
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa
File: 125998d1-5641-3c1f-8af4-69cb241cad63.roa (raw, json)
Hash identifier: VIN+mDM4bsanVpDNhi+f31qIySFUlExJuGZCiDiOavI=
Subject key identifier: AA:2D:9B:B1:41:86:52:89:E5:F0:3E:B4:59:F6:65:77:02:E7:F9:6F
Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial: 010D0C9F4328584EA78FF4EE20A40239B228FA40
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 393336
IP address blocks: 64.40.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 14 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8f:f4:ee:20:a4:02:39:b2:28:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=e4e10563-c1b4-4f54-9e85-a044e7214ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:7f:8e:97:7a:5f:92:b5:e0:6e:8c:bd:10:
3d:ae:c5:22:91:34:e5:84:ba:37:c8:1e:83:dc:33:
8b:b5:5a:bf:d5:66:bc:48:00:05:c6:08:71:d1:be:
5e:34:64:47:0b:9a:b9:6a:e8:9c:bd:d5:66:78:02:
94:e9:c7:e1:d6:ea:1f:cc:53:c1:ac:54:79:55:e9:
b6:10:f4:bb:75:44:59:1d:1e:7e:6a:d0:41:6c:00:
4e:f2:69:a6:48:03:22:38:b6:12:4e:51:04:03:36:
63:1f:01:8b:51:22:b9:8c:58:cc:2e:37:a2:93:c0:
85:12:f0:e3:2f:20:ee:d6:0f:9d:f5:1b:6b:ce:41:
e8:e6:38:bf:86:05:3b:d7:bf:0a:12:3b:75:1d:d6:
54:3c:45:7b:69:1c:b2:ec:05:03:b2:db:3c:71:94:
da:ea:a3:eb:f2:06:c5:9e:bc:44:a8:03:27:ea:ef:
02:13:d7:25:49:2e:47:ab:a4:0f:e1:16:11:75:fa:
17:39:ba:09:7b:2f:a7:29:59:a9:4f:c5:26:91:e9:
4e:90:c6:b0:35:16:af:88:4d:80:ab:c7:94:74:4e:
fb:82:ef:9a:db:8c:c3:5e:d8:6f:99:d9:c1:d7:20:
46:2f:76:1a:3c:f9:8c:c7:62:73:f5:fe:67:86:1d:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2D:9B:B1:41:86:52:89:E5:F0:3E:B4:59:F6:65:77:02:E7:F9:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
X509v3 Authority Key Identifier:
keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.40.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:53:1a:d4:8b:99:ff:a5:8c:12:01:ae:2d:b7:20:28:13:f7:
b4:e7:70:8e:a0:92:a0:dc:05:c0:7d:d1:3a:84:c2:08:06:65:
bd:3d:16:ea:5a:05:ff:2d:7c:d6:dd:10:f1:f4:9d:35:3e:f9:
d3:5a:21:33:c1:06:93:96:cb:c4:90:d9:35:75:df:75:1f:f1:
6e:15:35:45:ec:26:3d:b2:11:9d:ff:81:ee:a9:61:ff:d9:0a:
5d:1a:eb:9b:49:c5:35:fa:25:b6:0b:61:2d:ce:98:68:aa:82:
3e:e2:d7:47:95:bc:2f:3e:ff:48:aa:39:af:9c:fd:2e:10:d3:
34:f9:57:73:be:5a:1e:85:63:13:43:9d:68:79:14:2f:b7:cb:
49:ae:21:0e:fc:b2:e3:e6:28:40:2c:9e:a4:34:a4:8d:04:02:
3a:af:44:31:01:2d:a0:4a:ff:93:9a:bd:8f:fc:04:09:74:31:
d9:27:e4:12:81:89:7f:77:bc:4d:22:3b:c1:fd:bf:aa:4f:5a:
d6:bf:ba:c7:24:c4:27:42:60:12:1c:da:b5:9e:f9:39:d6:97:
d9:60:94:ed:ff:bc:04:24:81:ad:2d:c5:1c:57:fe:83:aa:15:
43:4a:9b:d5:39:e3:18:33:4a:2c:ed:f0:a8:72:be:37:76:5f:
cf:e1:0c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:08:50 2026 by rpki-client