
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3d9f7d87-912b-3360-96a8-18b5b46614c6.roa
File: 3d9f7d87-912b-3360-96a8-18b5b46614c6.roa (raw, json)
Hash identifier: Vra08YehwoEaDcymRhOO6HIPEbor/UGh1RHjKalw9ZY=
Subject key identifier: E6:2D:62:76:31:E8:94:F6:BD:CB:5C:16:96:FC:FD:36:DB:99:DA:2D
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F4328584E3D616FCDCABFEFB09CA40340
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3d9f7d87-912b-3360-96a8-18b5b46614c6.roa
Signing time: Sun 21 Jun 2026 00:29:09 +0000
ROA not before: Sun 21 Jun 2026 00:29:09 +0000
ROA not after: Sat 19 Sep 2026 00:29:09 +0000
asID: 834
IP address blocks: 216.83.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3d:61:6f:cd:ca:bf:ef:b0:9c:a4:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Jun 21 00:29:09 2026 GMT
Not After : Sep 19 00:29:09 2026 GMT
Subject: CN=b814eda5-27e0-4e4f-b0a7-58789eb2c6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:cf:e2:47:6b:ca:1f:fb:5b:76:c1:88:3f:
ea:20:7d:1d:42:a3:13:ed:eb:a9:ee:db:c3:6f:43:
a9:70:3c:96:61:21:a6:c0:93:44:67:ba:63:db:cd:
e8:4f:03:83:e2:27:4a:95:ee:95:c9:df:09:bf:65:
c2:e8:5a:52:c2:3d:b7:04:3c:01:ad:e1:4c:0e:09:
44:d7:0e:03:99:6f:fe:1f:00:32:66:cb:e4:f6:85:
c3:9f:0c:cc:e9:51:f9:9b:d7:e8:db:36:ba:e4:8e:
bc:56:96:12:38:72:4e:fc:fc:88:e0:f4:23:78:82:
78:51:e6:4d:e8:2a:2d:59:95:7d:4b:61:8d:60:42:
f0:e1:f7:1c:6e:a3:2a:6f:80:05:93:d5:f1:18:ed:
44:d5:00:05:fa:07:3e:f2:35:49:24:c8:e3:32:72:
81:b8:52:64:64:6e:2e:13:7e:59:cb:f3:00:f8:ba:
de:ea:58:c1:82:08:12:e3:4a:84:ac:35:0f:32:e2:
84:52:11:a8:2e:30:c9:51:55:9e:b2:43:1d:31:60:
92:97:81:91:63:47:fb:70:5a:9e:06:03:32:6f:5a:
4d:55:d0:c7:15:0c:1c:78:9e:54:97:91:fd:35:76:
90:94:f7:f9:69:38:e0:41:28:07:a2:28:a8:34:5d:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:62:76:31:E8:94:F6:BD:CB:5C:16:96:FC:FD:36:DB:99:DA:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3d9f7d87-912b-3360-96a8-18b5b46614c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.83.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:eb:64:04:11:e8:ea:d4:13:4e:3b:b1:03:e6:3b:42:f0:cd:
54:ea:66:bf:5e:a6:e4:7e:cc:ba:b6:11:3c:11:21:27:c0:bf:
11:83:5b:fa:b8:2b:a6:c3:a4:bb:57:83:ed:0c:d6:47:12:9c:
6f:c3:48:5a:e4:f9:bd:79:a3:45:7e:a1:6a:26:33:0b:b4:a9:
64:4c:2d:9b:78:7c:fd:63:82:37:e0:70:13:b4:50:24:78:ca:
a7:46:09:23:bd:9c:ab:19:58:6d:d5:b5:25:5e:37:1a:8b:b6:
a4:32:00:b0:33:71:9f:da:86:41:ed:d8:ed:88:fa:53:3a:34:
af:b5:30:58:d8:e8:03:a4:db:14:f1:94:f1:98:f7:3e:6f:51:
f4:b8:84:49:08:c1:fc:d5:fd:55:be:07:5a:1a:06:6a:04:30:
87:34:ab:95:63:24:72:22:35:42:d2:13:13:31:6c:f2:47:ff:
a6:00:fb:c3:2b:e6:42:d3:56:d3:2e:f1:23:0c:48:0e:b6:9c:
fd:d6:b9:4a:af:a6:ce:cc:00:5f:34:8b:f7:30:11:c6:78:e8:
fb:ea:56:ea:88:39:ad:0e:0a:5e:ea:0d:bd:e0:5c:f1:eb:49:
5b:50:b8:29:0b:ff:ed:66:e1:0d:ba:e3:a7:a7:0c:19:3d:7d:
ef:9c:fe:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE49YW/Nyr/vsJykA0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI2MDYyMTAwMjkwOVoXDTI2MDkxOTAwMjkwOVowLzEtMCsGA1UEAxMk
YjgxNGVkYTUtMjdlMC00ZTRmLWIwYTctNTg3ODllYjJjNmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1vP4kdryh/7W3bBiD/qIH0dQqMT7eup7tvD
b0OpcDyWYSGmwJNEZ7pj283oTwOD4idKle6Vyd8Jv2XC6FpSwj23BDwBreFMDglE
1w4DmW/+HwAyZsvk9oXDnwzM6VH5m9fo2za65I68VpYSOHJO/PyI4PQjeIJ4UeZN
6CotWZV9S2GNYELw4fccbqMqb4AFk9XxGO1E1QAF+gc+8jVJJMjjMnKBuFJkZG4u
E35Zy/MA+Lre6ljBgggS40qErDUPMuKEUhGoLjDJUVWeskMdMWCSl4GRY0f7cFqe
BgMyb1pNVdDHFQwceJ5Ul5H9NXaQlPf5aTjgQSgHoiioNF2OEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOYtYnYx6JT2vctcFpb8/TbbmdotMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2Q5ZjdkODctOTEyYi0z
MzYwLTk2YTgtMThiNWI0NjYxNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FMwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLrZAQR6OrUE047sQPmO0LwzVTqZr9epuR+zLq2ETwRISfAvxGDW/q4
K6bDpLtXg+0M1kcSnG/DSFrk+b15o0V+oWomMwu0qWRMLZt4fP1jgjfgcBO0UCR4
yqdGCSO9nKsZWG3VtSVeNxqLtqQyALAzcZ/ahkHt2O2I+lM6NK+1MFjY6AOk2xTx
lPGY9z5vUfS4hEkIwfzV/VW+B1oaBmoEMIc0q5VjJHIiNULSExMxbPJH/6YA+8Mr
5kLTVtMu8SMMSA62nP3WuUqvps7MAF80i/cwEcZ46PvqVuqIOa0OCl7qDb3gXPHr
SVtQuCkL/+1m4Q2646enDBk9fe+c/jA=
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:29 2026 by rpki-client