
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc38950d-244d-3e8c-82f6-c106f163559c.roa
File: cc38950d-244d-3e8c-82f6-c106f163559c.roa (raw, json)
Hash identifier: 4TU1X6kIiuua5i2EomI40D2fTx0RnD0006dzb72HiWM=
Subject key identifier: 61:C7:5B:F9:CE:78:8F:1F:01:D0:B0:1A:92:2A:C4:18:34:7B:76:53
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F00DCCE09C63E2FABCF395CC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc38950d-244d-3e8c-82f6-c106f163559c.roa
Signing time: Sun 30 Aug 2026 01:00:12 +0000
ROA not before: Sun 30 Aug 2026 01:00:12 +0000
ROA not after: Sat 28 Nov 2026 02:00:12 +0000
asID: 834
IP address blocks: 68.164.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:00:dc:ce:09:c6:3e:2f:ab:cf:39:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 30 01:00:12 2026 GMT
Not After : Nov 28 02:00:12 2026 GMT
Subject: CN=0b2382d4-4bff-48a2-9aa2-8bce643e996c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:08:ce:74:78:a0:d3:52:d4:90:44:82:2e:
fc:19:e7:ed:40:1c:80:f8:6b:8e:72:d2:6d:98:8d:
50:2d:74:d9:32:91:03:76:b5:70:6c:70:13:7e:61:
2c:ce:dc:b5:12:0d:f5:58:6d:fb:02:a0:11:c8:06:
04:3e:2d:46:00:b7:8c:8c:a7:15:aa:5c:cc:47:ef:
01:19:6c:e5:98:4c:d3:c4:e2:e1:d4:6b:8f:ac:c5:
65:e6:94:1d:a4:a5:33:02:86:87:09:46:0d:22:52:
9c:4b:f8:56:2b:f8:61:90:7c:75:52:42:fc:09:6b:
ec:1f:79:43:1e:cd:97:3c:46:7a:05:eb:fb:53:e9:
a5:b6:8e:3b:7e:fb:4f:08:4c:31:27:01:2d:3d:be:
3e:5c:24:6a:ee:a0:52:53:51:c1:73:26:2a:4c:60:
c6:33:20:e8:8b:a4:ca:60:b8:f2:a1:c3:69:a4:d4:
80:27:e0:0b:39:c3:a1:6b:7a:0c:7f:c2:5d:e8:a3:
80:b0:89:a1:d4:b2:32:c8:62:a0:42:5e:31:c4:02:
fa:8e:c5:5e:27:6a:8c:50:2c:48:b2:64:06:f9:ab:
9c:26:7d:05:71:29:9c:86:23:42:01:66:24:72:f3:
53:79:34:00:c9:6c:5e:16:a9:ad:5b:7a:95:a4:b5:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:5B:F9:CE:78:8F:1F:01:D0:B0:1A:92:2A:C4:18:34:7B:76:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc38950d-244d-3e8c-82f6-c106f163559c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
68.164.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:48:0b:c9:7c:c4:79:ed:5d:4a:63:e9:e3:f0:de:6b:60:dc:
1d:ac:92:a7:a2:92:98:d1:8b:1d:ca:cc:03:47:de:79:4d:03:
57:ae:12:d3:c7:a4:12:e4:c1:f8:4c:bf:1f:85:1c:01:0b:dc:
4b:f6:09:cd:ce:b9:d2:b7:4f:0c:b4:62:88:66:89:a1:cc:db:
b1:00:a5:a9:02:5a:6f:bf:70:5f:02:18:43:8b:ea:ef:e0:c8:
cc:2b:33:a9:e6:75:b9:1c:63:91:97:50:12:2e:e4:25:85:74:
b1:ed:fe:19:b6:67:c4:d4:db:21:05:b8:0a:7c:b9:21:e6:74:
23:06:1a:c2:66:c5:3a:75:19:12:b7:1f:47:81:2f:a5:a7:97:
a0:b4:98:14:3e:71:28:4c:7d:3b:f4:97:ae:74:3f:71:04:ac:
71:f5:3d:40:66:28:10:19:6c:ec:a5:6f:ca:f9:8f:a3:c1:42:
80:21:8b:0f:89:09:99:dd:c5:b9:85:d0:2d:38:58:1c:5f:80:
36:b6:bc:01:b9:50:99:67:95:c2:e8:ef:11:ec:dd:44:32:0c:
26:5e:ef:85:ec:ac:c5:b9:c3:16:e6:c8:2e:c0:a2:4f:74:3d:
82:f5:15:44:4a:7d:90:44:a0:58:83:91:c9:e2:2b:7a:c1:13:
ef:a3:3d:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3M4Jxj4vq885XMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
MGIyMzgyZDQtNGJmZi00OGEyLTlhYTItOGJjZTY0M2U5OTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU0IznR4oNNS1JBEgi78GeftQByA+GuOctJt
mI1QLXTZMpEDdrVwbHATfmEszty1Eg31WG37AqARyAYEPi1GALeMjKcVqlzMR+8B
GWzlmEzTxOLh1GuPrMVl5pQdpKUzAoaHCUYNIlKcS/hWK/hhkHx1UkL8CWvsH3lD
Hs2XPEZ6Bev7U+mlto47fvtPCEwxJwEtPb4+XCRq7qBSU1HBcyYqTGDGMyDoi6TK
YLjyocNppNSAJ+ALOcOha3oMf8Jd6KOAsImh1LIyyGKgQl4xxAL6jsVeJ2qMUCxI
smQG+aucJn0FcSmchiNCAWYkcvNTeTQAyWxeFqmtW3qVpLUnAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHHW/nOeI8fAdCwGpIqxBg0e3ZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2MzODk1MGQtMjQ0ZC0z
ZThjLTgyZjYtYzEwNmYxNjM1NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKQ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9IC8l8xHntXUpj6ePw3mtg3B2skqeikpjRix3KzANH3nlNA1euEtPH
pBLkwfhMvx+FHAEL3Ev2Cc3OudK3Twy0YohmiaHM27EApakCWm+/cF8CGEOL6u/g
yMwrM6nmdbkcY5GXUBIu5CWFdLHt/hm2Z8TU2yEFuAp8uSHmdCMGGsJmxTp1GRK3
H0eBL6Wnl6C0mBQ+cShMfTv0l650P3EErHH1PUBmKBAZbOylb8r5j6PBQoAhiw+J
CZndxbmF0C04WBxfgDa2vAG5UJlnlcLo7xHs3UQyDCZe74XsrMW5wxbmyC7Aok90
PYL1FURKfZBEoFiDkcniK3rBE++jPfc=
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:24:56 2026 by rpki-client