
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/805a6386-9e3a-3c39-9838-a4f1d371b171.roa
File: 805a6386-9e3a-3c39-9838-a4f1d371b171.roa (raw, json)
Hash identifier: kIok3V99lFicYFMEeoicyCTCUJQ5zgwVqgrj6RGcWY8=
Subject key identifier: 06:40:E8:68:A9:A7:24:68:7E:20:BE:F4:7C:77:DB:B1:48:25:61:FE
Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial: 010D0C9F4328584D3F64D056F3CB67EC29DD5680
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/805a6386-9e3a-3c39-9838-a4f1d371b171.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 62943
IP address blocks: 64.111.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:d0:56:f3:cb:67:ec:29:dd:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=f1320f88-e5d7-4223-9e64-d9c0addaec35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:3f:86:e7:8e:27:e9:ec:8f:5a:97:8e:dd:
e2:ba:c9:3a:ac:bb:40:ec:0e:e3:1d:93:a0:4e:49:
89:5d:af:c3:62:35:fe:b7:35:41:fc:46:2e:12:8b:
01:6f:6b:5d:50:f9:27:3b:89:86:4e:ec:6c:36:07:
0e:ac:79:2b:a6:a9:a0:60:29:75:4b:7c:13:a7:86:
95:ac:31:bd:e0:b1:6a:39:6a:f6:7a:27:3d:55:6d:
37:40:d1:ba:b1:c8:0c:0b:cf:d0:29:d7:b8:40:14:
0d:dd:27:92:c7:83:c6:e3:2a:7e:b4:d6:c2:2d:fd:
b8:56:ec:f2:f8:cc:a8:c3:55:f0:a7:58:58:04:ab:
f2:27:3f:30:4a:46:01:2b:7e:aa:8e:db:cb:a8:ed:
e7:d2:63:a5:32:fe:4f:c8:8f:06:ae:1d:88:c9:0c:
78:b6:84:19:e9:bd:62:07:07:81:41:53:70:52:90:
2f:9a:31:4e:47:08:7f:ff:82:e1:b3:a9:8e:87:35:
83:20:8a:6a:82:c3:b1:18:5f:f3:7d:26:0c:fe:c9:
d2:a2:af:16:d7:47:7f:4d:e5:d6:27:7e:f7:06:5d:
d6:82:9b:4e:7f:17:8a:34:43:d1:cc:b4:c4:dd:68:
f4:5d:30:e2:f3:15:7b:37:cd:bb:6e:7c:b8:04:5c:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:E8:68:A9:A7:24:68:7E:20:BE:F4:7C:77:DB:B1:48:25:61:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/805a6386-9e3a-3c39-9838-a4f1d371b171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
X509v3 Authority Key Identifier:
keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.111.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:d0:39:27:d4:ee:cd:42:15:07:de:df:45:c3:3b:e0:d7:57:
d9:89:6d:00:0f:09:1a:39:7b:02:cb:3a:82:17:2c:f2:0a:a7:
f7:b6:98:a7:f1:7e:8d:41:74:45:f8:59:20:c4:0d:88:f8:06:
87:5f:a9:c3:1c:22:c0:52:eb:35:61:e3:b6:72:c2:bd:d4:33:
d6:9e:a8:2a:85:b7:77:7c:fa:a6:48:2c:85:75:0d:70:1a:26:
d9:09:a8:5b:63:b5:e1:54:e5:7d:21:5f:16:f7:c0:61:48:54:
ee:56:83:7f:7f:09:98:0a:14:43:cb:a2:dc:d1:c2:00:07:62:
91:d0:ae:57:2d:88:cd:3e:79:0c:e3:69:93:b2:f6:46:b8:03:
80:93:1f:27:46:1d:39:31:6e:41:90:d9:2b:59:98:b7:ce:8f:
bb:82:7e:87:db:73:e2:36:97:c4:ec:e5:fc:43:6d:bd:b1:35:
0a:1a:8e:09:61:06:8c:37:cb:99:cc:d6:b4:8b:fc:da:f1:62:
3a:66:de:2a:b3:fb:14:34:20:61:65:66:a9:74:ed:c7:04:35:
b2:ad:91:47:70:b9:c3:8d:3a:27:ff:a7:93:19:e4:c0:0c:26:
d6:fd:b5:50:f0:39:05:cf:51:2d:f9:e8:68:9c:1a:3b:95:d7:
e4:14:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:33 2026 by rpki-client