
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa
File: fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa (raw, json)
Hash identifier: vJl+nvYsq4ru5DdLMhMFKloXeSDb2k9F1tW9Ab+yOQ8=
Subject key identifier: 51:92:F1:B4:1B:A7:05:08:25:EB:EE:43:E1:8A:16:83:05:B1:68:F5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D2644D49CFF139DBCA53B5400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 396982
IP address blocks: 208.76.71.96/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:d4:9c:ff:13:9d:bc:a5:3b:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=8d5b9baf-3e3b-4932-ad58-413b699f539e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b3:25:c0:aa:dc:2b:86:f8:9d:b4:fd:21:0b:
f0:81:60:da:04:0f:71:82:56:88:4e:c7:68:1d:d3:
63:48:f4:08:af:a1:ad:ff:39:29:52:c7:fb:e1:2d:
16:b4:be:b2:e5:83:5d:3f:2d:53:49:16:d5:ef:62:
b4:28:21:3b:4e:05:06:1e:44:52:f3:3a:23:5f:f2:
cd:5c:e0:e4:47:d6:41:d4:36:8d:78:b7:e5:a9:95:
2c:41:d7:bb:1e:80:03:49:4f:82:41:6d:04:08:72:
fb:17:85:3c:4e:f0:99:92:13:4d:66:04:2c:da:76:
71:3b:a2:6f:fd:be:15:71:11:70:25:04:00:e4:39:
70:50:30:2e:ae:0e:22:17:7d:16:4e:f4:3d:2b:46:
2c:61:c6:54:a3:73:08:ee:d3:a6:b9:a2:4d:12:3b:
ad:de:2f:c9:e8:a1:5a:41:63:f7:e4:ee:31:aa:65:
e4:45:d7:b5:99:f4:33:e3:63:56:d6:11:e4:ea:5b:
6f:8f:82:32:37:fb:b8:6a:53:8c:a7:06:b5:3d:e7:
44:68:12:11:ae:2d:03:01:e6:dc:21:de:8c:6e:67:
51:66:79:f1:cd:0d:7b:71:b3:66:11:28:6d:c0:95:
13:bd:4f:31:a4:5e:be:45:96:aa:e3:c3:e6:01:92:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:92:F1:B4:1B:A7:05:08:25:EB:EE:43:E1:8A:16:83:05:B1:68:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.71.96/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:ae:c9:1d:eb:38:20:1d:f1:6f:5c:b9:c2:8e:3a:85:c1:f0:
77:08:88:1b:2d:55:15:00:b7:94:c5:17:81:03:0e:f7:6e:49:
64:2b:6c:e3:c3:f1:f6:32:84:6f:85:93:3d:92:e7:ed:ae:e4:
b5:1e:28:2a:f6:df:be:29:ff:a0:90:45:e7:9c:c9:ab:8f:1a:
dc:22:10:d9:e0:dc:7e:0e:87:ae:a5:83:1f:90:6d:f6:53:f3:
2e:8b:d9:09:8b:91:1b:20:8e:ef:ed:55:81:cd:c7:86:81:cb:
77:f0:eb:9e:df:a4:1b:16:48:71:79:14:6e:4e:67:5c:1d:17:
96:7d:07:d3:27:97:df:a1:63:6c:1a:c4:5d:98:a7:d9:78:59:
0e:aa:4a:0c:b4:7b:d8:bf:eb:79:78:20:e1:16:95:af:a4:f8:
d0:f1:47:39:52:e8:ee:af:71:9e:a4:80:40:53:21:8f:47:61:
55:58:ca:65:d0:8f:1c:b4:9f:87:20:ce:de:67:b5:88:f2:ea:
26:46:87:5d:e4:15:2f:35:5e:c4:4c:70:dd:b1:ef:5b:4c:eb:
e0:e6:ee:8f:3e:dd:09:2c:9f:a8:15:c0:76:eb:1d:3e:1f:d1:
61:c3:6b:db:e0:93:55:4f:2b:05:93:a4:c2:53:0b:89:e7:16:
58:2a:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:31:58 2026 by rpki-client