
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/b04b7367-5452-3760-b2f3-796a906930bc.roa
File: b04b7367-5452-3760-b2f3-796a906930bc.roa (raw, json)
Hash identifier: PSqk/1L5MpH0BldVa22JJeBXYGjDq6WeqCGUdUHlf0Y=
Subject key identifier: 38:60:31:6F:F4:20:FF:91:4A:6F:F2:3A:B9:88:19:5C:E2:12:00:F9
Certificate issuer: /CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d
Certificate serial: 010D0C9F4328584EFF7781E299A31B1933DC9540
Authority key identifier: B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/b04b7367-5452-3760-b2f3-796a906930bc.roa
Signing time: Sat 29 Aug 2026 13:00:12 +0000
ROA not before: Sat 29 Aug 2026 13:00:12 +0000
ROA not after: Fri 27 Nov 2026 14:00:12 +0000
asID: 11965
IP address blocks: 64.39.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ff:77:81:e2:99:a3:1b:19:33:dc:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d
Validity
Not Before: Aug 29 13:00:12 2026 GMT
Not After : Nov 27 14:00:12 2026 GMT
Subject: CN=68712ecc-db0b-462c-8e22-38743238fcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:56:bc:31:65:c1:c5:b9:d8:2c:75:88:16:
cf:8d:62:8e:ec:91:19:df:59:14:e6:63:cf:a8:dc:
ad:ab:b1:a5:ef:f0:dc:05:0d:6e:92:b0:41:51:69:
e7:4d:76:59:f6:49:97:db:6d:a2:cb:92:4d:80:44:
c8:54:95:36:e8:60:fc:86:8a:97:33:c8:38:6a:26:
93:27:0a:3f:c5:1b:49:26:63:c2:ad:be:52:ed:33:
46:19:8b:54:28:54:7d:8e:30:9c:81:33:b2:e0:0e:
97:0b:5b:27:e6:c4:a5:47:82:27:76:99:73:10:06:
a5:6d:bc:e1:f1:8e:e6:fb:dd:04:6e:0a:89:72:a4:
a6:ed:e2:b0:a0:b0:64:28:6f:a2:71:2e:47:73:2f:
2f:22:bb:75:f4:a7:12:e8:e5:d9:d2:7b:ff:99:4b:
95:12:33:5c:d0:a3:6e:30:f8:4d:be:ed:2b:30:04:
2f:13:ce:dc:b2:1f:dc:b8:78:45:6d:1b:f0:12:47:
b7:0a:ef:6d:b9:a0:1b:59:13:6d:88:ff:68:ef:d3:
aa:90:68:db:01:e5:38:62:cb:60:3a:a2:55:55:e9:
bb:62:38:fd:d6:58:8e:ce:ea:04:22:fc:a4:4c:91:
31:f0:7d:f1:b2:80:77:bd:45:bf:a3:93:92:dd:3f:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:60:31:6F:F4:20:FF:91:4A:6F:F2:3A:B9:88:19:5C:E2:12:00:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/b04b7367-5452-3760-b2f3-796a906930bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl
X509v3 Authority Key Identifier:
keyid:B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.39.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:1b:14:7f:a0:c2:02:21:ff:9f:d6:b5:da:72:1e:12:48:2b:
28:1d:a1:0c:4a:b0:4f:8c:93:51:16:41:64:e8:dc:b4:ac:5c:
70:b0:5b:72:50:bd:ed:44:3e:6b:be:6f:d7:c0:16:83:43:4f:
ce:7f:67:79:93:6e:14:5c:4f:25:41:ef:03:66:5c:6c:e8:70:
3e:74:2b:cd:dc:50:28:d2:de:46:9a:45:28:d4:25:69:d4:71:
8a:c6:4e:81:84:ae:e8:7a:48:8a:1f:c9:51:d7:aa:d3:6a:f1:
b8:b4:0a:95:61:87:16:18:df:cc:3b:c4:c0:f1:67:e0:41:b8:
01:e4:9b:b8:33:de:1e:f9:02:b0:40:7b:72:1c:27:8e:16:a8:
2a:04:ec:b9:70:00:54:69:f7:4f:ba:bc:56:81:2e:ad:74:ab:
0c:32:02:fe:a5:90:ab:e3:5f:49:d4:f4:40:7e:79:d3:8a:f1:
bc:1c:73:df:f7:16:5b:24:29:46:37:dc:e3:dd:2d:b1:c8:4f:
c6:09:41:25:cc:fb:98:2e:28:dc:97:6d:91:1d:8b:4e:5b:7f:
96:55:87:fc:ac:e1:17:06:40:cc:b5:41:c6:5d:da:0e:10:65:
04:af:94:e3:7b:fb:2d:34:72:12:bf:24:57:f1:6f:31:7c:3a:
94:1c:ee:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:12:30 2026 by rpki-client