
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/334883b2-9678-32f4-a815-405b63a85f62.roa
File: 334883b2-9678-32f4-a815-405b63a85f62.roa (raw, json)
Hash identifier: qB4QOJ1TIAVCi7QBnWZXgJuSoo+I6NU2AzSL53RJTkc=
Subject key identifier: 0A:1D:42:39:8E:65:66:57:53:10:A6:F7:1A:76:97:85:90:A9:96:2C
Certificate issuer: /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial: 010D0C9F4328584EBA7EFF63AB1B0ED9FEEA5118
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/334883b2-9678-32f4-a815-405b63a85f62.roa
Signing time: Tue 04 Aug 2026 20:04:45 +0000
ROA not before: Tue 04 Aug 2026 20:04:45 +0000
ROA not after: Mon 02 Nov 2026 21:04:45 +0000
asID: 40933
IP address blocks: 65.19.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ba:7e:ff:63:ab:1b:0e:d9:fe:ea:51:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Validity
Not Before: Aug 4 20:04:45 2026 GMT
Not After : Nov 2 21:04:45 2026 GMT
Subject: CN=85725c94-789c-4f8b-ac86-4452b852cf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:8b:bc:60:c6:52:e9:63:35:7a:ce:45:d4:
00:e8:3b:02:49:90:37:1d:8a:41:8b:e2:1a:af:72:
18:53:b0:0e:f5:38:0d:c8:76:c1:b2:b3:0c:56:ec:
84:ae:c1:d7:98:cb:df:55:e5:27:cf:14:8d:9a:75:
17:80:b8:9c:7d:a4:08:ba:5f:1f:0c:36:67:56:c9:
6c:09:72:13:bc:25:8a:9f:09:99:98:a2:19:23:80:
2a:87:26:36:bf:0c:36:2d:ae:08:6b:76:28:98:97:
1f:8d:c5:74:a9:c7:94:4e:f4:3a:3f:e4:d7:2c:72:
9e:5c:56:02:1f:8b:e0:6a:29:f4:b0:60:e3:1b:8f:
9c:e3:1d:71:04:c9:6f:0a:e4:fb:bb:63:59:60:65:
25:7f:7e:46:39:9b:3d:f1:ce:a2:5d:f5:d2:58:ee:
56:35:57:59:f0:a4:80:83:7e:2d:26:96:3a:f0:97:
3a:4e:91:68:c7:68:71:dd:77:eb:d1:23:61:ff:45:
80:d7:23:a2:14:07:e7:80:92:98:cf:3a:61:f8:6a:
77:68:1e:e9:1f:ed:ae:db:e9:08:6b:77:af:7e:47:
6d:bb:7b:ff:92:18:9b:d5:bc:f3:b8:ce:53:bb:bc:
0a:fe:15:76:69:02:d4:7c:9e:a6:af:6f:af:8e:c4:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:42:39:8E:65:66:57:53:10:A6:F7:1A:76:97:85:90:A9:96:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/334883b2-9678-32f4-a815-405b63a85f62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
X509v3 Authority Key Identifier:
keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
sbgp-ipAddrBlock: critical
IPv4:
65.19.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:f3:44:09:85:28:9c:70:c7:38:83:59:14:7a:8c:9b:cf:d1:
c8:a1:f4:8d:75:33:60:52:49:d8:5e:03:b5:7c:65:a5:59:ea:
da:5b:5e:8d:f6:b6:4b:76:bd:63:24:d9:7e:18:e2:1c:43:f5:
f1:75:b6:d1:73:6b:8c:58:21:9f:ff:8f:a4:c7:8b:87:be:97:
8f:fd:65:bc:9e:a5:2b:c2:f1:f2:3c:cc:a4:81:da:6b:8a:9c:
86:cf:9e:eb:f8:67:8d:19:8c:f0:71:ab:7e:ae:e2:80:5d:47:
d2:2c:d8:93:ad:ff:0b:42:93:53:92:a3:c6:86:86:e2:63:8d:
cc:d7:0f:b9:9b:23:68:21:73:99:5e:92:df:fa:97:6a:51:09:
17:e5:cb:e7:eb:6b:6e:04:aa:d7:fb:41:63:f8:71:1a:a0:b0:
6d:7b:b9:33:cc:23:f2:5c:38:6d:c0:86:1d:ad:e3:74:7b:27:
b9:10:06:d9:e9:57:ca:c2:ba:94:ad:45:3f:17:63:55:73:df:
60:5e:7f:8d:99:0e:05:1e:ba:f3:cb:35:f8:66:87:0b:60:0a:
29:2d:79:4b:64:c0:2e:dd:33:0d:15:b9:ca:ad:5e:38:a6:3c:
b3:f7:95:4d:c5:59:87:be:75:ca:71:fe:78:14:5b:7e:90:c3:
3b:6f:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 05:33:59 2026 by rpki-client