
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/939567d1-8d35-38f4-a6b9-c5035b00eb43.roa
File: 939567d1-8d35-38f4-a6b9-c5035b00eb43.roa (raw, json)
Hash identifier: gMWPzrJpWz7iwuRa/Iqm4z2C80TrClXozbgXs/deUYg=
Subject key identifier: FC:5E:1A:48:CC:C5:4B:37:63:81:AA:90:49:B7:E6:E9:A7:A1:8B:3C
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584EA7879C8A194594C03D81DFC0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/939567d1-8d35-38f4-a6b9-c5035b00eb43.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 18785
IP address blocks: 66.115.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:9c:8a:19:45:94:c0:3d:81:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1bf62d7c-0563-457d-9f22-b23b5b42b328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:4c:21:d0:58:d3:22:81:e0:43:be:bc:6b:
de:12:a9:6e:47:15:7d:78:09:2c:50:56:0c:3a:e7:
ad:bd:21:7f:60:89:80:41:dc:ea:9e:e0:67:9f:a3:
31:34:9d:c8:11:3f:f8:b2:6c:8b:59:c7:42:ab:01:
bf:c4:8f:bd:90:2e:dc:a9:40:e7:78:b1:c4:3a:b0:
10:0a:fa:48:04:0f:99:e6:28:f9:32:a5:8e:ed:d5:
53:4e:26:44:c8:93:75:e0:77:65:7e:3f:36:0d:62:
5a:39:a0:c2:68:4f:e0:de:54:12:da:2b:3a:35:dc:
aa:91:da:3b:0d:b5:98:09:c2:ac:7e:e0:4b:85:fe:
6a:9a:a1:c9:5e:73:a2:60:77:34:e8:ee:1f:52:0a:
20:2a:ee:12:53:32:da:fc:07:8c:21:d3:75:b5:ba:
76:7d:99:32:53:1c:23:1a:ed:df:c9:71:9b:0e:e9:
30:b1:8d:85:a9:23:c3:46:ef:91:85:7f:71:37:2d:
d9:f6:47:60:d9:eb:50:bf:be:a6:05:b0:c1:4c:08:
03:22:4f:10:9f:ac:14:56:0f:de:68:41:71:8c:ab:
97:35:ca:16:d3:4e:11:90:59:55:90:be:31:ed:a4:
44:3c:b5:0c:eb:cb:58:46:18:62:73:26:f7:4d:cc:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:1A:48:CC:C5:4B:37:63:81:AA:90:49:B7:E6:E9:A7:A1:8B:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/939567d1-8d35-38f4-a6b9-c5035b00eb43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:7c:66:29:0a:84:d5:e5:94:82:ef:b7:27:f2:a6:be:f4:ac:
70:70:1f:6d:13:74:b5:88:cf:9c:45:86:57:5e:c0:d2:4b:fc:
cc:2d:0d:72:21:b8:8e:51:7e:55:39:6d:28:e8:8c:0a:65:1e:
60:5b:74:84:30:56:f0:fb:8a:e0:e5:cc:bd:46:9f:13:4b:a6:
46:cf:40:f0:88:af:48:12:b1:9f:29:a3:a5:23:e4:05:93:77:
4e:77:8f:ea:60:c5:64:40:a6:0b:b0:4f:9b:e0:55:33:b7:a6:
22:65:60:d4:d5:5c:52:6c:ff:41:b9:08:35:26:10:50:86:31:
38:6d:49:e0:08:a6:23:5e:5c:d9:52:dd:aa:5e:5d:9f:48:cc:
0c:56:b1:c8:54:cc:0f:8c:f4:f1:48:e8:e9:1c:1d:7f:90:7a:
26:1c:e8:0c:de:0e:77:01:55:22:df:99:49:9e:bc:43:b7:05:
66:35:47:b4:70:6c:50:0d:00:0e:24:ed:7f:1f:45:f7:54:b7:
f4:3a:01:62:c6:16:d2:a3:e2:2b:e5:fb:71:0a:f6:45:a9:46:
54:e4:a9:eb:a8:7f:46:c6:d4:ac:e7:3a:23:48:1e:f1:cf:a1:
0e:30:04:58:8a:b2:33:10:80:17:42:7b:a6:31:19:de:70:5a:
9c:72:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:30:02 2026 by rpki-client