
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa
File: c93aa5cc-9725-3304-9f64-6159a1070c5c.roa (raw, json)
Hash identifier: Pn2dO9N7ar5ZDxB8ofNejmSo+B3YM62usOmBtQ8pjCk=
Subject key identifier: FC:22:63:47:DC:0A:49:8A:57:C6:A3:FB:C8:99:28:BC:BB:9F:F3:1E
Certificate issuer: /CN=64c213c7-4c1a-4187-a879-90c9062e05d4
Certificate serial: 010D0C9F4328584EC0A725979F79325830775060
Authority key identifier: B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 8075
IP address blocks: 198.252.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:25:97:9f:79:32:58:30:77:50:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c213c7-4c1a-4187-a879-90c9062e05d4
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=f532aaed-216a-46ae-8bcf-051554e56674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:69:f8:92:6e:38:b2:d7:df:18:00:30:b1:
d1:bd:00:03:a0:37:47:50:3a:28:0c:cd:fc:59:30:
df:fb:e7:d8:02:fe:be:43:ee:8b:28:10:8a:f3:46:
9c:eb:f0:46:07:76:f0:be:4b:5f:73:1e:21:8f:63:
c3:eb:06:25:d1:5f:c7:a4:8c:df:1a:6f:93:54:71:
49:0f:25:00:32:ae:86:48:c7:e1:66:39:fa:6f:88:
5a:26:fa:45:5c:e7:c6:dd:0b:0e:35:7c:f8:31:42:
60:80:a4:4b:5e:df:d7:c7:bd:6f:95:a5:5b:13:07:
a0:7f:9b:89:ee:d6:58:eb:84:ed:35:6c:b7:4e:f7:
25:fd:97:9e:81:d0:0e:ca:35:6c:c3:c9:f7:4c:d0:
16:8f:96:b4:15:f4:7c:1c:63:74:29:1e:76:0a:20:
bb:be:72:a0:57:1e:6a:d9:4e:10:f2:19:2a:68:c1:
b9:2f:05:9c:e9:37:34:f0:15:4d:94:49:f9:5b:1f:
67:96:c3:36:eb:94:e4:d2:e4:ab:67:42:37:e9:6a:
27:17:b1:95:61:63:fb:3b:84:45:42:f4:21:14:08:
17:eb:8b:94:1a:46:1d:12:57:91:24:b9:08:dc:e4:
2e:16:bf:71:5b:89:db:b6:1f:d0:95:cf:7f:c5:60:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:63:47:DC:0A:49:8A:57:C6:A3:FB:C8:99:28:BC:BB:9F:F3:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl
X509v3 Authority Key Identifier:
keyid:B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.252.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:54:67:90:3b:ef:32:61:7d:eb:55:f1:c7:b2:79:5a:2a:c5:
02:e2:2a:51:6f:e0:b7:c5:96:88:03:b7:1f:b9:0b:19:1d:ee:
47:bd:69:43:10:07:14:61:03:27:4c:5d:db:8f:1c:89:a8:de:
83:47:2f:33:cb:03:07:94:fb:0e:5f:a9:ce:66:e6:47:db:66:
49:aa:3b:ec:db:43:bc:13:7e:eb:0b:c7:62:ee:ff:58:4c:d9:
68:24:69:3c:83:f6:48:46:a4:35:e6:a2:cb:be:cb:bb:cd:58:
50:8a:8a:c8:a7:f9:5c:1f:cc:a7:09:f4:8d:74:56:d2:b3:95:
2f:28:49:c1:d0:a2:f0:8c:e4:5a:8f:55:fe:2b:6c:9c:53:f8:
e4:e2:85:3c:0c:a1:20:65:40:b5:c0:c5:ee:3b:0b:dd:52:a5:
7f:e1:eb:0a:b8:e4:d5:7d:88:a7:88:ca:31:e7:60:c5:30:0a:
01:af:d8:4b:05:79:5e:b1:62:c9:1d:18:d4:ad:4d:ff:28:65:
b4:06:b4:0c:c9:ec:43:49:91:26:d9:b6:9a:e4:27:83:e6:7d:
c5:56:e1:63:b3:68:b5:6f:37:f4:eb:3e:f9:aa:f0:f7:9a:a8:
20:45:8c:81:64:da:04:bd:75:bd:85:77:86:c0:cb:d1:63:31:
19:29:34:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:45 2026 by rpki-client