
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/ebf94e0b-f3da-3bb5-a5e0-28ead16c459a.roa
File: ebf94e0b-f3da-3bb5-a5e0-28ead16c459a.roa (raw, json)
Hash identifier: mtBjjdD6xpzYFZ7WmfaLez4vONy0xqXae5QuhWrFpNQ=
Subject key identifier: E8:76:0A:31:FF:22:95:29:E1:64:C7:9D:74:04:43:37:93:23:DC:AE
Certificate issuer: /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
Certificate serial: 010D0C9F4328584F655D68C0612A4CD128E54F80
Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/ebf94e0b-f3da-3bb5-a5e0-28ead16c459a.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 40933
IP address blocks: 64.187.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:68:c0:61:2a:4c:d1:28:e5:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=ff67009e-418e-4364-9e5f-a7a1015b2a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:03:2e:0c:13:71:7d:d3:85:5a:d0:06:4a:
e1:90:05:ee:bf:05:d0:a0:21:1d:c1:1b:7e:59:b5:
1a:1e:4e:8d:94:91:2e:1f:bd:cb:03:28:22:11:dd:
75:65:5a:dd:65:f6:fc:18:e3:e3:9d:d5:e9:46:56:
ef:c3:87:80:16:41:5c:1f:f6:6b:77:ec:85:78:56:
ca:ed:25:64:6a:64:29:0a:99:3d:18:84:34:99:28:
14:71:ba:17:27:cb:fc:12:07:32:f7:e2:29:b1:00:
f1:ac:9b:d4:2f:10:c6:46:11:31:71:7e:3d:a9:00:
cf:e4:7d:93:55:82:e8:80:3e:b2:36:d0:2f:7d:33:
a5:5e:df:73:c3:68:ba:71:97:4f:74:14:0d:10:82:
d5:cd:90:20:c7:1c:15:06:08:53:9d:1e:4e:53:d5:
b6:e6:59:c6:82:02:d7:ed:e0:22:51:0f:56:0c:c6:
d4:a7:4d:f4:27:b7:4a:97:6d:7c:71:1e:ae:f6:30:
e6:a1:1a:ca:1f:36:4e:ac:53:5b:a4:6f:28:db:29:
69:4a:b1:61:5a:c0:98:d8:38:41:3c:5f:bf:f8:16:
e1:19:4b:c0:bc:53:4f:13:80:89:90:46:65:f9:ea:
bf:7d:ac:24:59:5f:bf:dc:6b:9f:06:36:06:ff:58:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:76:0A:31:FF:22:95:29:E1:64:C7:9D:74:04:43:37:93:23:DC:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/ebf94e0b-f3da-3bb5-a5e0-28ead16c459a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl
X509v3 Authority Key Identifier:
keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
sbgp-ipAddrBlock: critical
IPv4:
64.187.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:b2:5f:03:ce:a8:f0:0e:c9:73:b0:cf:42:f7:5f:7a:56:87:
5c:47:78:0d:db:d3:b7:7d:75:1a:28:5f:81:08:d8:ac:2b:46:
87:23:24:e0:f9:97:64:e0:a2:7a:3e:37:a6:1f:32:fd:21:34:
96:7d:a3:c7:42:fe:1d:18:c0:27:98:6c:3f:2b:b1:c5:bc:7a:
cc:fa:f6:4d:78:6e:7b:46:e2:f3:20:51:fc:ee:38:25:60:1b:
d8:73:a0:7c:f1:0d:ac:03:cc:85:f6:39:44:5e:f7:52:a2:97:
bd:16:47:df:cd:9e:a0:c1:fa:a8:3d:3f:21:97:ab:61:39:3d:
fa:9e:43:29:58:36:41:fc:0b:a9:e1:a7:28:c6:70:81:67:ba:
da:93:59:bf:ef:dd:04:03:f6:29:bb:8e:59:d5:ba:80:e5:8e:
30:be:e8:19:46:3b:65:49:a6:13:1f:71:10:4e:9d:0b:12:b9:
0e:03:fb:58:69:8b:e4:96:4e:11:3f:4f:44:9f:83:d6:60:54:
ce:04:b3:6f:98:ae:70:fb:da:8c:b6:68:7c:cb:ab:f3:5a:ad:
9a:76:b6:e6:03:35:c2:2d:ec:44:e1:8f:12:51:5e:44:37:6f:
63:c2:54:b8:c8:73:49:8a:06:7b:e9:2b:19:71:c2:f4:09:02:
b2:1e:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:29:44 2026 by rpki-client