
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/109ccb9e-fb44-316e-a340-79fc628dfe21.roa
File: 109ccb9e-fb44-316e-a340-79fc628dfe21.roa (raw, json)
Hash identifier: qc9lyLwIQq4mQv63vSztZ/zL+xkS3ijJl70DdR9STPo=
Subject key identifier: 25:3D:F5:DF:88:90:33:0D:95:41:7A:74:B7:C0:D5:F1:D0:67:10:56
Certificate issuer: /CN=12e662f6-4810-4bf7-8722-8635fb0c7747
Certificate serial: 010D0C9F4328584E6144B240ADBBC05295D98600
Authority key identifier: 60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/109ccb9e-fb44-316e-a340-79fc628dfe21.roa
Signing time: Fri 03 Jul 2026 21:00:11 +0000
ROA not before: Fri 03 Jul 2026 21:00:11 +0000
ROA not after: Thu 01 Oct 2026 21:00:11 +0000
asID: 33403
IP address blocks: 128.254.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:61:44:b2:40:ad:bb:c0:52:95:d9:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12e662f6-4810-4bf7-8722-8635fb0c7747
Validity
Not Before: Jul 3 21:00:11 2026 GMT
Not After : Oct 1 21:00:11 2026 GMT
Subject: CN=6df2ef34-a7c1-4cc8-8527-1afe6f13f7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:f0:e6:55:ba:6d:83:19:9e:84:8e:f9:5b:
e5:90:a2:20:18:54:1a:b8:be:90:43:18:1f:e3:41:
66:2e:e8:9e:3b:7b:45:e6:27:6f:be:c4:9d:69:ad:
cc:8b:a4:b0:72:04:99:99:d7:f2:62:16:1b:fd:f7:
57:59:ff:82:01:68:8d:4d:3d:7c:36:04:11:77:60:
68:aa:e4:73:c1:61:01:cd:bd:48:14:1f:5a:d5:dd:
25:ff:7a:3d:56:29:70:6c:b2:16:c5:c5:bf:c3:6f:
b6:ad:0c:e9:61:2e:7e:4f:27:f2:51:61:ea:51:48:
72:b2:f5:38:a5:55:df:24:a7:56:01:fa:0e:f1:57:
28:c2:5a:b2:35:08:e0:c4:41:45:07:c0:62:82:9a:
4b:0b:79:83:2b:8f:e0:a7:55:17:26:55:31:21:0a:
a7:c7:e3:3d:e0:fa:07:93:49:2b:55:0a:19:d7:ac:
05:98:5b:c6:8c:b4:f4:e3:8f:87:88:91:b4:de:9a:
dc:52:47:45:43:f0:e5:02:d1:95:c9:0b:b3:40:c8:
d4:c1:da:c8:3d:83:a9:25:57:5c:c6:cc:c6:2e:e3:
ef:25:a0:d5:06:62:f2:14:48:79:25:ac:53:6b:15:
39:57:e3:3a:1a:26:83:5d:1f:eb:32:9f:f8:c2:1d:
dc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3D:F5:DF:88:90:33:0D:95:41:7A:74:B7:C0:D5:F1:D0:67:10:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/109ccb9e-fb44-316e-a340-79fc628dfe21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.crl
X509v3 Authority Key Identifier:
keyid:60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:c3:17:65:a8:71:1a:c4:a1:e0:a9:ea:60:c7:ba:26:a9:c6:
e5:07:8e:ab:d6:ca:17:69:d3:37:c1:84:1a:f7:7c:b4:2e:59:
64:6b:7a:35:cb:75:14:0a:79:64:ee:34:11:89:1c:fd:35:8c:
ff:d8:5f:e0:09:7c:77:e9:a4:f4:74:1b:3b:cf:92:90:37:77:
9a:43:76:02:f1:cd:bd:ec:f7:a8:e1:53:28:2d:1f:21:42:c6:
f4:a3:88:5c:04:17:04:c4:90:cb:50:83:34:31:c5:27:3a:5b:
33:6d:29:ae:17:0a:76:af:be:77:ec:f3:3a:b9:9d:4e:ab:06:
e0:1d:a1:a5:11:2e:dc:b4:70:7a:80:38:da:96:20:e2:8a:c9:
3e:e5:df:ff:45:72:ec:a7:23:b5:57:ca:f1:8a:08:d4:34:aa:
42:7a:7f:27:43:e2:bb:5a:ba:89:88:6c:db:5a:44:6e:96:cf:
66:51:8e:73:c1:2d:de:87:a1:6a:9c:8d:1c:bf:b7:85:35:65:
82:bd:a5:7c:da:80:72:6e:c0:80:b3:e2:79:de:9f:be:ab:0c:
81:5f:7f:63:f2:17:8a:62:9b:5b:aa:7b:36:72:b0:ec:c8:f0:
39:f5:e7:42:18:55:cf:9b:6b:dd:dd:26:38:8c:92:e4:f6:57:
a6:72:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:51:47 2026 by rpki-client