
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa
File: 6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa (raw, json)
Hash identifier: XNJXBu/GpPPyhCpJfCPWWkyiuIz4VgfV3BdArntLUZw=
Subject key identifier: 91:CB:1B:0B:83:60:C6:56:4F:0D:71:27:90:42:A0:29:1E:D2:D0:85
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584E6F3A2925D438A5F04F234EC0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 21949
IP address blocks: 209.195.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3a:29:25:d4:38:a5:f0:4f:23:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=d972216a-1790-48e3-9116-c1648ded20f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:27:90:2e:e7:71:89:f4:19:0e:ad:3a:a6:
3a:03:5f:c9:f3:58:6c:23:8a:ef:27:c0:b4:2a:6b:
60:2d:1b:88:00:d3:a7:35:d1:c0:f4:bf:70:b3:03:
5e:58:1b:7b:80:27:a7:a5:b1:5c:3d:02:a7:1e:fc:
8a:28:df:72:21:bb:c0:e0:f7:ce:0a:70:4c:c2:7e:
fe:b9:bf:99:aa:d8:6b:ee:61:e8:f6:81:c7:f6:8c:
12:b4:1b:93:9d:46:38:c0:1d:10:19:86:31:32:70:
b0:65:67:d0:a4:2e:03:af:fd:86:7f:72:b2:3f:48:
1d:5a:08:ec:c7:9a:05:f4:58:b9:52:80:d2:40:2b:
0f:a8:8e:f3:b3:6b:ed:a2:39:6d:66:5a:f6:08:5e:
b6:10:21:1f:63:61:7a:e0:e1:3c:ea:6b:9d:9c:db:
80:db:1c:fe:37:18:89:ef:41:f1:0d:87:ca:36:61:
19:2b:5c:f0:3c:7c:63:75:19:27:4c:07:e7:e2:e1:
5d:b6:bb:2a:de:84:db:ae:cf:ad:f2:70:c9:44:c2:
30:8a:9a:24:20:25:ed:38:fd:b6:e7:e7:40:c5:96:
27:06:31:80:74:47:e6:06:d0:91:46:b0:0e:3b:b5:
91:65:0f:ab:45:06:ac:38:85:20:19:a7:ad:9d:85:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:1B:0B:83:60:C6:56:4F:0D:71:27:90:42:A0:29:1E:D2:D0:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.195.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:03:58:74:6f:11:59:10:a5:e5:04:cd:22:29:1c:85:5d:e7:
ce:f4:c4:2a:4b:70:11:cd:cc:55:4d:e8:ce:7b:26:3e:ed:12:
12:53:8d:e5:66:0f:61:d7:c1:8c:6d:6e:dd:3e:19:dc:fa:e7:
48:5f:f3:63:6c:2a:44:8d:37:d6:12:36:65:07:2c:21:d7:5f:
b0:b5:49:62:04:6a:9e:99:30:49:68:04:ac:80:f0:71:ff:e7:
f6:99:48:6c:1d:ff:18:d9:08:da:66:2f:69:e4:4e:5f:ca:8a:
24:9b:33:a3:69:76:96:5d:34:d1:43:3a:ec:20:b2:59:90:cc:
60:d6:f4:72:61:33:32:1a:11:19:dd:dc:5d:c3:58:85:55:8d:
08:fb:9b:4f:76:66:ad:c2:15:06:42:f7:c2:0c:97:f5:fc:2e:
61:e0:6d:b8:0a:38:f4:e9:55:6c:7d:fc:0b:2c:df:f5:76:f1:
d9:dd:ed:5e:7b:21:f4:da:95:bf:74:ba:81:49:a8:f4:22:99:
68:80:f7:c3:30:e5:c9:17:7c:21:e1:4d:be:14:74:36:ba:c7:
47:8b:82:aa:8d:35:10:aa:57:90:46:a1:c8:ce:e0:54:85:0e:
de:7d:cc:32:77:55:38:33:85:df:00:3f:ff:40:68:99:a3:9c:
81:e0:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:01:27 2026 by rpki-client