
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa
File: ca96c743-26b4-3af6-9b1c-895a1d32be10.roa (raw, json)
Hash identifier: vMqoANfu95R4MJxWDAIBk70E3rfm2OayBO8NfLGYptI=
Subject key identifier: FB:CB:E3:CE:00:D0:CE:75:31:2F:E0:69:86:71:B5:C7:11:20:24:84
Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial: 010D0C9F4328584E86F4ECD1257F1C3CA30CC080
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa
Signing time: Fri 17 Jul 2026 09:00:14 +0000
ROA not before: Fri 17 Jul 2026 09:00:14 +0000
ROA not after: Thu 15 Oct 2026 09:00:14 +0000
asID: 13807
IP address blocks: 162.221.232.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:86:f4:ec:d1:25:7f:1c:3c:a3:0c:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Validity
Not Before: Jul 17 09:00:14 2026 GMT
Not After : Oct 15 09:00:14 2026 GMT
Subject: CN=ba880ae2-14b8-4c78-9f52-84426fed1b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:89:e3:d0:51:62:7b:6e:39:ee:e7:6d:40:
a9:df:c4:30:44:1e:71:52:1b:b1:cf:08:76:77:cf:
c2:78:12:99:dc:18:32:2a:98:20:56:dc:20:7c:2c:
dd:d4:80:c6:58:40:33:ee:c7:b1:24:f8:fd:9f:db:
1f:b5:42:a5:4a:ed:54:a5:f6:18:59:a4:b0:c6:13:
cb:8d:58:e8:56:95:da:1f:77:69:9c:23:52:34:7e:
69:44:3d:5f:ac:c8:83:d8:b5:d5:fa:52:f4:06:a2:
78:55:cf:87:cf:6a:e6:3a:ab:7c:4e:7b:dd:43:7a:
8d:bf:a7:36:35:24:eb:d6:d4:6a:79:ed:c0:81:ce:
29:33:ee:28:90:2f:61:4c:27:57:5e:f5:d4:70:9b:
a2:70:c2:4e:40:32:63:e0:ad:7f:d0:c1:18:6e:bc:
8a:46:58:75:a2:dd:92:4f:ee:11:6f:42:24:ff:0b:
3a:55:6c:9f:33:5d:9b:4a:72:da:94:2c:28:8a:4e:
94:4c:b5:12:99:7b:cf:71:cc:ab:7f:55:b7:56:92:
35:62:10:79:a2:21:40:86:e8:59:65:ab:f0:6a:34:
17:8a:fe:33:b0:e6:9b:fc:79:11:bf:89:60:4d:9d:
5a:aa:7e:b5:a3:dd:56:f9:20:af:ac:42:9b:0e:5d:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:E3:CE:00:D0:CE:75:31:2F:E0:69:86:71:B5:C7:11:20:24:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
X509v3 Authority Key Identifier:
keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
sbgp-ipAddrBlock: critical
IPv4:
162.221.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:90:4a:e4:52:cd:dc:48:24:79:04:63:1d:ba:be:d2:dd:e0:
a0:17:be:48:e0:6d:42:a9:a1:3c:85:66:94:02:35:37:20:9a:
d6:bf:05:4e:06:4c:9a:b6:d4:ee:e6:da:46:2a:23:f4:3a:3a:
42:49:71:78:22:c4:44:19:00:6b:31:6f:22:b1:4f:15:26:5f:
5d:29:52:74:92:d9:81:c7:91:d8:92:68:fc:70:ee:ea:30:ca:
61:97:e9:e6:83:b4:d3:b6:26:11:4a:86:25:fe:e6:5e:a8:3c:
ee:ae:19:58:1c:b7:39:0f:d7:76:66:d5:e0:86:1c:1d:ad:ee:
e7:d6:df:3f:e2:79:e5:3f:bd:0b:55:38:00:64:08:6e:ad:55:
33:bd:b2:0e:36:dd:d3:ab:e5:e6:f7:57:44:f9:e1:f4:fe:ab:
c0:b5:45:7f:e2:3c:35:31:54:ac:d2:c7:8b:7a:b9:ae:61:c1:
3c:ff:7f:c4:c3:61:5e:80:81:7b:de:a6:8f:0d:90:3a:e5:c5:
93:3c:2a:f3:2f:5f:10:5b:91:75:78:53:26:15:e5:52:1f:7f:
99:b9:11:be:ff:57:d5:1d:d0:33:3b:14:fa:6b:22:fb:f9:2e:
75:41:1f:ab:c7:54:43:bb:5c:05:aa:b3:71:68:b6:10:0c:48:
9c:cc:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:08:11 2026 by rpki-client