
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fba664a-ec7a-303e-a08b-11158eee342a.roa
File: 7fba664a-ec7a-303e-a08b-11158eee342a.roa (raw, json)
Hash identifier: cbiFof/DOXSUPk70qrIrIZRnZc/PxUgjKsaaq1d0Djk=
Subject key identifier: CB:C0:06:CF:35:25:71:40:74:6E:30:E9:27:3B:70:44:AB:7F:3C:68
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F549D4A932239135C573868C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fba664a-ec7a-303e-a08b-11158eee342a.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 7922
IP address blocks: 66.253.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:4a:93:22:39:13:5c:57:38:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=14864f25-51fb-4cae-9bc6-2ec7cc795b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:7d:89:39:e4:50:72:36:cb:48:67:38:bf:
74:6e:4c:aa:d7:8a:8c:88:e2:af:b4:39:67:23:78:
b8:e4:fb:95:bb:37:15:db:98:2b:f3:5f:17:5e:dc:
35:31:29:d6:81:f4:c7:08:f9:a5:ef:ba:31:67:14:
26:25:7b:7c:73:d9:b1:bc:87:b0:3e:ca:c4:ef:fe:
2d:f2:82:f7:03:0a:25:52:f3:5d:fe:17:68:e0:05:
c9:65:b6:26:d4:f8:fe:8a:71:3e:ed:b3:2b:7f:79:
f2:b4:6c:a1:73:90:be:5d:5a:53:78:43:74:9e:b8:
c8:bf:d4:f5:9a:06:14:32:a8:2d:bf:55:e5:96:12:
7a:04:65:7e:b1:b5:93:d2:2b:d5:39:f1:c9:ab:8d:
0d:16:dd:81:c9:63:be:8c:0a:be:f6:38:4a:b8:b0:
49:ea:6a:f0:54:43:f5:ff:1d:eb:5b:ed:46:75:7b:
90:c5:6f:55:42:c1:29:ae:87:d5:e8:75:89:d7:31:
20:fa:72:74:ee:bb:63:18:e5:33:ae:e4:86:ed:14:
79:2b:01:12:a8:7b:f6:69:fc:85:b6:c1:d7:23:be:
80:97:9c:73:29:80:1e:bf:ca:44:9e:6c:af:30:24:
d6:a1:02:13:e7:c5:19:63:ea:40:61:60:56:98:22:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C0:06:CF:35:25:71:40:74:6E:30:E9:27:3B:70:44:AB:7F:3C:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fba664a-ec7a-303e-a08b-11158eee342a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:29:6f:02:87:d4:18:00:e3:c9:74:64:ea:a1:af:b8:33:c8:
cb:a0:da:1a:52:31:45:f4:d1:78:88:b0:d7:82:9a:a6:c4:c2:
d7:06:63:56:ac:5c:1c:85:81:86:5f:97:67:ff:60:c5:87:37:
db:80:ac:33:58:4d:2d:19:b5:f5:58:25:d2:f4:25:76:76:5c:
8c:d3:6f:dd:65:86:ed:0d:c7:dd:a9:bb:41:fd:15:1b:db:57:
b5:f2:3d:a9:90:b8:7d:04:ed:bd:69:88:70:5d:79:9c:87:5b:
7e:8e:4b:33:d4:7e:af:f9:04:55:d3:bd:c9:dd:89:c1:d5:1a:
1d:20:bf:fa:a7:6a:c3:33:82:ce:20:90:ca:01:ab:d2:0e:17:
9e:08:e6:80:b5:ad:8f:82:c1:ab:fd:ea:55:87:da:e0:77:a4:
19:96:fd:ec:69:b3:f0:bf:23:7d:6a:84:f3:18:50:a2:88:69:
82:65:56:c7:57:4f:d9:d8:cc:76:56:b9:5e:c3:71:25:54:90:
6b:c0:4b:2c:50:b4:70:77:96:96:44:c4:fa:a6:bd:09:e5:21:
14:b8:12:f9:ac:be:0d:07:e6:1f:a4:de:51:96:61:55:be:ed:
13:89:e7:1f:32:aa:d3:4a:11:9b:cf:1e:29:f0:d1:db:06:24:
95:69:e4:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUqTIjkTXFc4aMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MTQ4NjRmMjUtNTFmYi00Y2FlLTliYzYtMmVjN2NjNzk1YjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEB9iTnkUHI2y0hnOL90bkyq14qMiOKvtDln
I3i45PuVuzcV25gr818XXtw1MSnWgfTHCPml77oxZxQmJXt8c9mxvIewPsrE7/4t
8oL3AwolUvNd/hdo4AXJZbYm1Pj+inE+7bMrf3nytGyhc5C+XVpTeEN0nrjIv9T1
mgYUMqgtv1XllhJ6BGV+sbWT0ivVOfHJq40NFt2ByWO+jAq+9jhKuLBJ6mrwVEP1
/x3rW+1GdXuQxW9VQsEprofV6HWJ1zEg+nJ07rtjGOUzruSG7RR5KwESqHv2afyF
tsHXI76Al5xzKYAev8pEnmyvMCTWoQIT58UZY+pAYWBWmCKzNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvABs81JXFAdG4w6Sc7cESrfzxoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2ZiYTY2NGEtZWM3YS0z
MDNlLWEwOGItMTExNThlZWUzNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQpbwKH1BgA48l0ZOqhr7gzyMug2hpSMUX00XiIsNeCmqbEwtcGY1as
XByFgYZfl2f/YMWHN9uArDNYTS0ZtfVYJdL0JXZ2XIzTb91lhu0Nx92pu0H9FRvb
V7XyPamQuH0E7b1piHBdeZyHW36OSzPUfq/5BFXTvcndicHVGh0gv/qnasMzgs4g
kMoBq9IOF54I5oC1rY+Cwav96lWH2uB3pBmW/exps/C/I31qhPMYUKKIaYJlVsdX
T9nYzHZWuV7DcSVUkGvASyxQtHB3lpZExPqmvQnlIRS4Evmsvg0H5h+k3lGWYVW+
7ROJ5x8yqtNKEZvPHinw0dsGJJVp5Ho=
-----END CERTIFICATE-----
Generated at Thu Oct 8 02:26:42 2026 by rpki-client