
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa
File: ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa (raw, json)
Hash identifier: Ma4k0hGiryvXDhqDUCFxBbJnkn/DVotkRYFh0l8MdCM=
Subject key identifier: 05:C3:58:9C:B0:7F:EA:D3:1F:17:5D:49:91:7E:43:05:5D:8E:44:97
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584D4D5A735787A6375EF3725940
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 398202
IP address blocks: 165.254.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:73:57:87:a6:37:5e:f3:72:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=c78eb7e9-6bb3-42da-85b6-30516370c5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:94:e7:32:88:25:c4:17:06:d4:8f:a6:5c:
50:23:79:e2:16:32:75:26:fc:5d:09:69:ce:97:64:
31:49:c3:3f:58:2f:85:fa:61:49:91:c9:95:de:cd:
e8:67:e0:60:16:d2:48:87:4e:e6:a3:d5:e7:1e:9f:
7e:0a:67:c7:4c:31:c2:ba:34:f9:df:2e:d7:57:be:
79:9c:08:13:ec:59:69:15:28:a4:38:bd:b3:c8:9f:
c8:de:3b:63:89:09:ed:bc:4d:1d:f8:8a:99:d3:93:
be:b2:7d:61:97:08:ff:4e:1e:43:fa:09:94:4b:97:
cb:6e:38:3c:f7:2e:79:19:40:eb:60:08:c3:69:48:
2e:2b:4f:b3:70:7d:d1:80:83:8c:b6:a2:30:86:70:
73:cc:14:90:89:f2:98:56:f2:65:6a:dd:58:26:dc:
26:04:9c:97:71:3d:86:fb:8e:c9:31:58:65:31:18:
01:09:03:7c:0d:e8:cd:79:27:fc:96:dc:05:f2:a5:
97:f9:81:3a:d8:33:b4:d9:18:88:ef:de:db:08:62:
5d:6b:c8:83:79:c5:ab:36:9a:87:38:94:82:af:28:
d5:50:05:c3:d1:ab:54:96:d5:8e:64:21:e5:02:1b:
dc:49:a6:2e:a8:b8:15:81:0f:b5:38:0b:ee:af:07:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C3:58:9C:B0:7F:EA:D3:1F:17:5D:49:91:7E:43:05:5D:8E:44:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:f3:11:49:aa:61:cb:8a:db:9d:33:b2:9c:7d:8b:4e:5b:d6:
c1:c3:d1:53:08:76:b8:00:8f:69:86:74:3f:21:dc:96:27:a4:
fb:d6:a7:41:b2:a6:41:02:11:60:5d:64:35:22:e9:23:95:7e:
87:d0:a6:4e:51:44:2a:48:49:2c:32:1d:d1:da:9f:0b:5e:35:
69:3d:9c:d5:4b:ee:c4:2e:46:43:d2:fa:c4:6e:90:45:a1:48:
01:6e:69:5b:c2:87:e9:f2:cf:92:00:96:e1:97:a5:4f:a8:e1:
cc:f0:ab:32:d7:b3:78:62:f4:91:e2:ac:a8:94:0d:c1:03:ef:
64:86:5e:25:d1:77:a7:0b:ba:79:0f:c1:ab:44:7d:41:93:af:
c9:ed:3c:10:1e:a4:53:b5:c3:84:13:18:32:61:2c:de:af:c6:
a6:df:a7:86:7c:8a:fc:61:e0:21:92:4d:cd:d6:0d:10:5b:80:
96:32:71:14:1b:01:13:f6:9f:09:b1:b6:44:d5:18:60:1d:97:
24:5d:99:0e:cc:ab:04:82:50:4a:0f:aa:7f:43:83:68:83:77:
e5:75:b4:b6:a6:57:3a:c5:aa:27:1b:cf:7c:61:5b:c8:d0:f5:
2b:ed:45:d2:e9:30:34:5c:d2:2c:fd:f2:ba:07:84:58:4a:8b:
3e:e0:09:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 23:05:05 2026 by rpki-client