
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fce3daaa-3879-3e9b-bfad-e19c3160e51b.roa
File: fce3daaa-3879-3e9b-bfad-e19c3160e51b.roa (raw, json)
Hash identifier: 12K8aR7GTADPMfAJcii4RPH2QveQMPi1BKGmYzc2ERs=
Subject key identifier: 36:DA:BF:61:B3:A3:AE:64:A9:1A:8A:8C:D9:54:47:D6:AB:19:7E:78
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F61749AF193C947F0988BBE80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fce3daaa-3879-3e9b-bfad-e19c3160e51b.roa
Signing time: Sat 03 Oct 2026 15:23:48 +0000
ROA not before: Sat 03 Oct 2026 15:23:48 +0000
ROA not after: Fri 01 Jan 2027 16:23:48 +0000
asID: 834
IP address blocks: 64.204.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:61:74:9a:f1:93:c9:47:f0:98:8b:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Oct 3 15:23:48 2026 GMT
Not After : Jan 1 16:23:48 2027 GMT
Subject: CN=98f19dde-43d5-49d3-980b-3696780944e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:a6:3f:df:89:6d:4b:b1:f9:3b:9e:66:2d:
19:a5:56:af:bb:a8:74:f3:df:c2:d9:19:8f:0f:52:
51:0a:e3:4d:23:df:aa:f8:46:18:aa:51:c4:71:69:
cf:b3:ab:fa:fc:68:ab:f0:01:b1:06:ac:b5:6b:b4:
4c:22:44:16:a9:50:5a:95:a3:f8:df:7f:22:a9:55:
54:57:8f:e0:f5:7a:62:23:a9:72:15:fc:1a:25:dc:
93:db:f3:67:36:13:24:30:9d:5a:d4:eb:05:8a:ef:
bd:b5:3b:68:0d:01:0e:89:92:21:6c:a3:58:0f:45:
02:15:53:0e:df:b4:d4:94:c4:f9:17:2c:6c:6e:90:
1b:30:6c:02:2d:7d:99:46:d4:5a:ff:cf:8d:0f:aa:
2a:94:00:cc:53:b5:b4:b9:0e:52:42:49:c6:41:36:
e1:88:61:95:ed:f9:82:52:32:8b:c7:03:67:3c:eb:
60:2c:77:e9:b5:2c:e2:44:65:f8:1a:12:54:5d:e0:
a7:62:12:5f:a3:3c:fb:ac:e3:22:54:f4:5c:3c:32:
dc:39:1b:bd:89:a1:d7:48:d0:2b:3d:38:da:60:fc:
c6:53:c5:31:bf:97:99:3c:63:df:95:88:97:39:c8:
03:a3:21:a5:c4:1b:5c:ed:c3:5a:b6:53:5a:ae:51:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:BF:61:B3:A3:AE:64:A9:1A:8A:8C:D9:54:47:D6:AB:19:7E:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fce3daaa-3879-3e9b-bfad-e19c3160e51b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.204.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:cd:95:75:4b:97:b5:7d:0f:b9:a0:d7:4b:62:3b:c1:3d:e0:
46:72:79:63:fb:e7:30:6d:67:3b:35:66:90:92:1a:7c:7a:5e:
b7:a9:7e:0f:57:69:29:40:09:8e:dd:70:73:2c:92:c2:68:43:
1c:68:c5:24:3a:74:f2:d6:c9:2f:da:c6:0e:a2:68:fb:59:df:
db:ae:4b:e2:0b:35:e7:ad:0a:3f:0a:62:bf:e2:9e:fa:0a:22:
78:f4:49:e6:5f:3f:31:32:b3:7d:7d:eb:70:98:a3:a0:01:9e:
ea:44:f1:95:5a:f7:d8:57:18:27:b1:30:25:a4:0f:6b:4b:a7:
c4:7d:1a:98:18:4a:af:9f:74:0d:0c:c8:d4:0b:92:a9:9f:f2:
24:fc:97:0c:7a:41:18:2b:43:b1:23:5f:6b:0e:52:d9:b3:a5:
81:83:df:f7:45:37:cb:d3:18:ae:ed:95:71:1c:ef:3a:6e:60:
83:bb:23:48:b8:f6:d2:4e:02:21:14:43:16:ce:f4:23:22:30:
2b:2c:f1:51:8a:06:64:5c:64:1c:b5:1b:61:47:19:da:76:31:
66:ae:e1:c1:57:77:61:7b:48:98:ec:cb:49:0b:d2:b9:21:0b:
22:39:31:62:32:d2:e9:61:b5:58:92:b4:d5:8b:74:97:d3:01:
25:86:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:55:08 2026 by rpki-client