
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa
File: 8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa (raw, json)
Hash identifier: nKOupdwKaVYTsVTsQt7aMZjuZDarQhfVUaxjpw/dnTU=
Subject key identifier: 06:40:19:C3:1A:A7:64:66:68:3E:DA:23:E2:C1:98:FC:BD:9D:78:16
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D24E041EB0A71AA3604A30200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 208.68.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:41:eb:0a:71:aa:36:04:a3:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=b925ffcd-320c-4684-be3a-121385e2579e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5f:ff:81:63:d5:33:95:67:4c:84:66:eb:95:
7a:32:66:57:35:c2:82:14:b8:92:e5:34:98:63:71:
49:e2:38:4e:c1:26:58:d8:7f:9a:06:cf:09:64:16:
5a:87:67:fc:3a:e3:bb:be:f6:70:cf:2c:56:ba:2a:
96:49:8c:60:bd:e8:95:f0:35:ce:50:85:f7:7e:36:
f0:5d:c4:56:fd:01:f6:1e:86:fe:d9:7b:89:c6:a2:
3c:22:65:f9:ee:f3:82:d9:49:bc:50:9e:df:f3:b1:
78:ed:8b:38:15:d3:f9:1a:d7:5c:c4:47:37:aa:94:
59:38:f2:33:bb:03:02:37:54:1c:63:7f:9d:f3:fa:
48:c1:9f:96:f2:7e:f9:c4:a4:fd:d8:06:29:3e:b9:
3d:19:7e:6b:38:fd:a8:f2:5f:96:cf:12:67:6b:43:
21:aa:c1:d2:0c:31:74:a7:d1:b5:f9:52:07:45:87:
dd:1d:55:81:07:32:f1:cd:0a:84:63:d1:c4:ae:66:
e1:b7:3d:c2:3d:8c:e4:ef:c5:f4:61:aa:48:4e:3d:
18:23:6c:78:a8:d0:24:b3:d3:fd:d3:5d:2f:4a:31:
d7:e0:16:23:5f:14:34:b0:89:da:74:07:36:fb:06:
53:95:a3:8e:f1:15:72:eb:c5:43:27:99:bb:d8:32:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:19:C3:1A:A7:64:66:68:3E:DA:23:E2:C1:98:FC:BD:9D:78:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:79:af:c2:88:ea:ec:6e:cd:2f:77:5e:30:a9:62:59:a2:55:
c3:e7:12:ac:3a:0c:16:5a:d5:9e:7e:de:45:c1:40:c1:4e:12:
3a:da:48:d4:13:5b:b6:0a:10:58:b2:25:03:e5:ef:72:06:f6:
57:27:87:f8:6d:a0:db:5f:7a:c8:7d:8e:77:df:dd:35:54:b5:
c5:59:e9:2b:f3:27:e7:38:00:b3:22:64:60:cd:0a:c7:e3:8e:
85:6a:48:f7:48:35:21:58:8c:06:8d:1c:bf:65:72:0d:eb:31:
3b:3b:b1:ef:be:cc:65:c9:22:20:fa:08:aa:75:a2:69:0d:28:
ca:fb:33:6f:df:f6:a7:5c:1c:01:3e:9a:9f:dc:d7:5d:b6:c4:
78:82:50:f0:70:00:6b:fb:4a:96:9a:1a:b9:ac:9a:6b:19:38:
c4:33:14:e0:8e:98:25:10:9e:62:07:4c:8c:a2:53:5f:08:7a:
71:28:b2:fd:31:e1:07:2a:22:ac:bc:51:97:fb:dd:48:fe:8b:
b0:9f:81:6e:39:e9:f9:9f:a6:ef:7a:a6:bf:3d:01:87:d2:2c:
90:8d:ca:04:83:71:62:16:06:4c:d8:fc:67:68:af:1b:7c:c6:
22:d2:20:64:0d:cb:e0:14:9f:0c:32:b4:d7:b9:77:5f:3f:b6:
14:93:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:32:28 2026 by rpki-client