
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/d4870908-1a75-3a92-bcc7-0281d31bc642.roa
File: d4870908-1a75-3a92-bcc7-0281d31bc642.roa (raw, json)
Hash identifier: /qIedkzlhlutkKl+kid8BCQ6oXxB5JpzUAwIaRTG5Lw=
Subject key identifier: 73:3D:DC:4B:18:9B:90:45:38:E3:F9:2F:05:EC:36:F9:91:D9:F1:F7
Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
Certificate serial: 010D0C9F4328584D39CF7EFDE9C7FE865B9239A0
Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/d4870908-1a75-3a92-bcc7-0281d31bc642.roa
Signing time: Fri 20 Mar 2026 01:00:32 +0000
ROA not before: Fri 20 Mar 2026 01:00:32 +0000
ROA not after: Thu 18 Jun 2026 01:00:32 +0000
asID: 44431
IP address blocks: 204.8.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:cf:7e:fd:e9:c7:fe:86:5b:92:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
Validity
Not Before: Mar 20 01:00:32 2026 GMT
Not After : Jun 18 01:00:32 2026 GMT
Subject: CN=c9a9a97e-b4c0-42c9-8ca8-2b3d3b07844c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ad:8b:a2:b9:1a:72:37:2b:a8:b8:85:85:b4:
9b:80:fe:63:09:21:8a:3b:59:1c:77:24:5a:84:54:
b4:82:89:87:33:6c:50:84:b6:b5:71:8f:73:d8:89:
bf:71:ab:67:5a:13:f0:91:18:29:5c:60:39:06:dd:
64:06:47:11:b8:09:bd:70:c2:c0:73:a9:30:ba:0a:
4c:55:3d:fd:93:1e:c0:05:e2:5e:20:2e:18:f8:33:
bf:7d:fa:3c:47:d8:90:9a:1e:34:45:2a:cf:0f:8f:
15:a6:55:0b:99:3a:f1:36:16:04:1d:24:b6:ab:e2:
d4:5c:0f:4f:0c:8c:8a:f9:b4:47:70:b9:78:50:ec:
23:a3:cb:e5:40:9e:b7:fe:ed:1a:74:37:a0:0b:29:
99:3e:ec:13:9c:82:28:bd:aa:34:df:aa:48:c0:11:
6c:a1:ef:d8:43:55:16:e5:d6:fc:04:f8:ec:c8:bf:
3b:dc:79:04:9a:f3:41:fe:df:9e:50:c7:c2:36:6c:
b0:fb:b7:05:3b:fd:c8:82:6e:9e:1f:56:97:c4:5e:
97:40:42:d4:4c:11:cd:68:40:32:63:4c:1d:43:2a:
5c:d4:4e:c6:dc:3f:f0:43:41:f1:b7:ac:5c:6e:4e:
ea:e2:3e:65:33:27:08:87:60:10:c9:7c:82:2b:f2:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3D:DC:4B:18:9B:90:45:38:E3:F9:2F:05:EC:36:F9:91:D9:F1:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/d4870908-1a75-3a92-bcc7-0281d31bc642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl
X509v3 Authority Key Identifier:
keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ea:b2:95:8e:95:af:e3:44:9a:a6:a5:29:0e:c0:80:f7:a4:
55:5e:7a:3d:49:e5:41:19:e8:ae:ee:1c:24:b4:ef:cc:3f:a2:
80:9d:b7:4c:ee:85:38:7d:4e:27:46:0f:19:46:8f:03:e8:e5:
ba:32:5a:6a:dc:d3:0f:fe:e9:e3:17:95:83:02:23:3b:f1:51:
d5:01:7f:86:0c:b6:07:a5:ff:29:14:1a:fb:24:6c:82:82:66:
d0:42:d1:ef:95:57:24:e9:2c:2e:31:31:bf:00:0f:d7:97:1b:
1d:df:6a:b6:49:79:33:e4:97:3e:42:68:82:1b:e5:a8:d1:84:
11:71:69:71:6d:88:8e:9d:d1:25:fb:28:8b:0f:28:14:d9:ea:
77:4a:6a:ab:5b:cd:09:43:36:70:98:5f:8d:a2:bb:35:92:b6:
b7:00:1f:0e:0f:82:ee:87:7e:b5:07:6d:ad:c3:e5:f8:ce:81:
22:79:3a:fe:28:7b:fd:ca:82:cb:2a:1c:cd:81:49:2d:8c:66:
a1:cb:65:45:06:7d:68:bb:10:d5:d2:c9:54:9e:a2:a7:e3:19:
1e:47:39:dc:76:e2:d3:c4:2c:f9:1e:74:92:d5:0e:80:8d:bc:
05:91:98:10:31:2c:7e:dc:86:20:84:82:5a:b7:51:58:6b:ab:
76:89:ef:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 02:50:43 2026 by rpki-client