
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9ab691f-8e4a-34cf-936e-fc0a97174685.roa
File: c9ab691f-8e4a-34cf-936e-fc0a97174685.roa (raw, json)
Hash identifier: 9QBXuj5SMXgGodYuBtmgvp/IwB1v+3qNuSqsvCI88N4=
Subject key identifier: 7A:98:14:34:ED:8A:AA:F8:87:74:42:5A:D9:47:79:CF:AD:2E:62:3E
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584ECE9C7A4725F1E478F1120D60
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9ab691f-8e4a-34cf-936e-fc0a97174685.roa
Signing time: Wed 12 Aug 2026 01:00:11 +0000
ROA not before: Wed 12 Aug 2026 01:00:11 +0000
ROA not after: Tue 10 Nov 2026 02:00:11 +0000
asID: 834
IP address blocks: 64.204.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 14 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ce:9c:7a:47:25:f1:e4:78:f1:12:0d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 12 01:00:11 2026 GMT
Not After : Nov 10 02:00:11 2026 GMT
Subject: CN=b3da3c36-1a7a-4b84-9475-52a4ba9ecfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:de:7f:0e:4d:30:ae:a4:27:cd:20:14:72:
57:25:f6:a8:ed:d0:c4:a2:08:ea:d8:ff:a0:5d:c6:
ba:fb:1c:de:19:3d:c0:d2:a6:1b:b7:ea:2d:12:1e:
b9:5a:50:81:f5:fc:7b:10:60:78:d3:63:15:0c:3b:
84:5d:5a:c0:50:04:d5:56:b5:50:c9:fd:b0:39:ac:
bd:cc:10:d6:45:9b:42:01:fc:0d:e5:62:1f:db:7d:
fd:2a:c8:64:cd:94:44:df:81:69:b9:7f:87:cf:50:
5a:9b:b4:db:af:9a:a8:06:15:6d:2b:5b:c2:76:b8:
c2:eb:67:31:b3:2e:3d:26:11:83:a5:45:e7:af:7a:
5e:b1:bb:a9:2d:2c:8a:77:ca:ef:ad:ef:1a:06:66:
4f:8a:2e:df:ec:89:06:0e:20:85:24:e0:26:0a:ee:
3e:7c:9d:15:f2:80:9c:20:2d:c6:18:df:eb:8f:00:
d4:35:d1:40:57:c3:c9:5f:b3:11:08:f8:15:e0:b1:
1e:80:39:fe:cb:1e:e0:19:f6:22:4a:40:19:32:38:
4b:16:9a:d5:5a:23:d4:51:e0:61:b4:e6:28:04:cb:
3d:f6:89:a4:e6:cc:98:78:f3:d9:2f:e5:14:ce:b1:
fc:93:12:1e:e2:04:f5:a6:3f:c3:15:67:f4:71:63:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:14:34:ED:8A:AA:F8:87:74:42:5A:D9:47:79:CF:AD:2E:62:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9ab691f-8e4a-34cf-936e-fc0a97174685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.204.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:79:7d:29:5e:2e:fd:38:76:62:13:20:99:ad:19:c0:5e:2c:
e0:b7:e8:9c:eb:4a:e8:7e:b7:05:a0:03:97:c4:30:13:09:47:
ea:c1:ec:f8:5b:f6:0f:df:88:53:01:5b:37:56:a1:3e:8a:25:
5f:0c:79:a6:cf:e4:e4:6a:13:ab:33:8c:6f:ee:99:15:29:94:
8e:78:ac:d9:2c:ea:2e:2a:e0:d6:d0:2a:a5:97:36:c4:4f:25:
5d:b8:44:92:c3:40:1b:49:27:99:01:ff:29:69:ab:ff:f9:33:
e5:ca:f0:d1:d0:a6:93:18:aa:f4:52:12:16:5a:e9:4a:1e:1d:
4c:91:08:4b:75:42:8f:d1:35:ae:19:33:5b:db:db:69:76:34:
9f:3b:c7:8d:ac:f3:34:82:6b:2a:dc:03:27:d6:16:ce:f5:05:
0b:50:74:00:ce:78:fe:f4:f1:f6:a9:d8:12:5a:e6:ec:45:63:
c6:cf:ef:70:16:f0:b7:b9:be:51:a3:b3:da:85:5a:8d:56:b1:
22:92:b5:13:7c:2a:bc:eb:b1:17:83:72:e0:1f:42:9a:53:88:
cb:f6:4d:79:c6:75:c9:b4:9b:8a:aa:3f:80:1d:79:63:83:f1:
17:6c:7f:3b:22:26:88:da:37:fb:a4:09:30:46:77:de:97:fc:
f9:01:af:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7OnHpHJfHkePESDWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgxMjAxMDAxMVoXDTI2MTExMDAyMDAxMVowLzEtMCsGA1UEAxMk
YjNkYTNjMzYtMWE3YS00Yjg0LTk0NzUtNTJhNGJhOWVjZmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEPefw5NMK6kJ80gFHJXJfao7dDEogjq2P+g
Xca6+xzeGT3A0qYbt+otEh65WlCB9fx7EGB402MVDDuEXVrAUATVVrVQyf2wOay9
zBDWRZtCAfwN5WIf2339KshkzZRE34FpuX+Hz1Bam7Tbr5qoBhVtK1vCdrjC62cx
sy49JhGDpUXnr3pesbupLSyKd8rvre8aBmZPii7f7IkGDiCFJOAmCu4+fJ0V8oCc
IC3GGN/rjwDUNdFAV8PJX7MRCPgV4LEegDn+yx7gGfYiSkAZMjhLFprVWiPUUeBh
tOYoBMs99omk5syYePPZL+UUzrH8kxIe4gT1pj/DFWf0cWOyfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqYFDTtiqr4h3RCWtlHec+tLmI+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzlhYjY5MWYtOGU0YS0z
NGNmLTkzNmUtZmMwYTk3MTc0Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZ5fSleLv04dmITIJmtGcBeLOC36JzrSuh+twWgA5fEMBMJR+rB7Phb
9g/fiFMBWzdWoT6KJV8MeabP5ORqE6szjG/umRUplI54rNks6i4q4NbQKqWXNsRP
JV24RJLDQBtJJ5kB/ylpq//5M+XK8NHQppMYqvRSEhZa6UoeHUyRCEt1Qo/RNa4Z
M1vb22l2NJ87x42s8zSCayrcAyfWFs71BQtQdADOeP708fap2BJa5uxFY8bP73AW
8Le5vlGjs9qFWo1WsSKStRN8KrzrsReDcuAfQppTiMv2TXnGdcm0m4qqP4AdeWOD
8RdsfzsiJojaN/ukCTBGd96X/PkBr/U=
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:22:20 2026 by rpki-client