
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa
File: c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa (raw, json)
Hash identifier: K8YQGZb+EMFB0FHq5AhNwU+GCjLuOeTy9ROdQ+cwxtc=
Subject key identifier: 18:F2:8E:53:F9:E6:0F:E7:20:B9:4A:21:26:AE:13:E9:36:12:D4:B9
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328584DAAE02867FEE6E7AA2029C8F2
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa
Signing time: Wed 29 Apr 2026 13:00:31 +0000
ROA not before: Wed 29 Apr 2026 13:00:31 +0000
ROA not after: Tue 28 Jul 2026 13:00:31 +0000
asID: 16509
IP address blocks: 64.69.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:aa:e0:28:67:fe:e6:e7:aa:20:29:c8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Apr 29 13:00:31 2026 GMT
Not After : Jul 28 13:00:31 2026 GMT
Subject: CN=6df34278-3563-4937-9994-ec353240152f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:4e:5d:59:d1:4a:f0:c3:82:a6:84:02:3c:
c4:b4:24:35:95:56:85:95:d2:48:17:36:eb:5d:32:
d7:de:b6:02:38:5b:58:b4:da:ac:0c:15:ea:92:58:
48:7c:17:7c:a9:42:83:71:a6:9f:79:35:e9:34:8e:
0b:97:46:e1:42:fc:78:3b:1d:37:00:2c:96:30:71:
a7:df:af:ef:75:d1:d6:93:c4:63:3b:3c:1d:6d:2b:
9b:b5:59:4c:6d:b0:8f:11:ba:f9:9c:f3:9f:11:4c:
a1:e9:71:03:88:8b:71:12:fd:ae:2f:2f:ac:f4:8c:
02:44:5a:e4:20:6e:95:45:51:fa:06:98:55:48:55:
ae:ea:20:ab:e7:f0:f0:bf:3d:5f:27:14:34:21:07:
12:15:29:11:c9:98:61:2d:f1:24:7e:57:41:15:90:
23:98:cd:a9:5d:a0:e9:92:d2:48:4c:42:d1:6d:24:
01:93:0e:b1:06:d9:de:73:b4:57:a0:a4:e4:b8:10:
b8:b2:b0:ea:14:f1:fe:27:9a:e8:4c:ea:fc:79:fb:
cc:c9:8b:97:c9:cc:ca:db:47:07:b6:90:5a:3b:0f:
ec:c6:ad:05:c5:90:eb:c3:36:e1:80:ff:2b:cb:7c:
85:1f:d5:cf:0c:4a:4f:03:f2:4c:42:37:85:42:0a:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F2:8E:53:F9:E6:0F:E7:20:B9:4A:21:26:AE:13:E9:36:12:D4:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
64.69.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:c5:da:82:ce:9b:95:c9:43:48:a1:d6:ad:b5:af:89:67:03:
8f:3d:ce:95:19:71:9a:8b:48:d2:37:9a:41:a4:fa:7f:42:c8:
f6:bc:5b:38:36:5d:11:c4:f4:85:78:9e:d7:99:29:61:a5:ad:
6f:98:8b:5c:64:58:c0:be:b2:fa:a1:cc:f6:60:5d:82:fd:bf:
57:ad:c5:6a:43:ce:ea:c6:1c:2f:7e:89:57:69:7c:9e:19:9f:
00:f6:64:4d:43:79:ff:32:e8:1b:74:78:b8:e9:62:bc:fc:b9:
69:98:59:cb:5a:2e:77:ec:af:22:b8:89:e0:08:32:3d:6f:0c:
4c:d7:91:0c:b7:a6:dc:ce:9e:f6:f6:67:4e:e5:36:7f:45:ab:
0d:f8:d4:3b:d1:7a:3b:a9:bc:b3:12:8c:15:1b:e2:10:08:bf:
3d:2e:fb:aa:ae:10:0c:ef:8e:88:8a:51:a2:75:ba:07:ce:70:
8a:6f:b6:1e:5d:01:4a:47:4b:ac:ab:99:06:c4:b2:8b:0b:01:
6a:63:e5:63:aa:02:38:fc:50:7a:ec:20:4e:d9:5e:04:8c:21:
d3:09:9e:d5:7c:c1:28:98:8f:09:8a:6f:b9:54:77:a7:46:9d:
9c:1b:96:e4:46:73:c2:a8:ab:6d:0e:83:aa:8d:f6:6b:bd:bc:
92:f8:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:32:38 2026 by rpki-client