
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
File: d98b870b-d634-3a37-82c3-af55f7ef3032.roa (raw, json)
Hash identifier: kiNwSYV58N83/FQKv2lY/gqyHGUlpS9uGUEMhIB9B+o=
Subject key identifier: 14:1D:63:11:C3:22:90:C9:4B:BE:88:85:C3:A6:7A:9B:E4:73:1D:F6
Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial: 010D0C9F4328584E9D4A70AD337141796A0E1C80
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
Signing time: Sat 25 Jul 2026 09:00:11 +0000
ROA not before: Sat 25 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Oct 2026 09:00:11 +0000
asID: 16509
IP address blocks: 64.95.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:4a:70:ad:33:71:41:79:6a:0e:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Validity
Not Before: Jul 25 09:00:11 2026 GMT
Not After : Oct 23 09:00:11 2026 GMT
Subject: CN=1ff51adf-7cfa-40c7-bf37-b5c237a3d020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:26:7e:f4:55:2a:f2:de:61:d2:1b:31:61:
21:80:a2:9a:c5:3f:12:31:d4:41:d4:0b:71:ac:fc:
4b:01:7a:eb:bc:08:37:57:72:9b:cd:4b:fe:68:09:
15:4f:94:00:de:5f:c4:b8:a8:40:ee:81:af:e8:ac:
34:04:9d:08:70:6e:9d:e0:b3:ac:ca:e9:b4:a3:7c:
dc:fc:a9:4e:36:4f:80:be:85:5b:7c:56:52:2f:04:
d4:52:74:19:9e:a2:b7:3a:02:b2:a3:a3:d0:ef:d8:
fb:d3:74:5a:47:cb:4a:2b:ac:dd:44:c6:b5:74:12:
8d:b8:54:96:e3:0f:22:ee:15:c2:de:a1:20:59:ce:
75:35:0f:63:ca:67:d3:27:bb:2f:f7:c6:0a:be:0f:
2d:19:14:f8:5c:cb:1a:03:1f:0b:64:47:07:e5:10:
70:02:9b:6f:ef:e0:3e:93:3a:2a:65:a0:76:d4:fb:
3e:82:54:85:5f:69:57:87:a8:ec:33:82:66:40:56:
0b:df:1c:93:97:7a:e5:55:1b:1e:53:3a:1a:f5:bb:
ee:f8:f7:e1:d2:79:6d:2b:1e:98:72:e9:d8:be:35:
55:25:34:cd:15:b8:43:76:ed:27:68:ee:58:d6:00:
07:26:29:72:d7:9d:4f:22:3e:e6:3e:67:c8:db:76:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1D:63:11:C3:22:90:C9:4B:BE:88:85:C3:A6:7A:9B:E4:73:1D:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
X509v3 Authority Key Identifier:
keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
sbgp-ipAddrBlock: critical
IPv4:
64.95.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:a9:9b:11:7e:32:59:86:9f:5c:67:3b:34:15:bd:7c:27:f3:
2e:72:6a:fd:81:61:71:90:4d:76:84:ac:e6:43:fd:4c:b4:f5:
d3:f0:f5:39:7d:d9:b3:d2:ed:a9:55:75:8a:73:a2:1b:2d:4d:
00:a2:d3:be:d8:8b:6c:65:51:4d:94:67:3b:33:51:23:d2:ac:
b5:7c:03:c5:37:d7:6f:a8:0d:e4:88:40:36:32:5e:ce:96:b6:
9b:2c:6a:c5:71:06:66:2d:6e:88:3b:5d:7e:be:7a:e9:e9:66:
6e:de:b9:c9:a9:dd:9e:8b:20:2c:76:d4:3b:10:2d:01:54:c8:
ba:7f:70:33:cf:1d:b5:38:25:55:35:db:af:2a:5b:d4:95:d5:
6f:43:5f:7f:52:6d:ee:16:73:ef:38:4e:1c:d1:91:ac:2e:80:
dc:70:75:8e:b1:9a:51:56:46:fb:87:a4:a7:84:85:1d:77:86:
d3:d0:5a:60:3c:22:84:41:5b:f5:5c:99:61:e1:4a:53:76:78:
04:8f:c0:65:e0:80:3c:64:db:01:33:cc:36:e2:ea:90:36:14:
5b:85:19:58:37:f2:05:dc:47:c0:f7:32:1a:2b:ac:ee:09:0b:
b2:5f:8a:ed:55:c4:5f:cd:bd:27:99:ef:4e:86:e5:48:4d:af:
fe:39:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:40 2026 by rpki-client