
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/2438f1b4-a9d1-362c-914b-f7b5974524cc.roa
File: 2438f1b4-a9d1-362c-914b-f7b5974524cc.roa (raw, json)
Hash identifier: zcLx+5J52g2LWDqruL9Vmue8bfEBr7GeKU+Cw/F6Zjc=
Subject key identifier: F8:1C:20:9B:7E:11:EC:1A:B0:22:90:61:45:83:DF:53:D4:58:F7:F3
Certificate issuer: /CN=df247d2f-5f6f-414c-b8c9-181359f105bf
Certificate serial: 010D0C9F4328584EC63C6F32B8B47FF538FD40A0
Authority key identifier: 03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/2438f1b4-a9d1-362c-914b-f7b5974524cc.roa
Signing time: Sun 09 Aug 2026 01:00:12 +0000
ROA not before: Sun 09 Aug 2026 01:00:12 +0000
ROA not after: Sat 07 Nov 2026 02:00:12 +0000
asID: 13855
IP address blocks: 168.203.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c6:3c:6f:32:b8:b4:7f:f5:38:fd:40:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df247d2f-5f6f-414c-b8c9-181359f105bf
Validity
Not Before: Aug 9 01:00:12 2026 GMT
Not After : Nov 7 02:00:12 2026 GMT
Subject: CN=d3221c3d-8ebd-4cbf-b4ec-9fb125c26cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:aa:dc:f5:ed:3f:73:a5:24:aa:98:82:e5:
62:0b:ba:4f:8b:28:da:eb:43:96:fa:1b:70:3d:d1:
3d:cd:ba:49:0d:86:97:28:33:a7:0d:0f:32:ef:25:
4f:05:6b:45:e6:14:7f:02:78:7b:61:75:ad:e0:67:
a7:44:24:04:b6:5b:d9:0d:df:a4:e8:5f:4b:d1:6c:
8e:9b:d3:e7:20:9f:b4:97:ab:45:ef:22:37:33:4c:
82:53:d9:9d:dd:05:66:11:e6:a2:82:e0:b5:99:b3:
9c:f0:9f:e6:a9:d7:88:94:71:d2:9c:2a:d2:4d:29:
ce:ef:dc:39:62:94:f8:88:69:85:a2:1c:b6:d8:cf:
56:f3:e6:86:65:6e:1e:98:01:50:dc:60:9e:1e:9f:
2b:93:8b:6b:f6:e6:47:21:49:21:3d:8f:3a:e2:67:
00:50:14:56:e6:3d:9e:75:08:96:d4:1a:94:85:87:
a0:32:5b:bd:76:ff:1a:27:db:75:8f:a5:98:cb:50:
54:3c:29:56:1b:24:b7:69:0b:88:c1:1d:05:30:c8:
22:9a:da:60:24:48:dc:7f:ba:a9:99:2c:71:70:0c:
fe:29:b2:79:70:71:98:dd:bf:b2:25:d8:a4:71:bf:
4c:26:b8:db:a6:c8:52:2e:69:d4:24:d7:65:49:f0:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1C:20:9B:7E:11:EC:1A:B0:22:90:61:45:83:DF:53:D4:58:F7:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/2438f1b4-a9d1-362c-914b-f7b5974524cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.crl
X509v3 Authority Key Identifier:
keyid:03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
sbgp-ipAddrBlock: critical
IPv4:
168.203.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:2b:b8:f8:10:71:c8:91:9b:ad:89:cb:b1:66:3e:54:37:5d:
7e:e8:7a:11:09:bf:29:13:61:6f:5d:dd:e2:e1:8c:52:05:55:
06:23:00:75:0d:c2:12:ca:3f:9f:63:d4:91:4c:41:da:bc:07:
70:77:6c:49:e6:b6:43:33:cd:7d:14:95:b3:63:7c:49:dc:a7:
36:e1:d1:f6:cb:e3:b0:ff:0a:ee:2f:40:18:e2:bc:e5:0a:4b:
2e:08:c1:57:e1:ad:f8:42:50:d5:cc:52:67:a7:35:51:5d:8d:
b8:6c:b3:6c:c1:f9:a3:2a:d7:89:ae:63:39:52:18:da:fe:d9:
0b:d2:de:71:a1:27:48:95:07:d0:f4:c9:da:88:b8:ce:53:18:
2d:59:32:d1:d6:1b:dd:54:52:cd:f6:b6:b8:2b:f6:26:d1:e9:
84:77:7b:b2:82:24:58:bb:95:91:81:5d:b8:e0:8c:97:a8:a0:
7b:ca:09:83:a0:d5:26:72:8b:7c:28:9e:0e:03:03:90:79:cc:
fe:0c:2b:af:8d:47:1f:19:3e:df:48:0d:e5:72:47:0f:f4:d1:
f5:58:26:63:5d:93:7f:ab:c5:e0:16:86:5c:8e:1f:15:32:a5:
60:8a:d0:19:a5:13:dc:60:ec:58:a5:e5:b7:9d:7b:3a:64:38:
79:29:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:29:29 2026 by rpki-client