
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/8572da3f-6760-3c41-ac0c-4d66de248df8.roa
File: 8572da3f-6760-3c41-ac0c-4d66de248df8.roa (raw, json)
Hash identifier: ppU9TpI5B0UBwdBXCKM1wYzozziiemlVMY17ffI+O1A=
Subject key identifier: 8B:A4:41:EF:96:F9:E6:57:19:18:C7:67:E2:9D:72:92:5A:E6:59:7D
Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708
Certificate serial: 010D0C9F4328584ED300FC8022BD56B8AE43E540
Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/8572da3f-6760-3c41-ac0c-4d66de248df8.roa
Signing time: Thu 13 Aug 2026 14:46:03 +0000
ROA not before: Thu 13 Aug 2026 14:46:03 +0000
ROA not after: Sat 07 Nov 2026 22:07:38 +0000
asID: 401866
IP address blocks: 64.93.68.0/24 maxlen: 24
64.93.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d3:00:fc:80:22:bd:56:b8:ae:43:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708
Validity
Not Before: Aug 13 14:46:03 2026 GMT
Not After : Nov 7 22:07:38 2026 GMT
Subject: CN=000e02c9-b1bf-4915-b131-fa1d64964050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:97:45:3b:30:4e:cb:55:bc:53:21:14:3a:
e4:43:98:46:88:53:5b:1f:f4:92:f5:02:de:e9:76:
fa:af:4e:df:72:f3:9f:20:cd:7d:b5:fd:8a:60:78:
6b:49:6c:b0:66:d3:bb:bb:1d:93:a9:de:4e:40:07:
5e:b0:31:b6:e9:01:3f:07:76:a7:8f:75:2b:7d:78:
52:ed:98:04:a2:59:b3:30:d7:7f:f5:d4:67:0b:14:
2d:4e:ec:ce:d7:2c:18:56:c0:f4:ad:f2:af:02:d0:
59:73:a0:7b:d7:14:f6:c2:bc:27:8d:17:ef:67:dc:
9f:74:91:81:4e:23:b5:1a:a5:23:0d:50:28:0f:5a:
ef:b5:d6:56:ea:eb:de:89:b9:69:83:15:c4:c7:ad:
64:28:04:aa:80:89:20:8f:c2:30:cf:24:c5:9f:c0:
1a:c3:13:4d:0e:6b:34:68:16:ab:84:99:93:81:ef:
59:a5:69:23:69:f1:3b:cd:c6:24:2b:77:6c:52:d7:
d0:4d:48:60:3b:11:f9:c3:c5:67:79:75:a3:ed:48:
15:98:8c:c8:17:d9:28:29:fd:18:cd:d6:46:b0:80:
e8:a2:e7:29:07:a6:2c:d0:db:80:aa:2b:1e:17:22:
4f:c4:dc:32:5a:48:d7:bc:88:c2:10:41:cf:ca:ce:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A4:41:EF:96:F9:E6:57:19:18:C7:67:E2:9D:72:92:5A:E6:59:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/8572da3f-6760-3c41-ac0c-4d66de248df8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl
X509v3 Authority Key Identifier:
keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
sbgp-ipAddrBlock: critical
IPv4:
64.93.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:10:9a:30:c7:5e:fe:0f:ed:56:e4:b2:b0:59:24:63:d8:f0:
a5:c7:4a:36:2d:da:91:03:4f:ef:67:a6:09:4c:12:a4:e0:9c:
3f:3f:48:f3:e0:ec:fa:56:20:4a:ad:19:ac:23:c1:01:43:0d:
c9:fc:5a:f0:46:05:8f:80:f1:0b:b9:42:49:11:69:4c:01:d4:
69:30:0e:f7:59:a6:a0:ec:d4:b4:9c:5c:3e:24:1e:ec:19:53:
ff:ad:b1:22:9d:9a:f7:c9:b5:cc:bf:f5:d3:75:4f:8f:b5:44:
b0:b6:04:4a:23:a2:f7:c8:c6:c9:56:8e:d1:5e:30:ff:75:eb:
44:bb:56:a1:b2:e5:6e:25:b2:73:ac:5a:eb:09:60:4a:46:37:
0c:4d:a1:70:ff:e2:b3:82:e9:c1:57:53:68:09:db:ad:c0:e0:
af:b0:7c:8f:9b:39:24:ea:cf:2a:d6:8f:05:fd:5f:2c:0c:c9:
2f:42:2e:df:e1:cf:11:0e:71:a8:46:7e:0f:35:93:6f:61:89:
90:ec:46:9f:0f:bb:cb:9c:f4:bf:fb:78:c3:0e:c6:f0:04:a2:
7d:64:5f:24:e6:3a:bb:ff:11:9e:4c:ba:db:6b:66:a8:ed:49:
69:ec:a0:15:a8:a1:7a:00:a6:54:d3:10:86:f7:20:dd:7d:c3:
6a:6f:05:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:12:29 2026 by rpki-client