
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/bcb4a493-66dc-3f03-946d-1ed9d7088970.roa
File: bcb4a493-66dc-3f03-946d-1ed9d7088970.roa (raw, json)
Hash identifier: TDeAHOxhACJee8NzjxX7wsd869SYpWN5mUmAN8+teXE=
Subject key identifier: 56:7B:B0:C9:06:E9:19:60:C9:D9:AB:A8:ED:70:98:BA:BE:0F:60:9C
Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial: 010D0C9F4328584CAE570AFB2032B4A154B9D800
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/bcb4a493-66dc-3f03-946d-1ed9d7088970.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 396032
IP address blocks: 64.38.149.0/24 maxlen: 24
66.114.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:0a:fb:20:32:b4:a1:54:b9:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=ea7d7559-1c20-46cc-99b6-03ee88f06e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:9f:07:f3:ac:2b:30:f8:9c:5f:fb:6e:50:
0f:56:ad:14:32:ef:91:1c:18:9a:d1:22:31:b2:0b:
26:8b:bd:81:5f:65:37:02:55:54:18:5a:d0:3e:08:
70:93:25:20:af:72:ba:ea:6a:f6:de:50:e5:ec:59:
04:7f:7b:fc:b7:6f:35:37:51:58:e5:50:91:5e:80:
39:9f:cc:24:d3:91:6e:b6:34:72:f2:76:d9:d4:71:
52:8b:1f:4f:aa:4b:fd:f8:bf:9b:aa:e1:0a:92:ef:
41:16:1b:23:9b:12:9b:87:c2:9b:dd:0e:19:c1:7f:
1a:ed:dd:d2:e6:93:61:25:dc:7d:b9:ea:6d:12:0f:
8c:5f:c7:a0:a8:f9:06:df:36:e8:74:14:14:2a:16:
f2:3e:ae:29:ce:fc:e8:da:f3:77:6b:7b:d9:50:fa:
08:e0:33:96:a7:08:d1:7b:3f:88:ad:34:33:3c:ea:
c3:de:1f:f7:aa:6a:58:cc:e7:16:ac:d1:4f:24:b4:
ce:04:f3:96:5a:05:b6:c7:e0:f1:fc:7a:24:e6:6f:
43:46:27:0b:70:e8:e1:4a:61:d1:94:b0:b8:0d:65:
d5:f7:41:2b:f9:ea:5a:1d:fb:87:27:4f:9a:1f:f9:
80:07:28:f2:a4:bf:52:01:1b:14:5d:aa:15:87:c4:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7B:B0:C9:06:E9:19:60:C9:D9:AB:A8:ED:70:98:BA:BE:0F:60:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/bcb4a493-66dc-3f03-946d-1ed9d7088970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
X509v3 Authority Key Identifier:
keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
sbgp-ipAddrBlock: critical
IPv4:
64.38.149.0/24
66.114.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:e3:cf:07:70:f9:93:26:b8:6c:7b:8d:58:b7:8e:64:db:09:
6a:e1:02:fa:d3:9e:06:3d:1f:f8:63:62:30:0d:4f:c5:60:98:
17:cf:91:a7:d0:a0:e1:df:e5:db:0f:cb:03:23:d5:0a:0a:27:
34:e0:83:d2:0b:39:0a:4e:d0:24:2f:be:aa:b0:e7:87:5e:d7:
25:34:c8:23:63:ba:14:d2:da:49:bf:e1:6b:e2:bf:ba:a4:e3:
c2:77:fc:c4:84:d3:02:40:cd:b1:dd:8c:00:90:93:2a:84:86:
0b:c7:6f:2e:db:4d:6b:e9:70:fe:65:bb:2c:bc:ca:7c:c1:7d:
d9:57:4b:4f:55:23:1f:17:e3:0e:2a:dc:e1:04:ea:d0:a7:eb:
fc:92:a5:37:c0:a6:14:59:9b:ea:eb:9d:48:a5:ce:f4:5c:55:
cd:10:57:3b:73:64:33:8d:56:63:0f:63:69:36:e5:e5:3e:5f:
68:25:b3:dd:e6:e9:bd:5b:d2:8a:e7:53:f7:b3:d7:73:b7:31:
2e:e7:0d:bd:fd:bf:69:02:a8:10:ac:45:55:a4:5d:6c:f4:d7:
fe:d7:82:2c:88:f1:24:c2:da:d6:8a:02:61:b1:b8:b6:6e:ac:
a3:fe:78:18:f9:77:f3:47:6c:0c:41:5a:e5:bd:df:d8:c0:3d:
30:e2:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:30:46 2026 by rpki-client