
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9bef37cf-16f9-3941-8526-eafaa676e914.roa
File: 9bef37cf-16f9-3941-8526-eafaa676e914.roa (raw, json)
Hash identifier: LNMZdjiEzbym/X4sZE6hTYyCIsw+iTEvvqGWNv8Mcvs=
Subject key identifier: 04:87:40:95:17:08:B3:EC:32:DD:54:EE:68:D1:ED:71:94:8F:52:CE
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584D733124957A685664E6995400
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9bef37cf-16f9-3941-8526-eafaa676e914.roa
Signing time: Thu 09 Apr 2026 14:18:33 +0000
ROA not before: Thu 09 Apr 2026 14:18:33 +0000
ROA not after: Wed 08 Jul 2026 14:18:33 +0000
asID: 209043
IP address blocks: 64.204.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 12 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:73:31:24:95:7a:68:56:64:e6:99:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Apr 9 14:18:33 2026 GMT
Not After : Jul 8 14:18:33 2026 GMT
Subject: CN=0853f056-1149-44ed-a617-c1bcae0ec0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:a2:00:c7:ea:31:91:ff:42:8f:bb:3c:96:
71:7e:8c:58:6c:27:9d:4b:12:bb:9c:5a:17:b9:6e:
5c:a7:12:d5:e0:f3:e6:75:bd:bf:e5:06:29:eb:dc:
ad:54:51:6d:81:87:82:32:9b:85:d9:d4:60:f1:ce:
47:a9:df:ac:f9:38:27:ae:3f:57:ec:c6:99:53:85:
98:01:6e:77:da:56:f5:e3:70:b4:92:30:40:3d:bd:
ce:64:5a:e5:4a:db:2b:55:e3:0e:0e:c7:05:0a:15:
c7:55:11:d8:98:fb:45:6d:15:98:60:d3:7b:01:49:
54:8d:a5:1b:30:42:7d:d7:22:f3:b0:6a:00:c4:87:
9c:f1:55:42:16:e6:4c:ab:09:af:a5:ff:a2:09:2a:
0c:32:06:2c:89:a0:ea:45:93:ef:29:4d:48:fc:51:
a3:c4:5d:cf:64:a1:28:c8:dc:39:04:42:cd:0f:ad:
a9:79:16:18:de:0c:06:69:6d:64:0e:d4:3c:93:af:
89:ce:52:4c:d1:4b:a4:88:a5:85:52:b8:df:3f:c6:
47:6f:91:1e:c5:01:a8:fd:dc:79:76:6e:09:73:a3:
41:90:60:29:4e:ba:20:a2:48:83:37:9d:e8:98:b8:
53:96:b3:ec:d2:bb:1d:9d:b3:55:34:e7:ea:f6:a4:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:40:95:17:08:B3:EC:32:DD:54:EE:68:D1:ED:71:94:8F:52:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9bef37cf-16f9-3941-8526-eafaa676e914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.204.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:a1:81:8f:94:72:ab:9f:44:d5:ca:f9:5e:9c:86:b3:da:f4:
82:73:30:99:38:0a:16:d8:f7:d8:95:53:da:55:51:ae:5b:b8:
c2:55:fe:c1:ed:08:01:f5:9f:93:24:02:16:65:27:73:05:53:
47:ed:5a:62:f6:0d:a8:43:4f:c0:b8:75:b7:76:1e:6b:1c:29:
ac:18:78:53:f8:f0:6c:7d:76:cd:c7:c1:24:4b:1c:54:87:30:
e3:76:97:22:96:3f:b8:c7:a1:67:23:9d:bf:96:92:6c:bd:e3:
f7:3c:2c:b0:fd:48:46:c4:67:91:cf:8e:8d:1f:99:0b:1d:98:
13:e6:17:74:1b:02:0d:75:16:d8:20:c9:8e:87:7f:46:97:1f:
d3:03:3d:08:b4:94:f4:94:e2:1f:1e:a9:a0:a6:d7:29:d8:07:
ef:ef:75:26:02:47:19:3d:ab:8e:12:6d:ed:ce:87:5c:6d:31:
66:83:70:7a:1b:1e:60:e4:7a:ab:3f:c7:a5:b8:46:b1:f7:ed:
96:f8:37:14:ef:62:85:72:d6:d5:7f:04:90:a0:61:c2:71:88:
65:01:0c:8b:27:15:5c:c4:c4:35:82:44:1e:d6:28:b0:b1:ad:
48:51:b4:78:05:98:26:ea:e9:82:5d:e6:55:d9:dd:e8:ea:2f:
6b:5a:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:13:02 2026 by rpki-client