
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa
File: aa000e23-1120-334a-ad1d-5bf8f562f368.roa (raw, json)
Hash identifier: C0isNVwxy/34/CKx24OIvnNCKvqLoAUgApD9MBiGhF0=
Subject key identifier: E8:01:74:A4:CB:A7:42:BF:97:E3:01:0D:85:A3:CD:FB:5E:3D:DD:A6
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584DEDE093512A93664907B1E5A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa
Signing time: Sat 23 May 2026 13:00:31 +0000
ROA not before: Sat 23 May 2026 13:00:31 +0000
ROA not after: Fri 21 Aug 2026 13:00:31 +0000
asID: 21723
IP address blocks: 207.194.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ed:e0:93:51:2a:93:66:49:07:b1:e5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: May 23 13:00:31 2026 GMT
Not After : Aug 21 13:00:31 2026 GMT
Subject: CN=a104425b-6432-4ac0-9e7c-e33ea6e7a4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:8c:c9:c5:33:c9:1e:ee:01:15:c7:9d:c6:
9f:86:8b:a3:47:7a:e3:0f:4e:e9:e2:b1:f1:88:d6:
da:46:8b:d9:6a:c9:5d:ed:ba:16:67:a3:40:c0:44:
55:b2:5f:67:49:6b:60:06:5a:27:01:6a:bf:8a:db:
65:cb:7b:14:f6:0a:e3:cd:b8:67:23:18:6b:f3:8a:
a5:84:66:58:19:e2:d1:9a:cc:09:0d:55:7f:a3:6f:
16:67:2d:70:a8:41:00:ff:54:ed:7c:bf:68:93:2d:
06:37:72:33:b5:d1:cc:48:33:ed:0d:d5:c7:ab:c2:
11:41:9b:99:cf:32:95:17:58:e3:2a:d3:c7:2d:a4:
91:ee:39:33:a2:4a:03:0f:45:68:b2:38:2f:bd:4b:
1e:86:6b:6f:a6:a5:41:ae:72:b8:33:2b:f1:d2:7f:
1d:4a:a1:14:f1:6a:44:ad:d6:97:03:14:3d:3e:fd:
69:b8:98:0a:61:f3:e7:11:c5:67:46:39:bc:c7:fa:
e9:75:23:8d:c1:7a:85:87:c3:a2:47:48:be:eb:e6:
12:cd:40:5c:2d:19:ce:79:07:37:02:39:72:14:2c:
32:ab:b6:1a:ed:41:0f:5c:b8:cc:20:e4:02:31:a3:
af:0f:10:b0:b0:b1:24:3d:34:50:78:7c:ff:d4:e6:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:74:A4:CB:A7:42:BF:97:E3:01:0D:85:A3:CD:FB:5E:3D:DD:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.194.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:37:30:c0:76:7b:c5:e4:44:5d:56:2b:0c:28:f1:58:9b:1f:
d2:6b:ab:5b:8a:a6:42:5a:31:a5:ca:87:dc:96:d0:62:43:05:
82:d4:19:f2:d8:4e:5f:f5:b1:05:7c:01:f5:dc:ff:58:d9:65:
d0:14:24:65:2c:e7:06:c0:a9:28:bb:d6:95:86:04:15:fd:35:
7b:66:03:32:71:a9:ad:dd:33:3f:04:49:59:c5:9c:48:b4:b3:
07:67:53:81:bf:4f:eb:02:59:08:d6:0d:cb:93:b0:02:f2:06:
79:24:64:5f:e6:d5:55:02:69:44:a2:ef:3f:bc:3d:47:1d:9e:
e7:f8:ac:28:bb:40:f3:b0:de:36:5b:9e:24:6d:4e:22:07:a4:
b2:28:7a:04:65:29:db:18:49:66:05:10:f0:a3:7c:d8:35:b5:
70:ad:11:6a:5c:56:a4:7c:17:3c:2f:76:7e:8f:9f:d1:ce:a5:
d9:58:48:b7:8c:58:51:fd:ba:f6:ac:53:ca:3d:c8:60:35:eb:
d9:f1:99:43:fb:60:41:88:61:24:35:8a:a7:6a:1a:ca:42:19:
e3:f7:cf:2c:c1:15:26:02:c3:b0:09:83:a4:7c:a9:a5:03:3a:
01:4b:4d:3d:93:32:f6:d2:21:d5:92:97:54:80:8e:62:91:e2:
6d:1a:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:56:43 2026 by rpki-client