
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/ea8af9ba-44c8-3cd5-af03-e80f9cc05ea2.roa
File: ea8af9ba-44c8-3cd5-af03-e80f9cc05ea2.roa (raw, json)
Hash identifier: 3mjfYkpaMNnegGnCAw6CorOQFAvRh+Ms8n/fd98lLVU=
Subject key identifier: 2C:CD:8E:70:89:3A:D3:7F:CB:6F:6A:33:90:80:0C:C3:15:B0:A4:99
Certificate issuer: /CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
Certificate serial: 010D0C9F4328584EC9070FB1E962F1CA54EE4B80
Authority key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/ea8af9ba-44c8-3cd5-af03-e80f9cc05ea2.roa
Signing time: Mon 10 Aug 2026 01:00:12 +0000
ROA not before: Mon 10 Aug 2026 01:00:12 +0000
ROA not after: Sun 08 Nov 2026 02:00:12 +0000
asID: 31898
IP address blocks: 64.69.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c9:07:0f:b1:e9:62:f1:ca:54:ee:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
Validity
Not Before: Aug 10 01:00:12 2026 GMT
Not After : Nov 8 02:00:12 2026 GMT
Subject: CN=364a214a-1407-4d88-bb63-8df9a726e610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:87:cc:dc:82:95:be:0e:4c:58:2f:fb:55:
b2:35:a1:2e:06:56:93:ff:d9:99:5f:74:5e:33:7c:
3c:13:8b:84:95:c0:54:cb:84:75:9a:64:a5:4a:47:
12:65:eb:93:2c:a0:ec:e9:5e:8f:4a:f1:8b:93:de:
86:ca:50:8b:6e:e7:55:d1:af:2c:d3:87:5a:31:0c:
c1:4e:f6:9c:ac:21:fc:04:b2:7f:69:1f:a8:00:d0:
f0:7a:b6:b2:e2:db:8c:52:ec:5f:5e:68:b1:91:d6:
e9:2d:c9:85:9d:b7:07:74:fa:b2:33:bb:f0:86:a8:
35:db:a0:26:ea:be:e5:58:10:98:ab:5d:ee:ea:2b:
0b:92:0e:11:12:22:19:aa:82:48:06:b7:20:d1:de:
44:a6:ab:4e:52:c1:6e:10:12:c6:ac:fe:0d:2f:27:
72:ef:e2:12:27:c0:e6:d5:94:f2:bf:ee:b6:1c:0f:
92:02:e1:ed:7b:40:7c:d7:8b:41:72:82:9b:25:22:
ea:2a:ac:3a:a7:ba:e0:66:ee:5b:70:e1:88:17:1b:
14:62:40:46:17:b2:ce:90:e5:5d:6a:27:04:e5:1f:
18:b6:60:f5:96:26:c0:b7:27:10:11:41:d5:75:44:
e7:41:d3:ca:24:d7:65:52:19:72:34:58:74:31:8c:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CD:8E:70:89:3A:D3:7F:CB:6F:6A:33:90:80:0C:C3:15:B0:A4:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/ea8af9ba-44c8-3cd5-af03-e80f9cc05ea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl
X509v3 Authority Key Identifier:
keyid:04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
sbgp-ipAddrBlock: critical
IPv4:
64.69.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d2:c3:c9:61:68:0d:1f:aa:d1:14:ed:02:7c:5a:8e:f6:06:
56:9e:27:77:ee:56:dc:8c:ec:a9:ea:f5:06:c2:9d:c0:8d:c3:
5e:95:8c:97:ef:a4:42:51:10:dc:e0:e8:31:21:4b:85:6b:34:
da:2d:2e:6e:3c:43:71:2f:42:e8:2e:ea:70:6d:1a:b2:5d:3f:
d2:03:bd:28:a3:20:89:7e:04:39:19:94:25:d8:06:db:74:88:
eb:e2:e7:a0:71:af:e4:a3:a3:20:1a:75:83:74:05:ca:af:4e:
43:89:62:a5:a1:22:dc:20:8d:1e:a4:8b:d7:17:e8:19:b1:ed:
b9:d6:4a:e2:f0:22:6c:37:27:41:41:ec:01:bb:d4:3a:a1:5b:
90:da:1b:c9:6d:06:f3:a6:a6:6a:2f:58:60:dc:da:0f:1a:49:
df:ca:de:80:a4:5e:a2:06:19:5d:55:79:bf:cc:6e:9b:6c:52:
8a:23:2f:20:90:5e:b2:7c:3a:4f:6f:db:f8:a4:32:8b:6b:bd:
a9:10:24:50:42:90:d1:a8:c6:ea:6d:66:ad:20:03:1d:48:45:
7f:e2:ec:78:6c:88:86:7b:7a:cb:aa:f2:b0:48:95:fa:83:72:
e1:87:2a:54:5b:8e:21:d1:a6:5d:67:3d:89:4d:e4:16:57:cd:
81:e7:cd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:54:33 2026 by rpki-client