
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa
File: b533aff3-439d-33b5-bcd9-30c7b5833b92.roa (raw, json)
Hash identifier: y9gSDRvV/bNd4xzXFbF2wzwEAKZ7hltbHI3CT8/qFa4=
Subject key identifier: 25:C5:78:25:70:89:4E:21:05:CC:85:6D:EC:EA:F4:71:2A:E8:90:58
Certificate issuer: /CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c
Certificate serial: 010D0C9F4328584CC6120A020E54AA56E14D4100
Authority key identifier: 73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa
Signing time: Fri 06 Feb 2026 14:00:40 +0000
ROA not before: Fri 06 Feb 2026 14:00:40 +0000
ROA not after: Thu 07 May 2026 13:00:40 +0000
asID: 3402
IP address blocks: 64.239.32.0/22 maxlen: 24
64.239.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c6:12:0a:02:0e:54:aa:56:e1:4d:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c
Validity
Not Before: Feb 6 14:00:40 2026 GMT
Not After : May 7 13:00:40 2026 GMT
Subject: CN=808a168e-5368-41b6-ae70-de83af509d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:aa:bd:75:39:12:d2:d9:1b:f7:5a:8a:7e:
51:52:68:aa:70:47:c5:8a:b1:35:b1:6a:3a:96:d8:
e1:69:e7:94:c7:17:18:93:8e:ce:22:6d:2c:65:5b:
8b:69:ef:35:5c:2a:a3:40:55:0c:10:88:01:c1:62:
32:bd:47:3d:35:5f:ce:44:aa:45:f2:52:19:d5:1d:
06:ef:f5:a7:24:5a:74:bf:29:9b:f5:f3:c5:0c:68:
ff:36:14:13:d4:f8:41:79:90:fc:44:6f:87:62:07:
fb:31:1e:9b:bd:ae:cd:c2:7e:89:c4:b9:56:ee:27:
8d:b4:3f:b8:3c:16:9c:ee:d6:d4:5f:24:87:42:88:
24:9c:31:06:6a:0f:5e:4c:ab:26:5b:29:17:7e:69:
72:da:3c:88:10:38:3e:99:09:d1:9a:c5:11:21:3d:
4a:d4:ea:d3:8c:73:ef:4c:5c:bf:41:88:fc:ec:67:
70:74:d0:e9:d3:e0:2a:5c:17:ba:bd:9c:8f:82:6a:
5a:a0:a2:54:ea:f7:26:44:59:85:fc:a4:74:e0:d0:
77:85:22:30:f5:34:4a:e9:74:ec:40:bb:df:5f:8b:
9b:42:0b:c2:b7:78:e9:52:14:9e:67:e4:24:1e:0b:
18:c1:3c:a8:39:d6:3f:f7:cf:f2:e7:c8:e9:38:6c:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:78:25:70:89:4E:21:05:CC:85:6D:EC:EA:F4:71:2A:E8:90:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl
X509v3 Authority Key Identifier:
keyid:73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.239.32.0/22
64.239.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:66:30:7c:bd:71:17:79:b2:b6:ff:07:4a:9f:86:40:b9:68:
b9:0b:1a:cc:29:f9:53:71:40:3b:31:cd:37:df:4b:c5:2a:9a:
15:49:3f:0d:aa:50:09:13:bc:be:56:3f:f4:89:78:7e:51:fd:
5d:55:4b:2a:d1:b4:db:c7:a8:6f:18:a3:db:84:d7:f5:ab:95:
fc:d7:e2:47:4d:8d:f3:6a:eb:27:6e:40:b3:fe:db:48:26:6c:
c7:f0:22:01:da:09:e9:2e:2d:64:c9:69:ae:03:77:5b:aa:6e:
9e:8a:a6:09:6f:34:c2:db:f5:5b:c4:c5:6f:43:89:cb:16:d9:
e7:df:69:9c:63:de:31:70:b4:6a:0e:e6:55:61:61:be:68:30:
08:a3:57:ce:8e:40:b7:41:16:c2:65:fd:00:45:5f:90:0f:cc:
33:69:62:34:09:39:c7:96:0e:ed:24:1c:83:65:6f:b5:6f:a0:
fe:64:31:d9:ee:7e:65:53:3f:db:8b:a6:f9:d8:5a:78:ac:25:
13:22:c3:fe:97:41:ac:ad:31:1c:56:43:c2:77:8e:9c:2c:57:
b1:d8:8c:69:8b:0f:38:ef:e8:f6:54:b2:49:eb:63:52:d8:56:
0f:ba:f5:13:01:3a:31:67:f8:c8:dc:bf:13:5e:8e:2c:bd:76:
5e:e7:12:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:46 2026 by rpki-client