
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa
File: b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa (raw, json)
Hash identifier: LtZgM1VnLcjUtAah2PZDNG+93deGAht/+QNMXU0woEA=
Subject key identifier: 99:6E:CD:93:72:D9:20:A9:60:92:BA:4F:00:46:F8:71:42:E4:15:CD
Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Certificate serial: 010D0C9F4328584D39CF8CF96CF9484FDE5FF700
Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa
Signing time: Fri 20 Mar 2026 01:00:32 +0000
ROA not before: Fri 20 Mar 2026 01:00:32 +0000
ROA not after: Thu 18 Jun 2026 01:00:32 +0000
asID: 60171
IP address blocks: 206.168.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:cf:8c:f9:6c:f9:48:4f:de:5f:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Validity
Not Before: Mar 20 01:00:32 2026 GMT
Not After : Jun 18 01:00:32 2026 GMT
Subject: CN=ae213db5-7eed-4396-88bb-a42f6f8a892e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:e5:04:2f:92:ba:b4:b1:b0:94:38:96:4f:
16:71:96:6c:38:b0:93:2c:07:b3:49:e2:23:a3:89:
ec:0f:fb:f4:e8:79:02:2e:57:2a:29:8e:16:c3:b7:
10:1a:0f:55:72:e6:0b:8c:87:f2:63:c0:27:a2:c2:
9f:17:b9:f4:50:02:d7:56:dd:eb:65:3c:30:e1:c7:
e1:0b:0f:4b:bb:1f:bc:d4:42:83:e0:3d:48:51:a2:
03:2d:31:1f:f0:8f:e7:44:6f:91:41:8c:f6:c5:6d:
c1:75:bc:ca:44:83:33:fd:ea:33:26:2e:f2:dd:c7:
67:82:3f:c3:bd:98:9d:10:cb:ea:bb:90:67:27:ce:
72:f0:ab:5b:75:68:cd:2c:a1:7b:fd:1d:20:33:87:
1c:b0:10:8f:4f:1f:93:aa:84:00:5e:83:9e:61:da:
2d:c3:e6:a2:de:4a:8e:bc:d9:81:ae:15:6d:8c:09:
60:97:7d:7c:06:af:4b:a8:7d:ce:31:dd:31:62:d9:
de:01:63:c1:19:a3:e1:64:32:ad:37:29:3a:d9:c4:
0c:56:96:56:09:12:90:c5:a6:b4:a1:60:3b:4e:4b:
2d:a6:5a:74:3a:53:71:59:2d:d5:1e:bd:28:db:72:
6c:0f:3e:3f:11:94:1a:2d:d6:35:c3:8f:03:20:7f:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6E:CD:93:72:D9:20:A9:60:92:BA:4F:00:46:F8:71:42:E4:15:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl
X509v3 Authority Key Identifier:
keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:2d:f6:4e:17:69:32:40:f7:00:19:63:d0:10:6f:6c:5b:77:
e5:c6:c4:bf:18:ed:dc:67:bf:b4:44:7f:13:ac:28:f2:85:ba:
6d:d8:4a:f2:c3:ff:fe:2e:d2:3c:3c:d5:7d:8b:5e:31:3c:7f:
03:16:57:d2:48:d7:41:d9:27:6c:13:16:e5:a8:d6:4d:25:89:
97:eb:a1:a2:0f:18:1e:88:dc:a8:10:66:93:e3:c6:fe:35:8b:
73:96:22:ef:92:e9:fa:1a:b9:27:4b:14:e4:c1:e5:b8:46:c8:
3c:3c:72:a8:4d:4d:19:18:17:5b:c8:db:55:5f:20:f9:51:57:
59:ff:22:df:fc:fc:5b:0f:a4:2e:28:dc:ff:1f:55:3d:ca:46:
11:ce:97:dc:f3:bb:24:5b:bc:7a:74:bc:53:52:0c:d6:19:4c:
f0:50:a4:d4:a0:4c:78:05:52:07:7e:cb:fb:d9:7c:50:0b:d8:
95:06:1f:9c:c6:54:4a:93:b7:53:47:2a:98:e9:27:5f:ac:21:
64:c1:d3:4b:ff:6b:9a:c9:e1:90:af:ec:12:40:19:61:5d:76:
8d:20:ac:c3:f0:c5:74:07:c3:d5:ab:bc:f9:12:70:b6:a1:a0:
0e:13:a5:44:97:2d:0a:c8:36:fa:ca:27:68:4c:93:61:b9:d2:
66:42:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 19:00:33 2026 by rpki-client