1C:9D:9F:AB:4C:6F:88:C7:EF:B4:31:EC:53:7F:BD:82:A3
Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial: 010D0C9F4328584F2D87C2DE5533771143F8DF40
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8bc24f30-bed9-35fd-8cbf-9492fbd82409.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 207.202.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:c2:de:55:33:77:11:43:f8:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=424a50d3-4474-49ee-aa7a-ede9c41d35c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:14:b9:4e:eb:2b:dc:be:34:1f:f9:0e:3b:25:
a8:db:f6:41:4f:ed:cd:ce:08:38:38:9c:7c:bf:ba:
97:8e:ec:3a:62:6f:6e:72:3c:b5:e8:26:19:17:87:
90:7f:1d:5f:fc:6b:06:e5:aa:3e:43:e9:cd:ab:7d:
73:f4:bd:ca:3f:d6:ba:7c:a0:32:60:7b:e8:b8:5c:
70:78:df:66:be:1e:ee:8e:9e:91:09:49:41:92:25:
bc:7a:9a:aa:6e:3e:ab:72:28:ca:50:b4:05:9a:d9:
6d:4f:82:1b:10:8a:90:23:7c:d9:23:29:d0:4e:3f:
03:a6:35:5e:36:fd:2e:62:57:f6:21:14:9e:a9:25:
3e:8d:63:41:21:b1:26:ed:1a:de:97:4e:cf:7a:0b:
d2:94:4c:d6:31:a9:ae:40:f0:44:d3:1c:b2:d9:3d:
2e:4a:02:5f:d1:d3:57:26:33:34:e2:61:94:b4:1b:
18:7e:6a:dd:f8:ac:86:11:51:47:52:c1:10:22:ee:
41:62:76:87:5b:cd:51:d9:10:f6:13:fa:80:79:4b:
9b:92:0e:3c:5f:7a:06:66:3f:b0:70:15:5f:2a:39:
de:51:0a:65:d9:3a:82:5a:dd:6d:e1:47:ad:13:ea:
34:54:fb:b3:b4:9c:2e:dd:fc:ae:cb:e5:57:60:20:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:B0:1C:9D:9F:AB:4C:6F:88:C7:EF:B4:31:EC:53:7F:BD:82:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8bc24f30-bed9-35fd-8cbf-9492fbd82409.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
X509v3 Authority Key Identifier:
keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
sbgp-ipAddrBlock: critical
IPv4:
207.202.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c1:d1:65:96:d6:f7:6b:42:fc:b1:36:f4:37:b0:a7:6e:cd:
cf:f1:00:36:69:b2:15:1e:43:ae:9e:00:79:0a:15:bc:c6:77:
22:bc:3d:85:9f:ed:54:32:dd:f1:6a:f9:67:5c:4e:e5:0b:96:
84:c4:b3:02:a2:39:d8:51:e5:7d:23:0a:d5:7b:8d:e8:33:c8:
4b:31:6b:8a:04:a0:95:2a:60:5a:fd:12:e4:5f:21:86:1d:5e:
cd:59:c5:92:45:6a:e1:84:63:c3:b3:27:e5:b5:d2:e5:cb:b5:
5c:47:b3:a8:8b:93:93:b8:59:5e:36:3e:19:9e:27:3c:a3:db:
cd:47:2e:37:f8:bf:14:93:3f:8b:07:f1:05:0f:25:e0:90:d6:
f0:42:c3:8e:ee:ab:c5:c8:2a:74:7a:92:0f:39:e9:a6:b1:1a:
09:e4:07:28:91:a7:02:39:85:2f:ca:21:de:e7:fe:ed:b0:86:
9e:a9:aa:da:84:0f:6d:2e:ed:bf:a4:b2:e5:5f:7f:d2:17:25:
5e:cb:cb:4f:fc:d7:0d:27:83:a9:8f:2b:d6:1d:3c:17:f0:f9:
4d:79:7d:36:11:e3:fd:8d:98:65:04:bd:54:56:f7:bb:83:08:
38:08:a0:a5:1a:91:1f:4c:26:1a:11:2d:e5:68:05:21:31:8d:
9f:6d:8f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:42:43 2026 by rpki-client