
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
File: 4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa (raw, json)
Hash identifier: GKamisTv7Sq5nAMmgR+WwOqzjD+xk3s79/YLHlXAtyY=
Subject key identifier: 38:4C:E8:BA:E4:5D:89:ED:F5:7F:51:42:A8:00:2D:D0:BA:BA:EC:14
Certificate issuer: /CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b
Certificate serial: 010D0C9F4328584D65152898C1D6140585A98A80
Authority key identifier: 86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 394875
IP address blocks: 52.144.25.0/24 maxlen: 24
2620:f9:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:28:98:c1:d6:14:05:85:a9:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=4bbec663-fe16-40ae-b2c2-ccd602e630fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:51:e8:d9:82:c3:19:fe:fa:c4:66:9a:5a:
f2:9f:03:4d:c3:49:b6:8d:de:7b:8f:fd:75:ee:55:
71:e3:ef:7f:b1:42:1d:e8:cb:3b:e0:da:fc:de:fc:
3f:58:70:ed:76:13:86:0f:43:0f:9d:44:07:27:a3:
4d:dc:08:9e:52:26:1f:26:79:6a:c0:ef:a0:3b:45:
a0:cd:33:ab:92:e9:34:d6:b5:28:2c:a6:7b:25:0e:
89:96:94:31:d1:8c:48:ea:5f:5d:d6:a3:cd:16:5c:
98:fe:d2:ea:14:51:9b:da:14:4f:aa:05:91:db:08:
f4:8d:b5:55:23:7f:0f:46:81:39:58:af:7b:48:d6:
fe:2d:2b:67:63:f1:6b:34:1f:cb:8b:92:0a:d5:e1:
94:df:69:a8:29:49:90:fc:2a:35:65:7b:f4:46:6f:
a7:b7:c2:e6:22:78:91:01:d1:14:53:33:f2:c2:55:
35:e0:89:66:39:13:9a:1a:ac:de:1d:53:a7:9f:7d:
69:11:e7:53:10:ff:b8:a7:b6:0e:9b:98:e6:a0:d3:
5d:58:ff:70:cd:6b:5c:35:6d:31:e2:e0:40:a0:44:
c5:0e:11:a7:78:28:00:70:aa:d4:5b:1f:96:56:dc:
da:2a:b9:7e:28:0d:5a:00:95:ab:f3:71:b1:2e:6d:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:E8:BA:E4:5D:89:ED:F5:7F:51:42:A8:00:2D:D0:BA:BA:EC:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl
X509v3 Authority Key Identifier:
keyid:86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.25.0/24
IPv6:
2620:f9:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:9f:90:ec:36:9a:20:bc:e3:bf:81:5c:61:98:1f:4c:34:3d:
62:cc:3b:66:79:82:e0:b5:3a:4a:f4:8d:2d:de:54:15:20:a0:
18:5f:53:62:20:62:b2:7e:42:62:17:97:4c:84:2e:55:fe:57:
dd:e8:7f:6f:a8:1a:16:92:26:ec:be:80:43:58:aa:a0:59:84:
7b:57:5e:87:ef:4f:3e:6e:d1:a8:e0:1d:b6:79:3f:a8:7f:aa:
f1:67:16:df:20:1d:c3:bb:b8:42:dd:d8:92:e7:11:5d:e4:a4:
70:ea:47:16:c6:6f:1e:67:d2:ed:e5:0d:bf:25:d8:84:bb:47:
cd:e7:1a:58:90:ec:62:fa:a7:3e:bb:3e:db:cc:72:9b:ab:77:
f3:46:02:59:c6:88:48:2a:27:81:49:0a:8b:f9:a3:20:af:bb:
a3:3e:1f:ce:7d:bf:f9:4a:9c:b2:50:33:e6:3d:18:08:36:05:
4e:84:e9:ba:51:5d:80:13:d6:6b:eb:4d:41:3a:78:42:71:a6:
cf:f5:f7:d1:0f:c6:1a:ce:b4:fc:cc:6e:38:da:a4:fe:69:e5:
9e:65:60:a2:29:8d:2e:41:dd:6c:63:c6:9b:90:24:65:d0:ff:
fe:9c:78:fb:7f:41:a0:59:ab:8d:67:db:96:4c:db:ad:65:01:
5f:c3:56:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:55:58 2026 by rpki-client