
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa
File: 0fa138cc-579e-337f-844b-d4a832c956c9.roa (raw, json)
Hash identifier: hmxB5pTosIonEdSuIY0dbqcnlpy4oO1c6jVRwuSNji4=
Subject key identifier: C1:5B:44:0D:BD:AC:60:A7:5F:D0:98:1D:A9:90:7D:C7:93:EC:11:C9
Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial: 010D0C9F4328584CBDB1DB0BBED3EA1EA8A4E280
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 55039
IP address blocks: 208.66.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b1:db:0b:be:d3:ea:1e:a8:a4:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=246de335-2e11-428a-aca4-bff980dbab62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:91:41:20:b9:4a:24:9f:6f:0a:93:59:18:
67:85:43:ca:16:d5:6d:32:90:79:94:9a:77:42:66:
88:0e:fa:15:ca:86:ed:11:d4:f7:72:d8:db:ed:a1:
94:4b:de:cf:90:1b:6b:93:b8:e2:d5:32:78:68:eb:
c8:82:94:26:c8:d7:5d:e1:91:24:f3:a5:30:91:aa:
49:67:58:bd:9d:0e:85:81:17:a4:db:36:75:19:95:
e0:43:36:48:b1:c0:07:10:e0:53:2b:96:a9:6e:2f:
d9:f0:ac:bc:0a:98:a2:63:6d:2e:21:39:4f:06:85:
b1:4f:64:d1:5b:b1:db:e9:58:a8:0e:77:41:7c:37:
6e:7b:c4:ce:47:f6:52:e0:9e:18:1a:b9:57:b3:9b:
88:f5:17:d7:6c:db:36:85:82:f9:8c:17:8f:41:3a:
d4:46:ae:1b:45:ad:3f:87:18:28:f6:f8:2b:6b:e9:
4e:7d:f7:94:2e:19:be:c8:f8:5b:19:13:c8:00:e1:
c9:41:69:e9:94:d2:94:e2:db:6a:ec:df:38:a5:f3:
d5:09:86:d4:74:74:cf:67:dd:f8:dc:1f:23:04:ef:
98:7f:84:9f:19:55:81:a5:c4:88:77:91:64:52:c6:
33:7c:55:95:01:3e:dc:fa:76:dd:37:64:8c:93:b6:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5B:44:0D:BD:AC:60:A7:5F:D0:98:1D:A9:90:7D:C7:93:EC:11:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
X509v3 Authority Key Identifier:
keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
sbgp-ipAddrBlock: critical
IPv4:
208.66.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:db:84:cf:ef:49:57:4c:01:b4:c9:6e:ad:92:5e:95:8e:9b:
f5:41:09:cf:b9:6b:a4:29:95:9f:f7:2c:16:e2:33:85:0f:50:
74:67:56:f6:ca:b4:78:e7:41:be:93:9f:88:2b:03:86:e5:a0:
c2:04:5a:11:9f:52:6b:73:b9:11:62:77:81:b5:02:77:e6:6e:
a1:f8:ed:6c:f0:c5:64:33:53:ae:70:e4:27:78:0e:ae:e5:1d:
74:8c:85:51:e2:b5:4c:36:a3:bd:7b:ae:b1:5c:ab:eb:be:23:
0e:ae:cd:98:ca:5e:57:4d:5b:c1:81:39:d2:12:2e:f7:c8:83:
0b:2c:e3:06:5f:26:76:7a:ce:6d:ee:33:9b:73:42:63:91:f5:
95:4d:37:43:8a:e1:11:41:6f:98:d6:fd:de:51:d2:bb:fd:7c:
31:01:95:cc:49:e5:ae:8a:45:b8:2b:af:96:0b:49:4b:8a:ee:
9a:ef:c8:b6:bd:a9:e1:55:83:0a:33:56:7b:3d:d2:0e:f2:bb:
7d:63:02:7a:63:6a:c1:fd:fa:c9:ab:86:c2:46:12:da:db:23:
fa:aa:30:50:db:d1:31:7a:4f:01:95:4e:3a:24:5b:7f:3a:d2:
de:2a:7f:46:88:c0:62:ed:0a:29:c7:9d:56:5f:1c:9d:2a:f3:
2a:01:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 12:13:47 2026 by rpki-client