
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d060efa-5d95-3cd9-b82a-8fc5aa864767.roa
File: 4d060efa-5d95-3cd9-b82a-8fc5aa864767.roa (raw, json)
Hash identifier: fBtM9Y5pn/PNaL/o2626kOZkxRp6Pp7emwQRW6hO3GM=
Subject key identifier: EA:CC:99:66:3D:31:9A:D1:76:C3:58:3B:B8:7C:B8:5E:F9:88:55:58
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584E3A0B1FA74227934C46D51DC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d060efa-5d95-3cd9-b82a-8fc5aa864767.roa
Signing time: Fri 19 Jun 2026 19:47:49 +0000
ROA not before: Fri 19 Jun 2026 19:47:49 +0000
ROA not after: Thu 17 Sep 2026 19:47:49 +0000
asID: 834
IP address blocks: 68.164.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3a:0b:1f:a7:42:27:93:4c:46:d5:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jun 19 19:47:49 2026 GMT
Not After : Sep 17 19:47:49 2026 GMT
Subject: CN=0084aa98-9c49-45a2-949b-e548a7c31c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:50:45:33:1d:e2:3b:fb:72:82:08:84:79:19:
25:92:43:9f:dc:ed:15:6d:86:de:97:7f:47:59:42:
36:0b:cb:e4:25:c1:85:33:15:6a:0e:3c:31:7f:bb:
a4:07:f0:a8:f6:89:2e:7c:12:0d:78:b8:93:17:4e:
34:ea:7d:f1:aa:42:68:56:68:85:53:43:9d:b4:66:
64:09:68:30:6e:78:63:1a:48:2e:81:a8:47:fb:25:
1a:bd:a8:f9:c7:84:6d:9d:36:ec:15:e1:8d:99:03:
76:42:c0:aa:92:34:7b:7e:1f:33:6a:99:63:df:33:
3b:32:af:50:f6:5f:bd:7e:31:6c:ce:ed:28:d3:c1:
11:59:d8:7b:6b:7e:62:84:d7:e5:36:43:de:a1:bc:
94:f8:7a:01:a8:5c:e9:22:68:50:ba:3c:d6:d1:d2:
3f:56:5b:e4:6a:4b:49:85:bd:e4:a6:de:76:83:5a:
9b:9a:03:c8:c4:d0:50:7b:3e:0b:7a:a2:e4:6c:30:
6b:dd:4f:eb:76:83:16:17:01:1f:3f:1f:53:0d:75:
47:35:df:05:cc:86:76:ba:e2:81:d5:44:fe:d7:8b:
5c:b9:28:7f:00:52:36:85:95:01:a6:b5:af:ed:ea:
f5:ab:a4:a9:f2:85:f7:41:b5:4b:c3:aa:9f:86:c8:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CC:99:66:3D:31:9A:D1:76:C3:58:3B:B8:7C:B8:5E:F9:88:55:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d060efa-5d95-3cd9-b82a-8fc5aa864767.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
68.164.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:33:ff:5a:8d:a8:77:c2:9d:c7:84:f6:63:72:3a:c9:33:0f:
12:01:58:11:b5:dd:57:ca:ef:96:8e:2c:43:7a:69:bf:86:1a:
16:a5:c3:48:6a:b5:41:a4:f3:21:1a:bf:bb:c6:e1:7b:04:67:
d4:da:89:ff:0a:d0:e8:dd:63:2e:d6:75:dc:9c:41:97:35:c2:
bb:95:85:9f:57:6f:ba:52:df:ad:95:ba:d5:1a:3b:9a:2f:e1:
c3:b7:b4:9b:c6:d5:93:70:0a:b2:50:1b:52:a9:5a:1e:dc:60:
93:66:1b:ed:27:e9:53:63:da:76:81:ee:fb:e7:60:de:3b:bd:
4e:69:ef:68:bc:d9:da:bb:c7:25:1d:f1:d1:36:d9:35:48:2f:
64:e3:eb:ff:88:a3:24:25:de:ad:c0:2c:eb:b3:0d:96:ba:74:
23:ae:83:eb:7b:da:3c:47:60:9f:cd:7f:f1:50:77:83:80:4a:
6c:8e:ec:10:a6:d1:5a:49:bc:33:f7:8b:6f:41:e4:0c:72:dc:
65:09:ce:d8:5c:75:e7:ac:0a:3d:43:74:96:22:da:8f:39:12:
10:e8:b6:0c:98:ee:49:30:ba:69:bf:3e:78:96:56:d1:ec:04:
87:86:a6:42:44:71:97:89:41:3b:db:9a:95:bf:95:97:e2:d8:
bd:4a:e0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:16 2026 by rpki-client