
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a17e37a9-8105-354a-83d2-cc268cf0dc57.roa
File: a17e37a9-8105-354a-83d2-cc268cf0dc57.roa (raw, json)
Hash identifier: Xs6nPXwGiGrpmwN3pturNMkhA37uEdUPY6/jxCZ/j5E=
Subject key identifier: D5:60:BF:35:42:3C:98:FD:74:04:A4:B4:01:5F:29:DB:CB:42:E3:85
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584D1F4A2143F5C186986787BA00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a17e37a9-8105-354a-83d2-cc268cf0dc57.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 11090
IP address blocks: 216.152.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:21:43:f5:c1:86:98:67:87:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=b7f594e5-3035-4937-9756-6c2a79503e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:7a:8f:14:25:40:a6:99:9d:22:11:ba:c1:
ec:6f:e7:27:23:67:f0:64:42:ee:37:67:19:cd:20:
15:5d:7a:ce:22:6d:d0:8a:0f:81:66:b2:8e:0d:d8:
0a:e3:7e:a0:0b:f0:2e:2c:e6:4d:00:83:fd:61:ea:
0d:98:fd:71:24:b9:97:15:91:88:a2:83:3d:f7:b5:
3e:8c:da:7c:94:e3:d7:c5:3e:a7:d3:fb:0a:45:ee:
5a:ec:72:35:cb:5a:c6:52:2b:eb:c8:09:e5:db:52:
17:6a:b0:8d:87:73:5c:c8:09:f4:65:81:84:14:f0:
e4:72:12:4a:42:ea:b1:ab:91:4a:9a:a5:a8:69:47:
f2:1a:e0:89:45:83:a3:ff:f6:8d:ca:cf:2a:c5:25:
db:20:f6:a0:a2:55:5a:8d:77:b6:9a:c7:e8:55:e1:
b1:60:37:27:81:e4:bb:0e:f0:d8:99:22:84:5f:e1:
d8:e5:5a:6e:4f:7f:81:42:58:ce:13:76:bc:31:f2:
0d:34:63:61:20:4e:3f:9f:e0:de:18:de:88:78:fa:
31:c7:2c:5e:f5:74:15:0f:f8:e9:d8:52:19:02:23:
45:47:91:ea:31:3b:c5:5c:90:c1:23:c9:58:83:85:
49:19:5b:19:e7:3a:19:b5:fb:a5:19:cc:d6:16:35:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:60:BF:35:42:3C:98:FD:74:04:A4:B4:01:5F:29:DB:CB:42:E3:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a17e37a9-8105-354a-83d2-cc268cf0dc57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.152.180.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:34:5a:d6:40:61:d6:9a:b0:46:2f:dd:eb:43:1e:97:f4:e4:
50:42:18:a3:a9:a1:f8:20:8a:15:55:76:6d:af:05:66:a2:c8:
bc:ac:88:84:1c:d5:86:90:21:24:1a:c0:99:2b:18:05:ea:f1:
25:09:ba:1a:cf:90:bc:41:c2:e4:6c:e0:d8:2a:65:98:fd:27:
b5:1c:cb:a1:f3:37:bb:53:e5:72:6d:b3:e3:c5:db:2c:20:72:
f6:19:94:76:69:c4:24:9b:c4:6b:6c:da:e4:63:70:e0:c2:ac:
fd:84:e7:39:7e:d1:1d:20:ea:53:29:de:73:6c:2b:69:08:1b:
9c:51:d3:3c:0b:ad:11:4b:af:5b:94:f2:a7:10:0a:2d:10:ad:
18:96:12:70:8f:86:92:4e:0a:e7:92:cd:c9:ea:a0:9f:99:d5:
eb:00:ea:4e:68:c9:26:a5:d6:e9:e8:c1:fc:27:25:a7:20:f0:
4a:91:da:03:f5:8e:39:28:5d:11:06:2d:e8:0b:0c:42:3e:d9:
d2:e3:ae:0c:2a:d1:d8:b4:bd:32:bc:48:1e:12:1e:c0:38:1c:
f0:6d:a8:40:f5:f3:64:ac:38:b2:f1:0d:75:29:05:3f:bb:7d:
18:3e:ec:c3:9a:9e:83:e0:9a:05:7d:09:06:48:1d:eb:b7:7c:
51:50:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:48 2026 by rpki-client