
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/cb1754c2-89fa-3b4c-a110-0ca448297dac.roa
File: cb1754c2-89fa-3b4c-a110-0ca448297dac.roa (raw, json)
Hash identifier: BurtqB6jlWCqvv3QfNPOVj287wPD4epodCIBlDIBUIA=
Subject key identifier: 29:4E:9C:4B:C9:73:A7:CD:38:F7:7F:C8:BE:20:75:71:0D:28:4E:18
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F4328584E5A49F2AA401538E8D2CEA9F2
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/cb1754c2-89fa-3b4c-a110-0ca448297dac.roa
Signing time: Wed 01 Jul 2026 09:00:12 +0000
ROA not before: Wed 01 Jul 2026 09:00:12 +0000
ROA not after: Tue 29 Sep 2026 09:00:12 +0000
asID: 55269
IP address blocks: 67.214.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:49:f2:aa:40:15:38:e8:d2:ce:a9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Jul 1 09:00:12 2026 GMT
Not After : Sep 29 09:00:12 2026 GMT
Subject: CN=249bafd1-01be-4053-b74f-826d106aeb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:56:51:fd:53:53:41:22:01:da:43:5b:46:
77:c8:a2:1e:47:f7:0f:df:75:5c:68:f7:54:55:70:
39:2b:ba:f6:a2:93:e0:3d:f4:23:41:32:21:6a:6a:
7e:7f:53:c3:b8:20:0a:d1:9a:ca:fe:3a:78:57:29:
b0:91:da:d5:4a:92:8a:d0:56:90:97:32:78:62:87:
00:18:80:72:59:0d:63:52:a9:48:64:c4:f6:d8:7d:
02:9e:14:93:6b:81:bd:9f:01:2e:5c:de:7e:7f:74:
f2:0e:97:a1:69:fd:c4:f5:0a:c2:b3:ff:27:ac:98:
26:5e:05:f8:35:26:30:1e:86:6b:4e:ec:b5:42:9d:
e3:c1:83:a5:07:58:fa:a8:00:8e:38:2f:d7:a3:87:
3f:25:cb:0f:75:12:8a:6d:ce:e7:89:93:3d:20:44:
4e:28:cb:6c:ca:b4:04:2f:10:cf:03:32:50:f0:1e:
bb:a0:25:01:78:f2:d3:a4:6c:56:6f:24:39:76:69:
ff:50:5c:c4:51:39:c4:49:a8:96:d1:74:be:3e:ce:
47:a6:0f:f9:36:ce:23:cf:87:53:1f:61:ee:27:76:
21:09:3a:30:ab:54:62:fd:11:e5:5d:13:c5:a1:a9:
10:4c:df:c7:fa:39:a0:61:d0:b0:a7:88:07:db:a2:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:9C:4B:C9:73:A7:CD:38:F7:7F:C8:BE:20:75:71:0D:28:4E:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/cb1754c2-89fa-3b4c-a110-0ca448297dac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
67.214.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:56:f7:25:76:99:a2:89:36:f5:30:6f:a6:2b:c3:2e:e3:97:
71:e9:46:a3:c7:b5:f0:61:82:62:0a:0a:c5:6b:04:1a:c1:b0:
d8:9a:82:06:b7:31:f0:cd:35:4d:81:3a:82:19:9e:2f:03:e3:
60:08:3f:1f:63:df:7a:c3:5b:b0:84:60:02:2b:44:fe:65:29:
c3:e5:65:b5:23:d6:82:66:da:86:17:21:b3:9c:6e:59:ed:49:
81:59:f5:11:2f:22:9b:91:0a:13:6a:68:0c:13:4c:9b:54:59:
1f:95:cf:f8:ce:82:f5:df:e4:b4:ac:27:39:69:2b:a0:71:7c:
72:f8:18:16:1a:0e:d1:af:08:08:d7:ca:a1:cb:9d:c4:dd:74:
ea:01:b4:1b:fe:93:6f:73:bd:96:ec:f1:96:68:95:6d:a1:54:
50:fa:4d:c6:5d:e3:91:58:d4:ae:de:71:bb:dc:a6:78:5d:a9:
eb:da:c7:98:9a:70:6a:0c:ab:6e:43:a6:82:e9:23:0e:41:8b:
89:6e:ff:b9:32:96:d6:b9:3e:30:38:ed:6b:fc:75:5e:82:13:
17:e7:24:b7:10:75:94:72:7d:75:af:af:6f:85:35:86:8e:8b:
64:15:b8:d8:c5:68:67:6c:a0:be:3c:b0:1d:f2:1f:67:ac:d4:
14:88:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:10 2026 by rpki-client