
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa
File: cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa (raw, json)
Hash identifier: jaRjtI4fL3Uvt29Aj0xCAsGip71wrpiSInpnNzHg/eo=
Subject key identifier: 65:FD:3D:A7:45:5F:41:A3:01:0D:05:CB:0C:E4:BA:25:58:60:A7:3F
Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial: 010D0C9F4328584E059B31FABCE7219869BA0BC0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 14813
IP address blocks: 72.22.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 09 Jun 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:31:fa:bc:e7:21:98:69:ba:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=396f99c9-69d3-4ce7-b8f0-8ed831d87e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e5:93:ed:9c:27:09:58:27:49:ad:e3:bb:1a:
7b:59:95:dc:2b:00:0f:4c:bc:da:fb:c1:59:9b:d4:
96:3f:d7:b1:cb:d0:fb:62:fb:62:89:f6:33:56:8b:
cc:98:ef:84:4a:c2:49:d9:14:df:b3:b7:3c:14:04:
07:ea:fc:df:f8:71:99:b2:24:de:36:56:86:f4:89:
02:4e:f0:5f:47:73:ce:73:43:40:d3:20:62:6c:4b:
f2:30:fc:28:fd:1d:ae:da:e8:4b:f4:00:4e:cb:10:
39:da:2d:f9:da:4d:4a:e6:31:21:09:69:13:ec:0d:
83:06:de:15:a0:a3:4e:2a:11:c3:99:59:4d:be:fa:
e2:f5:44:ce:e6:1a:30:7f:77:d0:b3:07:1b:e0:4e:
0e:4e:f8:21:ca:d0:b5:a3:ae:ca:0e:f1:72:d8:46:
7f:37:f0:65:a3:69:a1:5a:ca:f9:a7:04:af:72:87:
6d:8b:36:38:78:2f:f8:ec:a2:e5:c9:c5:a9:15:d1:
ea:00:bf:14:20:01:d7:a9:d2:5c:cc:2a:3c:ed:28:
74:9c:f4:27:92:ad:60:0c:b9:eb:32:78:41:62:d9:
2f:52:46:b1:a7:b6:8e:07:1d:8a:97:b0:17:85:eb:
38:fc:63:79:ef:62:9c:ea:c2:a7:d1:9b:ab:30:22:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FD:3D:A7:45:5F:41:A3:01:0D:05:CB:0C:E4:BA:25:58:60:A7:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
X509v3 Authority Key Identifier:
keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:44:be:99:93:05:69:f6:32:eb:29:c7:d5:d5:b0:74:85:1c:
48:bf:7c:26:08:d6:28:7b:e4:5e:a9:5b:38:12:66:66:b2:b9:
cc:ff:fd:ee:ef:91:22:fe:28:f1:ae:01:1c:e3:7d:d2:90:db:
e8:d4:f2:14:01:52:fc:30:6a:49:0d:d4:11:9d:57:3e:5f:2d:
a0:d0:9a:4c:2e:82:2b:96:cf:14:29:19:74:19:62:02:b1:74:
de:69:ca:94:29:d6:74:5a:9b:34:a3:e0:18:19:fb:89:8a:77:
45:3b:22:b8:4e:ef:ed:7f:ed:a0:26:a1:18:ee:14:8d:e0:ad:
47:2d:b6:dd:f2:1c:40:f7:fd:03:25:00:b7:d7:fb:49:62:03:
60:aa:1f:f1:a6:22:1e:36:17:99:8c:38:9d:29:38:74:68:20:
d0:eb:74:74:6e:41:95:40:48:4d:16:47:92:cd:82:9b:56:9e:
fb:be:ff:6c:61:f4:0d:f9:cb:24:c5:81:94:27:2c:74:94:6b:
ab:4a:c4:22:c7:8f:46:54:a7:3d:5b:ca:3b:56:17:b0:4a:66:
fb:0a:5b:37:31:f1:02:bf:3f:21:8c:df:8a:53:e8:9b:aa:50:
63:a9:e1:d4:87:36:04:30:af:1a:0c:e7:b7:55:ab:b9:f4:0a:
6a:8a:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:03:42 2026 by rpki-client