
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/0c31095a-f221-3a40-954f-4edf440bb06a.roa
File: 0c31095a-f221-3a40-954f-4edf440bb06a.roa (raw, json)
Hash identifier: dU1xoEv8DcbP03HOjYburnXThA8+L2l0zdDbUD3CbbM=
Subject key identifier: 62:71:6A:DD:F6:4C:DE:5A:B6:E8:CF:39:6C:3F:04:1B:77:70:25:08
Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial: 010D0C9F4328584CB121B0AEC306AEE84424F400
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/0c31095a-f221-3a40-954f-4edf440bb06a.roa
Signing time: Fri 30 Jan 2026 02:00:31 +0000
ROA not before: Fri 30 Jan 2026 02:00:31 +0000
ROA not after: Thu 30 Apr 2026 01:00:31 +0000
asID: 398465
IP address blocks: 64.84.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b1:21:b0:ae:c3:06:ae:e8:44:24:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Validity
Not Before: Jan 30 02:00:31 2026 GMT
Not After : Apr 30 01:00:31 2026 GMT
Subject: CN=e80bb108-70d4-448c-a34b-63f2e871d35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:91:53:73:b2:8f:42:1a:01:42:94:8c:97:
9b:57:50:35:17:d3:29:5d:4c:02:6a:2e:ea:81:6b:
2c:48:f2:96:d5:49:1e:3c:25:12:9e:74:0c:2d:70:
e9:bb:be:6a:ba:d6:dc:f5:d7:8b:f7:fd:19:90:97:
42:c6:50:a7:d2:b8:af:37:ef:b4:34:d7:fa:74:b9:
20:94:1d:ab:2f:4b:42:53:fd:2c:b1:8d:fa:fa:a1:
e5:76:e9:8a:af:a2:73:1a:a7:bb:a3:eb:84:36:b6:
30:dd:b4:64:31:41:30:53:bd:20:41:90:a1:fa:ab:
82:18:bb:c5:03:11:a0:be:10:36:04:da:08:69:63:
d8:bf:35:72:24:98:dd:76:d1:87:21:dc:5f:0e:2d:
9d:f1:3a:98:db:14:a5:7f:17:a6:a9:85:63:07:ac:
ea:16:eb:72:7b:27:12:bf:10:54:ac:4f:d1:f5:0e:
67:45:b9:94:5c:7a:6d:a9:7c:be:cf:ae:e1:9b:c5:
37:0c:42:0e:5b:bf:56:d2:28:7b:f4:f6:f7:9b:ec:
75:02:8d:42:d7:e1:44:62:9c:e9:84:8c:15:e1:f6:
44:4d:a2:43:fc:f7:67:ea:1a:5c:e3:4c:a9:b8:80:
75:94:c7:73:c7:85:4c:62:0d:6e:7a:dc:02:62:7c:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:71:6A:DD:F6:4C:DE:5A:B6:E8:CF:39:6C:3F:04:1B:77:70:25:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/0c31095a-f221-3a40-954f-4edf440bb06a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
X509v3 Authority Key Identifier:
keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
sbgp-ipAddrBlock: critical
IPv4:
64.84.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:3b:ae:4f:57:16:20:87:fb:13:05:75:fd:30:8e:8e:a5:8b:
99:e7:33:8d:c4:f3:f2:f6:56:d7:1b:6d:7f:2a:4d:19:8c:13:
3b:86:f5:ac:68:4f:07:e7:59:3a:ad:bb:68:2f:69:a8:c9:9c:
56:ac:53:b8:c4:9e:d5:42:c2:3e:e6:25:69:f6:17:ea:bf:f1:
49:2a:de:c2:3d:2d:fe:4f:92:d6:2d:b4:dd:ff:f2:ee:cf:b2:
d7:3c:85:f9:98:1e:8e:cd:87:6b:ee:37:3a:07:05:71:c0:d7:
ed:31:28:ef:53:ce:ff:66:00:7a:4a:64:f2:b8:49:d5:aa:9c:
76:b4:e1:08:87:55:ac:23:27:2f:0f:48:86:65:9a:c2:25:ce:
7e:5c:51:de:1f:24:99:7e:b6:af:75:6b:71:82:cd:fb:4f:cb:
fb:0e:e4:ec:79:a8:43:f4:0e:b2:0c:bc:d5:c1:d5:da:7b:72:
08:3f:84:c3:79:d2:36:a3:5c:e5:45:3c:9c:5c:cf:95:b3:04:
c6:2e:30:64:27:ff:77:19:fb:8a:c7:ae:5a:ed:8d:20:67:09:
a7:f7:d5:5a:f3:55:6f:6f:c1:f8:c5:89:36:58:6e:2d:19:94:
c0:df:fd:e8:ea:a2:f3:49:38:72:00:df:63:93:99:d2:4c:7e:
9f:9b:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:45:37 2026 by rpki-client