
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/0c63918d-8469-3f06-8f4a-6a786f9c4338.roa
File: 0c63918d-8469-3f06-8f4a-6a786f9c4338.roa (raw, json)
Hash identifier: w1Oua/IdboQPWLvV4Yh3leXH1uP0hrNh9PiVI9NN4N8=
Subject key identifier: 59:97:31:06:B6:EE:CA:F0:07:72:7D:48:A9:00:A8:34:95:DC:B6:F4
Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial: 010D0C9F4328584F63F82DF21843B1358861E8A0
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/0c63918d-8469-3f06-8f4a-6a786f9c4338.roa
Signing time: Sun 04 Oct 2026 13:00:13 +0000
ROA not before: Sun 04 Oct 2026 13:00:13 +0000
ROA not after: Sat 02 Jan 2027 14:00:13 +0000
asID: 62943
IP address blocks: 67.221.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:63:f8:2d:f2:18:43:b1:35:88:61:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Validity
Not Before: Oct 4 13:00:13 2026 GMT
Not After : Jan 2 14:00:13 2027 GMT
Subject: CN=13b8d85e-0cd0-4e82-b910-8212839d06a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:1a:5c:d8:ad:53:c7:e0:1f:ce:97:49:07:
7f:fa:25:77:6d:ac:2b:58:10:85:12:a5:b0:19:78:
bf:21:35:98:8d:98:4d:3a:24:ba:67:1b:04:68:c5:
68:ad:e8:cc:5f:6c:bd:92:5e:51:07:20:a7:1d:3c:
41:1d:bf:61:90:8f:36:d8:7e:89:c7:82:b9:a4:6a:
1c:3c:54:fe:05:66:35:be:69:e0:da:cc:0f:14:c2:
c2:70:76:3f:b2:a3:2c:98:ec:ec:3d:a7:44:d1:e4:
23:bc:83:22:f8:29:2d:be:00:46:54:53:7e:51:d4:
11:01:10:c9:8b:9a:ec:0a:b1:d1:9d:66:b5:49:cf:
57:96:dc:e3:6e:89:d9:6e:85:61:27:f9:37:46:ed:
33:3b:db:b4:a7:c8:35:12:25:d7:ee:0b:f1:da:9f:
c1:a0:ca:92:db:cf:31:89:3d:37:28:71:df:0c:d1:
14:90:f9:c2:04:15:13:d0:e9:3e:6b:b6:e9:51:a9:
e2:10:f7:a8:35:77:ff:a4:2b:7e:88:05:35:09:20:
68:d0:72:32:7a:fe:07:82:28:0f:f6:43:68:07:c0:
c7:e0:0e:9a:63:1b:67:1f:30:84:fe:62:96:54:a7:
e4:30:50:fb:e2:83:ef:6e:c5:4c:78:03:b9:00:63:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:97:31:06:B6:EE:CA:F0:07:72:7D:48:A9:00:A8:34:95:DC:B6:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/0c63918d-8469-3f06-8f4a-6a786f9c4338.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
X509v3 Authority Key Identifier:
keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:0d:fb:8c:86:61:7d:2d:2f:84:62:8f:a2:4e:85:40:b0:c3:
ca:9d:3d:fc:1d:89:1f:98:e3:d5:30:b5:96:7c:40:a9:c8:03:
19:14:b1:f2:f3:f1:d5:6a:7f:63:11:9a:24:f4:9a:26:7c:50:
6a:0e:8d:cb:80:14:20:9d:f6:28:90:03:fc:bc:82:9c:8b:e7:
a8:a7:6f:3f:16:62:0c:92:a5:89:1a:94:d8:8b:2e:13:48:77:
9c:9c:ed:1c:71:07:87:f4:d6:52:bc:c6:35:2b:94:ca:01:f6:
69:72:79:e0:55:69:d2:fc:27:25:5a:2a:a6:26:1d:14:86:3a:
07:b4:c1:d4:84:44:10:6c:4d:e2:b0:ab:03:d1:4b:fc:ad:b7:
96:10:5e:19:78:85:a9:99:db:09:4a:da:8e:63:eb:92:dc:2f:
2b:4a:0f:86:98:8b:22:e9:f2:77:61:14:7d:cd:8b:ba:52:1a:
87:2c:bb:d0:6b:45:eb:f2:8b:10:7b:ed:70:8d:f2:06:ca:08:
a5:7b:3c:99:93:2f:41:49:12:48:19:13:ec:23:20:24:b2:8f:
85:c7:13:54:29:a0:2b:82:d5:a0:c4:17:32:2e:40:51:0f:c3:
49:59:64:00:3e:58:ff:41:3d:64:28:75:c6:6e:e1:9f:e6:d8:
d7:04:fc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:10:48 2026 by rpki-client