
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/96c7231b-8a53-36b6-9043-1a173517a194.roa
File: 96c7231b-8a53-36b6-9043-1a173517a194.roa (raw, json)
Hash identifier: bUFM0cYCP+dukohkaRj/C4KoebBC6tS5PAQl6fG1waM=
Subject key identifier: C9:EC:18:B3:CB:3E:17:F8:79:78:F7:30:27:22:83:42:88:BD:45:31
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584EBF41AE2393FAAE0410721200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/96c7231b-8a53-36b6-9043-1a173517a194.roa
Signing time: Thu 06 Aug 2026 13:00:12 +0000
ROA not before: Thu 06 Aug 2026 13:00:12 +0000
ROA not after: Wed 04 Nov 2026 14:00:12 +0000
asID: 139076
IP address blocks: 64.204.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bf:41:ae:23:93:fa:ae:04:10:72:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 6 13:00:12 2026 GMT
Not After : Nov 4 14:00:12 2026 GMT
Subject: CN=aa9f60e4-9343-45b0-8679-957e1f7031fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:66:f2:6d:24:6b:c5:d4:27:cb:48:13:0d:
76:92:cb:1c:39:ec:06:af:19:e4:f0:e1:1f:96:a2:
92:8c:66:60:e1:71:b6:b5:a5:bf:93:74:03:84:ed:
a0:70:05:30:93:e3:63:5b:9b:5c:50:32:52:d6:0e:
4b:6f:d7:a4:22:5b:8e:d7:29:be:80:c5:11:a5:06:
77:1d:27:c2:03:1c:d7:20:43:87:cf:5f:4a:6f:f9:
64:6b:39:da:72:e0:9b:44:34:58:8b:be:7a:68:54:
e2:f3:cc:3e:d4:ff:ae:28:f7:87:6d:ec:4e:ad:dd:
45:35:aa:b5:4d:57:2a:25:a0:36:66:96:3c:af:1a:
c9:f2:2e:4e:44:e2:e8:f7:cb:96:bc:fd:67:24:96:
75:4d:bf:12:22:c7:17:e8:9c:50:bf:2d:b8:cc:93:
3b:0d:d9:f3:7b:91:2a:b1:be:38:8c:3b:2e:66:12:
57:18:9e:c4:04:11:99:49:c8:a6:47:5c:ab:74:18:
bd:44:62:3b:91:9a:e3:99:78:1f:42:a3:5e:61:35:
6c:2a:19:3a:d7:00:cc:8d:2e:8f:90:38:6c:79:d2:
f6:62:5b:f7:8b:0f:aa:ea:e6:4b:66:a4:7b:a6:9b:
36:fb:a3:88:02:61:d7:57:20:4d:68:03:cb:23:1a:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EC:18:B3:CB:3E:17:F8:79:78:F7:30:27:22:83:42:88:BD:45:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/96c7231b-8a53-36b6-9043-1a173517a194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.204.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:3f:50:5a:3c:9e:a3:38:bc:d4:a9:75:fd:17:04:36:81:88:
1b:72:cd:fc:bb:93:42:1f:c7:c3:10:12:30:22:6f:e8:f0:93:
c1:13:c5:c4:0a:4e:06:fd:98:88:70:1a:99:56:f5:ad:e4:00:
2d:8d:d9:e9:bf:d9:97:41:6d:c3:81:87:7d:bd:03:b3:48:71:
60:ec:20:00:81:92:32:b8:19:cf:21:e0:94:48:90:01:32:12:
78:2d:e9:a2:cc:e3:c9:96:1d:51:41:c0:ce:83:1f:6c:39:87:
14:6b:b3:ea:d8:f7:3d:45:a9:89:24:88:c9:9d:cc:ab:16:2c:
a3:42:9a:17:86:84:37:c7:ab:c9:77:c0:80:56:61:cf:8c:74:
0f:2d:44:b0:61:76:d6:eb:7a:32:00:d9:57:91:48:af:c1:d6:
4a:6e:72:62:ad:04:71:24:8a:86:f5:44:9f:fa:b9:03:57:45:
48:3c:1a:26:96:2c:42:10:cb:fc:0f:89:a1:1b:70:db:7a:50:
02:56:cb:7c:ff:96:19:c0:01:16:d9:78:6b:23:cc:34:5e:e1:
ff:67:6a:ee:7f:ef:c7:88:2a:3b:90:f6:3f:5f:ed:0b:1a:f5:
c1:2e:f4:6b:f8:e3:f4:dc:d9:d2:b8:a6:01:3b:0f:b5:c3:8e:
f3:76:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:20:21 2026 by rpki-client