
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa
File: b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa (raw, json)
Hash identifier: yM9S1KicT+NuHd8Tmq54kPo9SVqzZeOaO/gg+9BP9kI=
Subject key identifier: 33:81:D7:B4:30:EC:1B:48:CC:E6:3B:73:8E:1B:8A:4B:7C:30:38:12
Certificate issuer: /CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
Certificate serial: 010D0C9F4328584DA6B02384C8D2647CB4A08580
Authority key identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa
Signing time: Tue 28 Apr 2026 01:00:24 +0000
ROA not before: Tue 28 Apr 2026 01:00:24 +0000
ROA not after: Mon 27 Jul 2026 01:00:24 +0000
asID: 53823
IP address blocks: 198.15.0.0/21 maxlen: 21
209.172.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 02 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:b0:23:84:c8:d2:64:7c:b4:a0:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
Validity
Not Before: Apr 28 01:00:24 2026 GMT
Not After : Jul 27 01:00:24 2026 GMT
Subject: CN=f8ab6ab8-e011-4a15-8ab5-2e863567e428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3b:6a:54:c3:47:81:77:bf:a5:75:a8:d3:66:
bd:02:b9:88:9a:26:86:5c:09:c9:25:d6:c3:57:2d:
14:20:98:73:c8:c9:0a:f8:d9:c2:53:ec:f0:1b:ef:
69:4f:cb:e4:2e:90:c3:97:52:5d:ad:dd:f0:70:1a:
f0:46:75:48:0d:0a:b5:9e:ce:8d:cd:e6:5b:be:74:
23:0c:d9:b4:db:ec:7b:51:a7:c1:1a:93:07:c1:29:
38:24:c4:0c:80:25:4c:f1:17:92:4b:b4:74:7d:5f:
58:f2:2a:94:83:73:61:bb:31:78:34:f2:76:52:ab:
98:eb:35:21:c6:6f:ad:e5:c0:8b:62:f9:38:a7:9a:
1f:79:4e:9a:c7:5b:30:af:70:c9:c1:58:c4:64:d8:
1a:fd:57:68:13:9e:bf:eb:20:c4:53:b7:8b:18:99:
71:ec:32:30:7c:6d:b2:9f:43:d6:87:31:28:f5:62:
ad:65:92:48:ef:ac:92:d7:e5:e9:24:56:9b:4f:6f:
c0:83:2e:01:01:66:89:39:d8:af:9a:ef:34:71:b0:
8c:ea:23:88:08:19:8e:e9:46:4c:91:c5:59:68:86:
3c:3c:6c:51:22:e5:b9:d2:72:a7:a8:65:84:28:4f:
c6:1b:ed:6f:93:e8:65:e7:43:00:f6:e8:2d:0f:b2:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:D7:B4:30:EC:1B:48:CC:E6:3B:73:8E:1B:8A:4B:7C:30:38:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl
X509v3 Authority Key Identifier:
keyid:7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
sbgp-ipAddrBlock: critical
IPv4:
198.15.0.0/21
209.172.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:cc:c3:62:b1:87:64:ff:e5:d8:fd:6f:bc:3a:16:a5:63:67:
5d:ad:32:39:52:96:7b:28:56:9a:83:38:f3:3b:f3:33:1d:6d:
77:0b:8f:e5:e9:0a:9c:a9:29:f7:5b:36:d4:69:46:34:93:85:
a8:5d:8e:6c:3d:99:5f:31:43:8a:96:25:65:46:5c:f3:a5:36:
87:6e:be:ba:25:04:38:0f:80:2a:45:de:b5:72:3c:75:f6:56:
a0:90:eb:4d:aa:77:07:a9:79:a5:5a:db:cf:e2:30:79:79:c2:
40:6d:67:06:cb:88:71:63:0d:09:41:cc:3b:68:f4:f3:3b:f7:
62:35:7c:04:bc:65:35:ae:a1:07:fc:2e:19:e7:ad:61:ab:64:
f0:04:47:88:c9:26:53:31:31:c8:8d:e1:39:ab:62:ad:14:39:
68:82:aa:e7:0e:36:0d:27:0f:1a:e9:52:f2:3b:f7:8c:6e:96:
ce:78:17:40:26:9f:59:e3:5e:6b:cb:b5:24:e1:84:56:43:a0:
cf:6b:c2:72:88:0a:82:6c:79:61:cb:b0:39:6c:dc:b4:fa:6d:
9d:0f:4f:eb:1b:8d:19:98:a5:3c:67:ed:a8:aa:da:0e:a1:57:
c6:22:28:75:d0:eb:e4:d4:5b:73:22:8b:37:69:02:ea:a9:e4:
6b:5d:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:02:54 2026 by rpki-client