
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa
File: f842fac7-cd73-3534-92f5-b9959d9393b4.roa (raw, json)
Hash identifier: VIVzSGZ0lJC+wIUali8SwaWdRv1h71QcFHnVnP8pBTU=
Subject key identifier: C1:C4:90:0D:5F:D2:50:8F:24:F0:00:2A:54:67:69:32:07:6A:E2:0A
Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d
Certificate serial: 010D0C9F4328584F3FAD3DD581078B5AD5AD1700
Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa
Signing time: Mon 21 Sep 2026 13:00:12 +0000
ROA not before: Mon 21 Sep 2026 13:00:12 +0000
ROA not after: Sun 20 Dec 2026 14:00:12 +0000
asID: 46414
IP address blocks: 64.135.132.0/23 maxlen: 24
64.135.134.0/23 maxlen: 24
66.252.62.0/23 maxlen: 24
68.68.225.0/24 maxlen: 24
68.68.227.0/24 maxlen: 24
68.68.228.0/24 maxlen: 24
68.68.230.0/23 maxlen: 24
68.68.235.0/24 maxlen: 24
97.107.152.0/24 maxlen: 24
97.107.155.0/24 maxlen: 24
97.107.156.0/22 maxlen: 24
2607:4a00:4000::/35 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ad:3d:d5:81:07:8b:5a:d5:ad:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Dec 20 14:00:12 2026 GMT
Subject: CN=5051b387-c713-41c1-98e5-634104311403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:21:75:78:ff:d0:b7:75:84:89:0f:e4:d6:
3f:33:af:b0:c4:85:aa:24:41:9c:a1:a5:3d:7b:5d:
36:a4:51:78:8a:1f:b4:b3:05:6e:c0:8b:cc:61:38:
90:61:73:2a:9c:a3:15:60:2c:77:95:5d:de:bf:88:
5c:01:d6:10:e4:34:42:fb:8a:68:50:42:74:89:ea:
bf:94:7b:09:a3:55:1d:e3:95:f0:05:c4:ed:e4:98:
a9:83:74:a9:2d:17:dc:0e:8c:7e:ef:22:eb:84:7c:
e5:69:13:af:68:41:24:9e:8e:ad:02:ca:e4:05:88:
e5:4f:cf:e5:12:1d:e5:b9:f5:56:11:82:4e:a4:bd:
3b:5a:37:1d:a0:15:9a:3a:33:a6:7a:ce:2a:f2:a5:
a5:cc:95:af:39:02:9c:ac:56:e6:b0:a6:16:9f:0c:
5e:de:81:0a:d1:60:5d:1d:da:24:2f:4b:80:ba:de:
bb:f0:a9:41:7f:db:bc:4b:fe:41:a2:27:9a:8e:42:
07:ca:85:db:fc:9b:78:eb:80:4a:b2:d5:e7:d3:a1:
e2:e4:f4:56:5d:9c:67:86:de:d3:4e:85:21:27:36:
28:52:90:a7:bc:d2:7d:f7:32:15:ca:ca:45:f4:81:
96:6e:09:d7:6e:c6:66:a8:c6:f5:6e:02:6b:ba:5e:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C4:90:0D:5F:D2:50:8F:24:F0:00:2A:54:67:69:32:07:6A:E2:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl
X509v3 Authority Key Identifier:
keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.135.132.0/22
66.252.62.0/23
68.68.225.0/24
68.68.227.0-68.68.228.255
68.68.230.0/23
68.68.235.0/24
97.107.152.0/24
97.107.155.0-97.107.159.255
IPv6:
2607:4a00:4000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:d2:27:20:cb:99:67:83:39:15:54:e8:fe:4e:72:b0:1d:00:
42:d1:ee:27:0f:fc:5b:16:1c:5d:31:57:78:33:12:79:f1:0a:
94:fb:cb:39:57:51:15:bc:cb:9d:9c:d4:f1:3d:6c:b6:84:fe:
58:74:c0:af:25:4e:41:40:3c:bf:5e:62:99:b6:02:a8:46:2a:
a8:bc:9c:ad:b8:54:78:ee:3f:09:92:5b:a3:9f:e6:36:7b:fe:
8e:70:aa:47:6f:b2:ff:79:40:39:c3:10:2a:74:8a:e2:92:12:
5b:0b:1a:53:aa:0b:9f:98:b6:28:64:bf:e8:b3:71:b7:f9:7a:
cb:e0:ef:27:04:ed:85:62:e4:df:40:ba:82:65:a7:32:1e:f8:
d1:42:ed:cf:d5:cb:e6:3c:73:38:c0:b3:4b:d1:80:b8:5a:84:
e6:0a:9e:71:95:12:dc:4f:72:12:ca:ca:d6:eb:e8:4e:a9:be:
5c:b1:2a:d5:0b:20:5a:bc:48:49:be:f2:3d:22:94:3d:de:3d:
c6:fb:14:86:a7:c8:8d:0b:a4:2e:47:b4:59:ed:c6:9d:54:53:
59:2b:6a:cc:1f:33:5e:16:e7:1d:5a:b1:1f:1a:94:ab:47:38:
6c:69:19:b2:33:7a:68:90:56:b2:2e:24:dd:3b:48:87:1b:9f:
ff:d4:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:50:59 2026 by rpki-client