
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/532cb3c9-302a-3ffb-ba06-5ed5a87e4bd6.roa
File: 532cb3c9-302a-3ffb-ba06-5ed5a87e4bd6.roa (raw, json)
Hash identifier: AauleEpIqKUfSyBNECrZzUKw8UyIKVOPeK85NjuWCb4=
Subject key identifier: 12:B5:10:DB:4F:70:E3:ED:EA:B9:11:5A:6B:DC:C0:CF:00:00:04:34
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F66FFE18BE2AEFEB79726C200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/532cb3c9-302a-3ffb-ba06-5ed5a87e4bd6.roa
Signing time: Mon 05 Oct 2026 15:03:28 +0000
ROA not before: Mon 05 Oct 2026 15:03:28 +0000
ROA not after: Sun 03 Jan 2027 16:03:28 +0000
asID: 154132
IP address blocks: 68.164.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:66:ff:e1:8b:e2:ae:fe:b7:97:26:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Oct 5 15:03:28 2026 GMT
Not After : Jan 3 16:03:28 2027 GMT
Subject: CN=15c7a2d2-4cc7-4c34-831a-74e5f1d90830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:c1:78:e4:b4:61:dc:42:1c:f1:42:80:be:
99:d1:66:44:c9:35:db:16:c1:f8:c7:90:93:75:1f:
17:d9:41:6a:26:66:19:c5:83:3d:8f:b1:41:35:38:
9f:f6:64:68:76:7a:71:6d:69:ea:b9:95:7a:d9:33:
ac:e4:fb:ac:0d:3e:52:1d:76:14:ef:33:01:2b:88:
a5:a8:6c:e7:08:6b:a1:34:92:96:6c:d9:7e:9e:58:
fc:ca:85:f9:0e:34:84:46:05:9c:4f:b9:fe:7b:0b:
6d:e5:aa:59:98:aa:bd:79:fc:ae:9c:83:97:fa:a8:
3a:1a:02:44:b4:19:0a:55:d3:e1:8c:73:32:3b:24:
38:49:08:08:d8:e8:78:7b:71:67:02:6c:a4:3c:65:
4f:ee:e9:87:59:f0:05:b0:24:3c:89:a8:16:34:11:
fa:4e:13:03:11:cf:51:b1:42:aa:82:8b:ab:6c:ad:
cd:26:02:f3:b7:62:ad:1b:8e:bc:69:6d:ee:db:68:
80:09:a6:2e:fd:3b:01:9f:f4:75:8b:cf:c7:c0:33:
d2:5e:4c:c0:e3:7d:bc:13:15:44:35:d7:a1:53:b4:
7a:d1:d4:bf:7c:2e:d3:be:44:9b:d4:6e:5c:8a:fa:
0f:f2:80:58:b8:66:f2:fe:81:57:10:f0:52:62:34:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B5:10:DB:4F:70:E3:ED:EA:B9:11:5A:6B:DC:C0:CF:00:00:04:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/532cb3c9-302a-3ffb-ba06-5ed5a87e4bd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
68.164.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:c9:a1:33:0b:6c:63:b1:29:21:19:4a:6a:0b:e6:36:88:e3:
e6:95:b9:4c:4d:b2:64:e3:ac:0d:29:34:10:ed:b7:ae:c5:2f:
91:46:08:6d:9c:aa:b6:6d:e4:97:17:eb:5a:d9:16:c8:7f:1e:
78:65:3e:72:a3:3b:b5:a3:03:16:00:86:8a:f5:e8:c7:85:91:
5e:13:c3:af:95:2a:67:f9:af:28:41:65:60:de:85:73:ea:04:
21:48:5d:1e:a5:3a:a4:62:59:55:f8:cb:55:5b:d2:a0:22:1b:
b1:e8:7a:4d:8d:58:89:88:33:3f:63:4b:30:42:e0:c0:7f:c1:
40:10:8c:1d:3f:e3:11:09:70:09:01:04:c2:e9:fb:9f:ea:c5:
af:48:04:60:b7:0a:bd:63:3c:15:6c:8f:7a:6b:01:54:46:aa:
64:17:49:09:49:a4:91:dd:34:9b:9f:a5:03:9a:ec:9f:b6:c1:
1d:71:2a:2a:2c:c5:ba:9f:8c:d0:e6:d8:e7:71:e2:7e:50:80:
0c:01:2e:95:02:c0:9d:d2:e9:c6:02:3f:6a:97:49:f6:c5:71:
92:f6:b4:ac:0a:93:3e:eb:4f:a3:f2:3b:87:18:d6:f6:6b:69:
8b:d3:54:49:9d:58:55:ee:70:ca:f4:fb:f1:4e:8f:f9:b6:0d:
16:59:e3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:27:22 2026 by rpki-client