
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa
File: 933424d9-7724-3d56-928c-ad8645ab2fa2.roa (raw, json)
Hash identifier: QNzpGAJvoJVs4Dm4cEB5NKlDlWa6CkLAa/csNUOWPS4=
Subject key identifier: B1:F3:AD:1C:17:92:83:83:1A:2B:2C:95:C2:B2:AA:54:06:5D:1B:78
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328584D24E0E2AAFFEB87E5BB3C6960
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 36040
IP address blocks: 208.117.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:e2:aa:ff:eb:87:e5:bb:3c:69:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=85f3c45a-e9da-46ea-b903-6c01dfb3f831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:b7:4f:47:65:c6:c8:f1:b6:3d:63:85:9d:
19:6c:57:55:7f:b2:54:58:2a:6e:83:3a:c7:d3:ab:
10:ea:fb:b4:9f:2b:e0:ed:3e:9a:0e:e6:f1:a1:70:
43:ef:c6:24:26:27:ae:fd:c9:81:2a:46:34:1a:88:
cb:10:28:6f:4b:c2:f5:4d:8d:2c:ea:7b:21:82:dd:
11:40:33:8c:82:c4:42:8b:1a:e7:dd:4e:ce:25:27:
cb:f0:31:17:74:e6:b7:b8:b6:de:1b:70:24:00:97:
df:62:e6:22:54:6b:86:10:c0:b5:f4:94:88:41:24:
b8:bb:c3:6b:ed:31:68:39:34:9e:72:90:4e:e0:e6:
1a:e9:70:0b:fa:24:a9:0a:95:e6:94:8b:b8:0b:96:
2b:2f:4b:11:50:a2:37:95:4a:da:b9:ce:6d:da:13:
8f:d0:73:98:9a:6a:b5:c9:54:86:20:0f:ac:6b:76:
5a:57:3a:e6:cf:75:f0:5a:af:be:00:05:df:c4:e0:
98:01:ea:ce:52:46:84:78:4c:5d:b8:6c:d6:61:6c:
ab:f1:c5:fe:3b:f5:bb:c2:d5:4a:5d:0e:0c:0f:49:
7a:c0:58:18:63:54:84:84:6b:b6:4c:63:8a:f3:c2:
91:61:02:0a:f7:df:61:11:5d:fd:77:05:b6:75:60:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F3:AD:1C:17:92:83:83:1A:2B:2C:95:C2:B2:AA:54:06:5D:1B:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:df:79:16:29:41:02:c2:26:bb:2c:bc:b1:2e:ed:65:be:3f:
20:30:03:ae:8d:9f:30:22:fe:b8:79:37:2b:79:7c:ef:6a:87:
79:ca:60:86:e9:01:fb:f0:69:b0:db:91:d0:18:b8:a8:90:ae:
d1:92:c4:05:11:97:64:0a:3f:f6:12:80:1b:a5:04:26:db:fa:
4a:8c:a9:9d:02:c5:b3:76:de:ac:e7:a6:79:7a:71:10:51:70:
ef:99:04:6e:db:74:b9:36:c7:8c:e1:fd:de:8c:2b:cc:1e:e3:
7a:88:be:f2:51:03:4d:37:bc:f7:a0:60:2d:bb:62:c1:6b:5b:
42:e1:2a:84:1f:97:6c:20:4c:02:ff:f4:45:5e:72:b8:44:a3:
e2:de:47:8f:8f:c6:ed:a3:6b:fd:05:f1:25:88:85:16:88:1e:
8b:d3:2d:04:58:1b:7f:34:30:ad:43:2d:56:b2:00:e5:e3:1a:
50:68:eb:75:38:f6:2b:88:47:ba:ee:df:6f:70:0d:66:01:d0:
24:59:16:62:b1:65:93:2c:16:5e:20:92:d6:cd:0e:c9:f6:18:
89:27:b4:21:23:7d:87:12:d9:ca:a9:f9:c1:5d:6b:6b:41:f7:
13:04:5d:61:79:46:5e:bd:ae:99:c1:15:7a:97:9f:6a:6a:42:
83:05:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:55:54 2026 by rpki-client