
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/d973f1a1-9464-3126-8bbe-53e64e5b1bba.roa
File: d973f1a1-9464-3126-8bbe-53e64e5b1bba.roa (raw, json)
Hash identifier: UFHmVUN7AFOzQmv/vxPHxrfIBTp8YOMF473tc9w7yg4=
Subject key identifier: 28:53:B0:16:72:6D:3C:A3:D7:9C:F9:8F:1F:CE:7B:81:E4:C4:09:CC
Certificate issuer: /CN=7294aee6-e70a-494f-aa0c-f3894c542c48
Certificate serial: 010D0C9F4328584EA4450B74415C07FDBD5D5D00
Authority key identifier: D2:BB:A0:63:1B:40:37:34:B8:D5:D4:AF:E7:27:F9:A9:B9:05:8F:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/d973f1a1-9464-3126-8bbe-53e64e5b1bba.roa
Signing time: Mon 27 Jul 2026 21:00:11 +0000
ROA not before: Mon 27 Jul 2026 21:00:11 +0000
ROA not after: Sun 25 Oct 2026 21:00:11 +0000
asID: 14618
IP address blocks: 64.28.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/7294aee6-e70a-494f-aa0c-f3894c542c48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/7294aee6-e70a-494f-aa0c-f3894c542c48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a4:45:0b:74:41:5c:07:fd:bd:5d:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7294aee6-e70a-494f-aa0c-f3894c542c48
Validity
Not Before: Jul 27 21:00:11 2026 GMT
Not After : Oct 25 21:00:11 2026 GMT
Subject: CN=8809ef01-af10-4ccb-84ca-a82acf174dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:29:1d:66:2b:ea:6a:3a:4c:e5:fc:7c:3f:
b6:cd:ba:ec:2b:04:5a:3a:4a:95:81:25:5f:1b:af:
33:df:3e:79:c4:31:6b:d5:a1:78:a8:35:c4:f7:7e:
9c:9f:3a:3b:09:a4:39:61:d0:98:b6:e7:75:25:9d:
25:27:74:24:18:95:22:f0:2d:6f:b9:b1:f0:45:da:
65:3f:0a:48:6a:a1:c8:ea:58:0d:52:0c:53:29:13:
bc:cf:e9:f3:33:64:62:d0:f7:4b:52:7d:5e:78:eb:
bc:4f:d6:fc:0a:77:02:5c:3b:08:74:3c:8a:2b:68:
09:7d:ff:11:db:9b:11:ac:b2:09:bf:29:9c:5f:8d:
d1:56:81:b2:a0:4f:d0:14:3a:13:bb:df:bd:cb:f9:
76:82:97:38:cf:65:8a:bd:52:2e:fd:60:e5:06:24:
27:48:8f:d7:ff:41:e3:df:78:87:df:81:75:b8:9a:
e4:e3:7d:72:ee:ed:d8:f5:9f:df:f1:44:a7:5d:09:
35:fe:55:38:f3:4d:e4:f0:ae:b2:fd:6c:76:88:4a:
8b:68:35:b3:e9:a2:ca:88:af:11:43:8b:f6:7d:21:
73:f2:12:f1:be:e8:6f:b9:78:ad:39:1a:52:63:52:
93:d7:73:6d:1f:d3:d4:00:f0:2c:7c:1f:3d:52:8b:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:B0:16:72:6D:3C:A3:D7:9C:F9:8F:1F:CE:7B:81:E4:C4:09:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/d973f1a1-9464-3126-8bbe-53e64e5b1bba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/7294aee6-e70a-494f-aa0c-f3894c542c48.crl
X509v3 Authority Key Identifier:
keyid:D2:BB:A0:63:1B:40:37:34:B8:D5:D4:AF:E7:27:F9:A9:B9:05:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48.cer
sbgp-ipAddrBlock: critical
IPv4:
64.28.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:04:35:a6:25:bf:09:a8:68:10:ae:92:cf:1d:16:f7:3e:0a:
33:95:96:db:b9:99:a2:cf:97:6d:a5:37:ca:b3:a1:94:31:cd:
05:1a:9e:0c:a9:b3:11:8e:59:18:f9:cd:67:21:ae:8a:3e:b2:
38:07:af:54:54:c2:9d:45:62:39:62:40:b7:75:4b:2c:ce:eb:
13:23:fa:05:eb:fc:9b:65:71:12:d1:77:95:df:1d:5c:7f:12:
6a:8f:67:1f:49:6f:4d:4a:e4:31:72:09:cd:1d:cb:ab:cf:1f:
c5:a0:7c:1e:c4:95:84:80:0b:ad:d4:44:2d:07:06:fd:30:62:
6e:b0:19:07:93:a2:41:e7:54:ff:77:fc:ef:90:18:b3:89:98:
71:18:48:9e:ec:75:4e:b9:6e:35:a6:c5:48:9c:25:59:45:e3:
a5:7a:be:4b:cf:4d:12:90:07:55:b9:c2:ef:c6:1b:5e:7d:90:
e7:5b:78:66:9e:37:00:dc:47:63:27:7a:10:48:b1:0b:d4:dc:
43:20:88:55:66:7c:fb:7b:c9:4c:30:80:86:dd:65:74:90:05:
5e:d9:f3:50:3b:0e:fb:f5:09:0c:12:61:b4:63:34:49:68:f0:
04:40:f6:10:7d:4b:0a:30:c3:81:a9:79:6a:f8:02:75:5a:1f:
fb:7d:aa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:21 2026 by rpki-client