
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33dbbea8-571c-3660-83a2-453501880bbb.roa
File: 33dbbea8-571c-3660-83a2-453501880bbb.roa (raw, json)
Hash identifier: XA4lgZT7I5AJ36zZ8gjGN6FGVG1VCqm9cEyB7F7811c=
Subject key identifier: 17:1C:D5:68:19:F0:71:93:72:A4:FC:12:9B:A8:6D:EE:2B:AE:56:D7
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F612D6F1422C705E3EF124880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33dbbea8-571c-3660-83a2-453501880bbb.roa
Signing time: Sat 03 Oct 2026 13:00:13 +0000
ROA not before: Sat 03 Oct 2026 13:00:13 +0000
ROA not after: Fri 01 Jan 2027 14:00:13 +0000
asID: 63099
IP address blocks: 209.101.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:61:2d:6f:14:22:c7:05:e3:ef:12:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Oct 3 13:00:13 2026 GMT
Not After : Jan 1 14:00:13 2027 GMT
Subject: CN=79373130-4f13-4f22-a1a1-ab7c1ee98743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:1a:5e:63:9a:9d:04:3b:73:74:be:67:b4:
51:06:c8:8d:34:0f:1c:0e:e8:7f:10:98:67:da:7f:
9f:9b:18:08:fb:88:e8:0e:a5:9e:17:84:66:01:ec:
ec:f3:ac:f4:ba:94:71:2a:07:f0:1b:4b:c3:3b:6a:
fc:e7:84:0c:3b:8a:79:49:42:fa:53:4e:b2:a6:50:
89:58:eb:8b:a1:44:76:18:cd:29:a8:30:2c:ad:36:
da:2c:79:ed:4a:8e:a0:ea:9d:7c:6a:09:6b:71:19:
a3:d3:9a:2c:3b:6b:c2:97:6c:b8:1f:52:f5:e0:fe:
37:f5:e9:74:50:eb:a8:d3:32:d3:17:c7:b0:74:7b:
41:1d:68:0c:af:63:02:56:63:84:ba:94:62:d3:0b:
42:df:64:f4:e7:7c:8f:66:7f:bf:89:b4:59:21:3d:
65:92:94:ab:0c:a5:f5:2c:a1:17:3b:ef:d8:a6:6f:
0a:f7:52:12:d4:9a:16:de:f8:c8:ca:06:bc:8e:ed:
29:b3:3f:26:24:e3:a9:ac:1a:49:a8:9a:34:ae:10:
67:01:2d:e9:fb:b9:af:e7:5c:3a:97:97:2c:c2:4c:
43:ee:8c:f8:8f:c8:11:01:5c:6d:6d:e8:39:4f:a2:
c3:24:b3:ad:b1:6b:83:6e:d4:09:05:4c:6c:7b:fe:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1C:D5:68:19:F0:71:93:72:A4:FC:12:9B:A8:6D:EE:2B:AE:56:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33dbbea8-571c-3660-83a2-453501880bbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.101.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:8c:b7:79:64:7b:87:e5:bc:97:83:ed:0c:b2:be:0f:c1:6d:
44:8e:73:47:8b:91:b8:77:29:2c:4b:aa:2c:77:c9:03:47:ee:
c9:6d:76:5b:4e:60:56:a4:5f:fe:de:77:a6:e7:81:d5:61:7e:
19:62:aa:5f:6a:62:3a:d1:57:6f:7a:1f:c8:6b:0b:a1:f0:cc:
6a:c9:84:ca:6a:4b:d7:9f:17:d7:33:64:82:77:f6:23:a7:f6:
aa:96:2d:5e:aa:96:c8:40:75:13:af:2f:99:33:ac:2d:39:07:
53:06:b7:b6:5d:60:5b:35:45:d0:48:d6:b7:96:d3:c7:ed:3a:
c8:a4:cb:cf:56:10:91:52:b3:c8:95:03:dc:36:84:7b:5f:28:
7c:fa:cd:1f:2c:8c:97:2f:72:a8:99:38:8c:96:e2:a1:ef:a8:
40:0b:a0:31:73:af:c6:78:6a:e5:de:f0:e5:bf:7b:cb:80:ef:
d8:69:71:a5:af:79:c5:59:d8:44:6d:05:ac:c9:44:e7:1a:81:
a8:85:da:1d:0a:3a:82:91:7c:10:99:fb:52:55:9d:e0:58:72:
45:3e:cb:a1:09:f7:32:0f:f0:e6:b2:17:11:e2:27:6e:4b:f5:
1a:f2:b9:7a:fe:54:42:f9:f9:7d:8f:04:26:ec:23:6d:62:9e:
52:76:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:05:51 2026 by rpki-client