
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/02d40bb8-4508-3567-a427-7ee7452f2109.roa
File: 02d40bb8-4508-3567-a427-7ee7452f2109.roa (raw, json)
Hash identifier: Jwo6W9n8qfcYAlvq2OG5SVOlDbd3Wzp+mtquw9yLFN8=
Subject key identifier: 8E:31:2C:43:1A:07:7B:72:DA:16:BE:98:64:7E:B8:0E:14:60:C0:70
Certificate issuer: /CN=4dfb5f55-075f-43ce-963e-556b818f36b9
Certificate serial: 010D0C9F4328584DB96E7198FB20E34E86042260
Authority key identifier: 45:6C:9B:F0:49:63:EC:46:48:DE:07:6B:12:CE:37:8F:A7:25:CB:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/02d40bb8-4508-3567-a427-7ee7452f2109.roa
Signing time: Mon 04 May 2026 18:08:39 +0000
ROA not before: Mon 04 May 2026 18:08:39 +0000
ROA not after: Sun 02 Aug 2026 18:08:39 +0000
asID: 36689
IP address blocks: 216.146.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/4dfb5f55-075f-43ce-963e-556b818f36b9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/4dfb5f55-075f-43ce-963e-556b818f36b9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 09 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b9:6e:71:98:fb:20:e3:4e:86:04:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dfb5f55-075f-43ce-963e-556b818f36b9
Validity
Not Before: May 4 18:08:39 2026 GMT
Not After : Aug 2 18:08:39 2026 GMT
Subject: CN=0c98d209-bbeb-4170-b71c-59e1e30b08f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:f7:1d:b5:52:dd:b3:61:61:22:5d:52:6e:
51:40:c1:67:8a:01:02:59:60:6b:41:80:54:d4:8d:
2d:7f:c6:c2:7d:de:1c:21:72:3f:31:c2:8a:ea:d7:
eb:29:01:47:a3:e4:97:7a:9d:b1:88:6b:66:23:89:
c4:be:8c:1e:96:f9:ae:00:e3:85:78:e1:56:71:06:
b7:a7:21:20:97:e6:37:ce:32:86:31:04:36:15:d3:
41:67:c2:a6:4b:8f:31:3b:9c:db:2d:e8:cb:2d:44:
39:cb:99:d9:5c:5f:87:0f:01:ca:28:75:50:a4:b6:
9d:b2:a7:3f:58:7d:f7:89:53:1a:37:78:30:ff:e5:
cd:a6:6a:a6:35:16:f4:d4:4b:ef:18:6e:7e:7e:30:
7a:82:45:41:7a:2b:9c:20:51:48:af:18:eb:be:a9:
9f:9c:9d:49:05:8f:26:8e:bd:1f:61:88:22:7e:5a:
74:02:43:03:be:2e:cb:b7:fa:ba:97:54:b0:e6:ca:
49:0d:cf:c1:ca:1e:f1:61:b7:04:a9:05:2c:6e:38:
08:6e:45:66:03:d2:21:97:fe:14:0e:93:a3:db:18:
1a:ce:72:be:23:d7:74:ec:34:f1:03:81:44:5e:1a:
5b:c7:22:61:aa:63:ee:80:95:ea:2c:f1:ff:92:35:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:2C:43:1A:07:7B:72:DA:16:BE:98:64:7E:B8:0E:14:60:C0:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/02d40bb8-4508-3567-a427-7ee7452f2109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/4dfb5f55-075f-43ce-963e-556b818f36b9.crl
X509v3 Authority Key Identifier:
keyid:45:6C:9B:F0:49:63:EC:46:48:DE:07:6B:12:CE:37:8F:A7:25:CB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.146.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:c5:34:cd:61:20:54:64:71:06:21:c8:0a:ba:0a:0d:f1:43:
6a:c3:f3:09:8a:e5:de:98:0c:7e:4a:01:44:3a:f2:03:72:0b:
8b:24:72:ee:6a:2e:89:50:9e:96:4f:c7:1b:28:d8:ea:81:43:
57:32:a5:b2:80:a2:dd:07:56:a3:82:ab:5f:3f:51:ae:4a:b9:
68:b5:29:2b:51:e3:33:21:87:80:80:f6:26:a5:ca:4c:6f:f0:
6e:c6:25:2d:60:19:f6:09:b8:c2:64:7b:0c:47:99:c4:44:1a:
df:54:38:23:d7:d4:70:2e:fb:8c:57:21:26:02:94:e2:e5:c4:
5b:8a:f2:6b:6e:e6:8a:3b:43:36:98:0c:29:a9:f8:b5:c5:fa:
57:94:b2:53:b8:a0:49:e7:70:16:37:27:6b:13:0f:dd:08:62:
d8:24:68:01:22:7e:e1:52:7f:8e:e0:36:83:a9:b4:5b:28:02:
3f:71:a3:ff:ab:2a:f4:30:33:5f:d9:b0:a1:83:84:76:a1:8f:
6d:ed:6e:63:4d:6f:e9:71:26:e2:be:ef:43:ba:f8:a4:7d:84:
64:f3:f4:1b:c5:27:d1:69:b3:2a:59:ae:84:5b:3a:be:05:5e:
1a:23:b6:fe:ca:06:0c:e7:42:c7:94:0a:8a:56:7f:21:b3:03:
a5:cc:3c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:23:38 2026 by rpki-client