
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/3f49bbba-63a4-35b1-8f9a-e7c5da4ab7e1.roa
File: 3f49bbba-63a4-35b1-8f9a-e7c5da4ab7e1.roa (raw, json)
Hash identifier: k7/r5Wgf9mfl+AUHiQqkvg779VG1mVlQkGySNdSDnUs=
Subject key identifier: 70:07:E5:85:7C:5A:01:74:76:76:CD:4A:A8:60:7C:83:9E:AA:26:7A
Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial: 010D0C9F4328584D87FA99BAB08A423CF9E558C0
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/3f49bbba-63a4-35b1-8f9a-e7c5da4ab7e1.roa
Signing time: Fri 17 Apr 2026 01:00:27 +0000
ROA not before: Fri 17 Apr 2026 01:00:27 +0000
ROA not after: Thu 16 Jul 2026 01:00:27 +0000
asID: 36546
IP address blocks: 64.111.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:87:fa:99:ba:b0:8a:42:3c:f9:e5:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Validity
Not Before: Apr 17 01:00:27 2026 GMT
Not After : Jul 16 01:00:27 2026 GMT
Subject: CN=e94e1f40-d72e-44ac-b1c1-59bd52fd6fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:f9:88:32:8d:42:54:db:4e:78:dd:f8:5f:
7b:eb:73:a0:9b:84:8a:62:4d:ae:7a:ae:ff:57:cc:
a9:2b:79:1f:1f:b6:83:bd:ec:82:7a:46:87:8d:d9:
9c:96:fe:0a:53:84:3a:9b:0b:3c:07:2a:97:69:83:
95:9b:63:0f:55:97:8f:95:57:0d:3e:f3:0c:7b:55:
9d:ca:35:d0:d2:08:c8:5b:45:b9:dc:4e:73:3e:cd:
7d:84:d2:10:25:38:df:55:d5:0f:64:28:3e:6c:f5:
a6:32:59:18:c2:c6:ca:1f:40:4d:73:f7:fe:52:1d:
02:29:b8:9c:09:b7:b6:07:57:52:13:d8:0d:c8:26:
66:48:8b:fe:c8:6a:63:59:2e:4e:4e:81:d0:8a:e6:
59:7c:49:8c:e4:4c:f1:94:3e:b2:f0:9d:6e:03:0d:
f4:49:d6:3b:4c:6c:2d:4f:77:ae:59:ea:39:d6:08:
61:9e:ae:b3:04:53:68:3d:b9:60:5c:af:53:eb:ce:
4c:b6:c6:7a:9d:df:85:e0:42:65:63:d0:b6:37:81:
27:75:d4:29:d6:89:0a:55:98:c5:0c:9a:ad:6a:cb:
f8:b9:c1:8d:37:84:d9:38:d2:76:1f:5c:79:02:f1:
b3:15:17:f1:2d:4d:c0:f5:f3:7a:38:5c:83:1f:61:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:07:E5:85:7C:5A:01:74:76:76:CD:4A:A8:60:7C:83:9E:AA:26:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/3f49bbba-63a4-35b1-8f9a-e7c5da4ab7e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
X509v3 Authority Key Identifier:
keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.111.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:a5:3a:69:97:4a:c4:72:dc:5f:10:f0:b7:24:c7:d8:15:93:
ba:a0:47:e2:e8:94:f2:64:6b:db:2b:f3:0d:7e:04:2c:55:59:
6e:b9:2d:fb:37:ca:eb:31:17:1d:e2:e8:ee:74:02:08:1b:82:
18:b0:49:37:a5:92:9b:23:f7:18:d6:b3:62:db:7e:2f:77:a3:
72:e9:32:0d:dd:ed:66:27:6b:3f:ab:24:b1:da:89:d2:77:58:
e8:43:18:96:89:c7:4f:49:76:d6:c9:90:a9:e7:6a:1a:c7:db:
d4:0d:02:2f:e6:fe:3a:8b:57:1e:1e:cb:62:7f:bc:86:e5:37:
d4:c2:fb:a2:3d:6e:05:8a:d8:25:01:42:10:85:5a:55:1a:cc:
65:d5:db:69:18:01:b5:d3:5e:5b:e3:86:94:26:24:90:cc:62:
32:81:17:7b:0e:bf:9c:81:c8:ed:31:a5:71:16:9a:97:3b:db:
84:a3:2d:19:b5:4d:95:da:f7:87:48:a3:05:a9:fc:8c:32:a7:
3f:36:7a:0c:db:4c:ec:e4:6b:b9:03:0a:56:ba:a9:34:8c:42:
64:dd:fb:a8:78:12:e3:8e:65:00:8d:93:8b:76:a6:1d:c5:bd:
b3:8b:e0:b9:b3:2c:46:c9:7f:e7:41:5d:ef:f9:6d:70:bb:0f:
8e:d2:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:52 2026 by rpki-client