
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa
File: d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa (raw, json)
Hash identifier: pIHw3EzKYg6yNkQchnyZt0ed6AC6/ACRSNyFJmNKLPk=
Subject key identifier: 86:3F:87:6D:81:6F:FA:49:2A:66:4B:B4:D2:96:80:D1:C9:35:EF:3F
Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial: 010D0C9F4328584DE2B5E733DDC4133DB4BBAE70
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa
Signing time: Tue 19 May 2026 13:00:32 +0000
ROA not before: Tue 19 May 2026 13:00:32 +0000
ROA not after: Mon 17 Aug 2026 13:00:32 +0000
asID: 396998
IP address blocks: 64.68.192.0/24 maxlen: 24
2620:49:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 25 May 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e2:b5:e7:33:dd:c4:13:3d:b4:bb:ae:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Validity
Not Before: May 19 13:00:32 2026 GMT
Not After : Aug 17 13:00:32 2026 GMT
Subject: CN=372d38e5-df18-4e94-a140-6f7597355d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:93:78:6a:5d:de:f8:ce:a0:61:07:e7:70:
ef:38:0c:3a:31:9f:18:03:ec:6e:49:0c:3d:32:86:
c9:32:97:07:cc:75:38:cb:7c:76:f0:31:be:fe:cb:
7e:2d:12:ac:b8:05:a1:b2:24:6e:cb:5e:07:06:c9:
64:da:b2:55:92:e4:d1:8c:09:b7:83:6a:1d:0c:84:
53:e4:81:13:0e:5f:eb:7c:87:2f:b4:63:6e:3e:8d:
19:d1:1c:47:25:f0:b3:e0:3c:a1:c5:39:5f:53:84:
89:ea:54:54:e5:f1:28:c6:f8:b3:b7:53:9a:a0:eb:
e0:f7:3e:ae:74:24:0a:5d:22:58:17:58:69:4a:ea:
47:8b:f5:bf:a7:1a:88:eb:99:e8:27:20:bf:88:f0:
5b:be:7b:4f:30:8a:a2:b4:4a:6b:14:f0:45:b0:a7:
69:cd:33:18:76:fa:39:3c:43:3c:5e:39:69:b9:d1:
f3:96:08:0b:cf:58:64:ce:f6:e0:42:86:78:3d:47:
03:1b:e3:fa:33:c1:b1:a4:c0:76:46:49:84:1d:df:
5d:cd:ba:c0:e6:52:5e:5a:ca:f3:dc:c6:ab:61:af:
12:6a:41:28:97:8c:b5:4e:e8:f1:5a:b3:98:6d:43:
f6:f5:7d:15:74:84:ad:d7:eb:40:3d:14:40:a1:ca:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:87:6D:81:6F:FA:49:2A:66:4B:B4:D2:96:80:D1:C9:35:EF:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
X509v3 Authority Key Identifier:
keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
sbgp-ipAddrBlock: critical
IPv4:
64.68.192.0/24
IPv6:
2620:49:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:0e:ae:f4:28:2d:af:1c:53:89:57:21:2f:4e:dc:4e:ed:e2:
54:de:a0:cb:86:2d:99:ce:0d:41:a6:e9:7b:93:fe:39:c9:ce:
71:b5:98:3d:74:86:a5:31:47:26:de:fc:2f:6a:54:2e:b5:c0:
22:2c:6e:15:db:91:c5:27:54:80:a8:9a:c9:f6:61:f5:08:5c:
76:71:c4:89:59:65:94:b8:d2:60:3f:16:f7:59:c3:26:25:9b:
30:ef:c6:05:3b:2e:75:ff:e0:86:98:40:3c:c6:b9:43:c8:00:
1b:bf:46:fa:a1:b5:37:ab:12:f6:d8:d1:2d:57:a3:08:36:0a:
ff:85:b4:c1:2b:cf:ea:f8:7d:d5:ca:97:10:01:d5:a7:94:dc:
8f:e8:85:10:58:d4:b7:00:f3:ee:61:19:92:1d:c0:aa:c1:6b:
0f:7a:fa:2d:b2:21:9e:16:03:6f:36:6d:c8:93:2d:85:da:23:
75:f6:3a:d7:58:65:80:fa:23:8f:43:9d:53:93:02:98:c4:df:
c5:1b:2b:a8:7d:95:94:fb:f3:cd:14:35:2e:9b:d5:fc:59:4b:
05:6a:42:5a:7b:b3:f7:bd:30:cd:38:9e:07:c6:35:fa:43:8b:
0b:d1:a0:f3:42:31:46:1a:95:a3:71:2f:ac:d8:21:a4:03:5f:
5a:91:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:57:12 2026 by rpki-client