
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/cfbd3432-30af-35a7-94c7-2bacdd2fc029.roa
File: cfbd3432-30af-35a7-94c7-2bacdd2fc029.roa (raw, json)
Hash identifier: htZw02gwUMBDysiC7Z33vLBHnrKFiXlw3hAEfXiEy8g=
Subject key identifier: 15:76:46:57:65:25:6A:B7:B0:CB:62:8C:B3:A9:86:C2:15:50:D1:47
Certificate issuer: /CN=75f09b45-a279-4225-8dba-d5661fbb05fc
Certificate serial: 010D0C9F4328584E7204C1E82E1190CEF69A6280
Authority key identifier: 37:FF:1E:51:27:EA:A2:96:1E:37:9A:7C:F1:F7:60:5F:21:84:A1:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/cfbd3432-30af-35a7-94c7-2bacdd2fc029.roa
Signing time: Thu 09 Jul 2026 21:00:11 +0000
ROA not before: Thu 09 Jul 2026 21:00:11 +0000
ROA not after: Wed 07 Oct 2026 21:00:11 +0000
asID: 29802
IP address blocks: 198.89.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/75f09b45-a279-4225-8dba-d5661fbb05fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/75f09b45-a279-4225-8dba-d5661fbb05fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:04:c1:e8:2e:11:90:ce:f6:9a:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f09b45-a279-4225-8dba-d5661fbb05fc
Validity
Not Before: Jul 9 21:00:11 2026 GMT
Not After : Oct 7 21:00:11 2026 GMT
Subject: CN=b60bea66-de55-4cbe-9aff-315d0e71216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:58:31:3b:e6:f3:db:61:c9:2a:ab:d3:20:
19:04:fc:9b:25:5b:55:7d:11:c0:80:31:61:3a:81:
68:a6:d1:90:c0:4d:db:27:c7:80:85:35:d8:03:eb:
e2:f4:bb:e2:d2:2d:91:1c:be:05:f9:be:65:07:84:
72:33:1a:b6:e4:4b:67:a8:32:e9:9f:1b:53:53:2b:
77:75:db:c9:21:f3:2d:71:f6:3e:fe:e9:92:d3:cd:
19:e2:3b:9a:d3:33:85:48:b0:9c:25:83:ac:2a:1e:
ea:fa:f2:70:60:35:0d:c9:94:48:13:04:3c:71:bf:
3b:02:5c:57:72:b1:b9:86:8b:45:18:76:f2:e3:3a:
8e:78:0a:6a:ec:0d:64:e5:55:0d:1f:7c:4c:c6:2d:
12:a5:fc:c7:ee:3e:79:24:4b:76:62:a5:24:a1:92:
ef:83:81:0e:c2:25:bc:05:d7:71:79:08:d1:29:7e:
22:af:46:63:c8:69:f0:97:90:f5:87:bc:a9:93:dc:
9a:8b:ef:58:ce:a7:c8:39:3c:11:1d:4c:1e:47:61:
77:7f:f5:71:95:51:11:7c:c9:2b:c0:13:cc:07:80:
81:c7:f8:0e:bd:b4:5a:13:aa:f5:6b:2c:25:6a:4f:
9b:bc:02:a5:5c:6b:c9:0f:3f:ab:c0:ed:48:55:5b:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:76:46:57:65:25:6A:B7:B0:CB:62:8C:B3:A9:86:C2:15:50:D1:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/cfbd3432-30af-35a7-94c7-2bacdd2fc029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/75f09b45-a279-4225-8dba-d5661fbb05fc.crl
X509v3 Authority Key Identifier:
keyid:37:FF:1E:51:27:EA:A2:96:1E:37:9A:7C:F1:F7:60:5F:21:84:A1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.89.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:c3:88:36:19:df:25:0d:d0:51:a8:c0:2a:9b:f0:a7:b2:52:
80:2e:1e:5d:b3:66:dc:b6:01:e4:2a:61:bd:eb:4e:ab:6e:c9:
4f:af:3b:43:55:ba:d1:82:17:fc:21:25:21:27:e2:7b:df:1a:
37:d0:d7:29:b9:1f:0c:a1:81:63:26:47:fd:c0:aa:0d:99:fa:
d2:8b:73:28:e8:03:7d:e2:c5:e7:d0:11:62:82:37:f5:94:29:
0a:ac:b9:f2:3a:4d:75:43:7e:65:8f:06:91:43:11:f2:37:93:
2d:aa:dc:df:09:02:da:92:08:08:9f:fc:c1:b3:54:7a:81:2b:
37:a3:6e:67:0e:69:46:55:e7:bb:a4:ab:e4:11:6e:d3:af:63:
f6:64:ef:ee:12:d6:bd:71:60:1b:de:83:f9:6f:52:6f:fa:2b:
e9:6e:b1:0a:3e:07:fc:81:14:eb:1d:5e:d3:58:7a:02:96:7a:
15:32:84:64:89:c5:a9:70:54:f1:1f:12:a2:1f:53:e5:60:b4:
27:35:eb:2f:a6:97:d8:88:3a:59:90:51:d4:03:b9:72:bb:82:
9a:a2:d4:9e:c8:1b:83:bd:48:8f:e0:05:4b:d4:2b:eb:07:2a:
74:9b:4c:b9:19:09:04:4e:f1:10:ef:9a:90:ad:18:a4:00:a8:
be:dd:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:10:39 2026 by rpki-client