
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa
File: 293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa (raw, json)
Hash identifier: sNRX2YgQKErOeUWtPuGlYStWZGkC68nvRmHtegkOg94=
Subject key identifier: 3E:01:07:C0:A2:60:AB:A7:CA:07:51:3D:A4:84:A3:9F:BD:38:0B:37
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EAA51B99CDE56DBD398107300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 15169
IP address blocks: 64.233.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:b9:9c:de:56:db:d3:98:10:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=3bf8a6b7-9459-4d06-bea1-3ead183b8676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:4a:24:ba:95:1f:51:d1:54:c3:74:af:59:
26:15:79:df:45:bc:4f:9b:6b:eb:bf:1b:c9:60:24:
d2:68:19:ae:39:0d:d3:ac:dc:29:0c:94:7c:81:21:
3e:67:b4:7e:07:e1:b6:cb:81:9d:c5:1e:ae:68:d4:
92:c4:95:30:a1:ab:8c:4d:e9:f0:ed:b0:bb:b6:f9:
f5:86:02:e7:1d:0b:a6:24:08:b7:5f:a5:87:04:f1:
e5:c7:b0:e8:8f:8d:ef:90:57:30:de:45:0f:71:2b:
8d:38:eb:56:c3:2a:af:c7:4e:14:8f:c3:5d:6d:58:
d4:93:aa:c1:fa:fe:7a:dc:d4:a6:23:92:1f:bf:46:
b9:41:60:f2:fa:73:b7:87:3a:95:8c:6a:dd:71:3e:
72:15:14:46:ab:74:d1:61:8e:b5:71:bf:b3:21:25:
50:19:63:c0:8e:6e:bb:d1:0c:f7:0c:60:8f:5f:db:
0b:ae:ba:27:a8:21:53:01:7a:95:57:55:9d:a0:3d:
63:c6:28:16:13:0b:36:9d:db:96:e9:64:06:25:e1:
3e:cf:2e:cc:47:90:d0:93:d5:a8:b9:31:b2:f2:70:
3b:f4:a5:b2:94:0b:17:79:6e:b0:e2:2b:78:96:85:
46:9e:79:70:73:24:f4:34:00:bd:68:ea:e4:d9:69:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:01:07:C0:A2:60:AB:A7:CA:07:51:3D:A4:84:A3:9F:BD:38:0B:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/293b9e86-f4f6-333b-8252-0e28bbb3a9ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:77:e0:3b:54:4c:1a:bf:e0:e3:a9:8f:4f:46:d1:a8:52:7b:
d6:a8:47:9a:47:2b:5e:25:96:e2:73:c5:f3:a6:28:19:19:43:
dc:7b:05:86:04:29:e6:ce:f3:67:98:14:23:f1:c6:02:fb:eb:
26:01:b4:8b:af:f5:86:d2:ef:6e:af:ca:4b:f3:d2:de:5f:ce:
70:56:a9:a9:61:05:97:96:f8:8c:4d:e9:1e:89:b0:56:5d:7c:
1a:f5:97:c8:d2:64:4e:1b:dd:e7:ae:21:a9:62:fa:1b:39:f1:
9a:ed:2a:14:cd:e7:15:b4:b6:87:96:fe:3f:a3:1e:f5:1a:b4:
c5:06:26:9e:09:dc:66:36:da:38:3e:f8:5e:d4:3f:a1:b7:94:
da:61:c7:e2:0a:90:35:bd:6e:48:d8:b6:0d:b5:ac:6b:92:91:
17:68:f1:bc:78:4d:ff:83:f5:85:e1:e1:25:ee:31:12:99:31:
b4:e7:50:c9:cf:e2:fb:2a:6c:79:59:82:b9:08:f9:8a:4e:47:
56:d3:b6:24:ea:c3:09:3a:92:ca:50:61:57:b5:44:da:48:d6:
2d:7e:f1:b3:c2:76:0a:1d:66:3d:48:17:29:d6:8b:0c:e1:7f:
08:fa:42:b0:95:9c:a4:d8:24:98:d1:3c:7a:5d:12:de:a0:0f:
64:5a:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:47:23 2026 by rpki-client