
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cca87df2-6af9-3cdc-8b05-93ee2eab30aa.roa
File: cca87df2-6af9-3cdc-8b05-93ee2eab30aa.roa (raw, json)
Hash identifier: BsGLZaXyHTu64qfCuDw1j9+lhhM6/syBluYxIo5CbDI=
Subject key identifier: 00:FC:C0:3F:2C:C5:1A:67:C4:E1:30:0F:FA:08:5B:28:B7:95:7D:32
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584E80F08290CE1C1FD76D4A6400
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cca87df2-6af9-3cdc-8b05-93ee2eab30aa.roa
Signing time: Wed 15 Jul 2026 05:16:35 +0000
ROA not before: Wed 15 Jul 2026 05:16:35 +0000
ROA not after: Tue 13 Oct 2026 05:16:35 +0000
asID: 5650
IP address blocks: 68.167.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:80:f0:82:90:ce:1c:1f:d7:6d:4a:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jul 15 05:16:35 2026 GMT
Not After : Oct 13 05:16:35 2026 GMT
Subject: CN=0d19baac-a64f-41c6-9724-d8a0be7c8ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:a3:e8:a2:fc:4c:ec:8a:fa:e3:b0:fc:9e:
41:5d:5d:4e:fb:99:6e:e0:4c:8a:58:8b:4b:75:64:
96:09:ce:ca:be:68:97:53:4a:9b:04:2a:72:05:d5:
c8:bd:51:ec:97:e7:88:74:05:77:57:4b:6f:12:d8:
35:23:e9:3a:5e:03:ec:a6:f7:df:36:34:e9:cf:a7:
09:87:2a:54:4e:23:4f:62:c9:f6:e0:d6:63:e4:c9:
39:c1:d7:6a:87:00:87:57:ac:45:39:7d:92:38:2f:
ee:0d:22:25:18:77:ae:8e:ca:9d:35:f4:fd:f2:6a:
ab:81:94:48:fc:35:d2:6d:82:5b:f9:9c:94:09:f5:
a4:bb:77:77:7a:3d:29:16:3c:65:88:02:03:5e:66:
9d:2d:74:78:8e:b3:10:9b:85:74:a3:86:db:0e:36:
35:80:48:92:7c:e9:15:17:14:e3:02:71:d4:77:d2:
07:ec:b1:ef:67:4a:40:40:be:8d:c7:be:3d:da:24:
be:b7:bd:77:d1:a3:90:69:1e:39:8f:24:22:9f:d1:
1c:82:23:1b:fc:c8:1a:02:5c:89:98:73:53:1c:6b:
24:49:44:c0:6b:4d:98:cf:fe:62:57:32:a9:a9:c3:
31:26:60:58:99:a7:86:98:2b:b1:5e:69:7b:51:9e:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FC:C0:3F:2C:C5:1A:67:C4:E1:30:0F:FA:08:5B:28:B7:95:7D:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cca87df2-6af9-3cdc-8b05-93ee2eab30aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
68.167.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:e5:d2:01:38:c5:3c:5e:f7:49:45:f3:33:a2:cd:d3:df:f3:
c9:40:b4:2c:8a:61:90:65:2b:09:b0:c3:9d:e8:b3:02:60:02:
77:74:6b:c7:35:b6:e1:cf:07:94:43:e4:e5:60:b0:9f:47:94:
7e:b3:dc:41:2a:03:27:e8:48:aa:7f:40:b4:48:1d:ac:d8:76:
9c:bb:50:c3:da:bd:b4:82:42:95:7b:df:20:36:99:88:c0:45:
96:3b:5b:e2:2a:d3:de:7f:c5:23:13:09:87:39:94:07:08:38:
fd:2c:68:74:b8:92:16:2b:25:13:85:0e:aa:21:99:e2:3f:8c:
63:8f:c8:0f:5f:b7:26:9b:15:64:6b:5e:79:c1:a9:52:a3:fa:
38:b1:a0:39:95:3b:ec:53:15:f4:79:63:64:12:88:04:ef:f5:
c5:bf:fc:de:46:71:fd:63:75:dc:95:b6:64:04:5a:35:af:be:
f5:23:7c:b6:6b:4b:23:ee:cc:07:91:58:f7:9c:7a:26:17:58:
33:b4:ad:8f:a1:31:4e:80:e4:92:03:24:33:10:83:68:ac:b7:
96:82:41:cb:13:3d:aa:87:0c:8f:01:b6:2e:cf:14:fa:be:d4:
72:31:53:93:13:e7:b2:8f:f1:fc:2a:51:c0:56:bb:08:0f:b5:
c6:8b:5d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:54 2026 by rpki-client