
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/8cba1fa4-0be2-3809-a7b1-b0e429b3b404.roa
File: 8cba1fa4-0be2-3809-a7b1-b0e429b3b404.roa (raw, json)
Hash identifier: 6vzmu2OQZTIeBHVbMks0w0diD+BfuKBcB9mTJ7v6EZ4=
Subject key identifier: 3D:20:89:42:A4:E4:C1:12:89:3E:08:DF:46:04:C8:17:FE:24:C0:14
Certificate issuer: /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial: 010D0C9F4328584D5884ECB6FB62888660EC0E90
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/8cba1fa4-0be2-3809-a7b1-b0e429b3b404.roa
Signing time: Tue 31 Mar 2026 01:00:23 +0000
ROA not before: Tue 31 Mar 2026 01:00:23 +0000
ROA not after: Mon 29 Jun 2026 01:00:23 +0000
asID: 10361
IP address blocks: 69.191.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:58:84:ec:b6:fb:62:88:86:60:ec:0e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
Validity
Not Before: Mar 31 01:00:23 2026 GMT
Not After : Jun 29 01:00:23 2026 GMT
Subject: CN=d438597d-73b3-458c-bb08-9c928a5d4c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:e8:55:74:4f:72:13:64:e8:ed:25:31:4d:
17:3b:67:17:02:05:ac:fe:23:8b:6c:ae:94:84:49:
eb:dc:28:b8:73:af:b3:f2:f7:a9:b9:41:da:b9:c4:
ce:f9:e6:89:ff:0c:6a:46:d8:41:d6:dc:1c:e7:e8:
d8:de:1c:92:d7:e3:3a:82:73:16:3c:d9:59:f3:4d:
3d:68:d5:ad:a4:0a:80:4b:06:9f:f3:05:60:4d:ce:
25:8e:b8:0e:56:4a:8d:62:8e:0f:cb:0a:45:4a:f4:
44:fb:10:09:11:e7:eb:37:7d:59:18:06:ce:4b:c0:
4d:77:c6:e9:b6:09:cc:2d:8f:fa:d7:50:b7:95:72:
76:93:0f:70:d5:51:6c:9d:0d:ed:e5:54:93:2b:a5:
b1:90:87:c2:9c:84:ee:ff:9f:ad:b1:02:68:1f:c0:
9f:f3:1b:af:49:96:bd:2d:f5:f8:bf:59:47:1a:d3:
59:51:4c:b7:69:de:d4:a7:2b:fd:b8:71:da:f4:de:
4d:d8:a3:ae:6d:78:f4:bc:86:88:b8:fd:7b:35:2c:
c3:32:3d:dd:11:b1:ff:d2:44:98:8c:a2:73:67:f9:
c7:7c:b4:98:0b:11:16:37:57:2f:45:e2:71:e8:f1:
e1:25:91:44:63:14:1a:14:10:35:60:46:e5:59:02:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:89:42:A4:E4:C1:12:89:3E:08:DF:46:04:C8:17:FE:24:C0:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/8cba1fa4-0be2-3809-a7b1-b0e429b3b404.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
X509v3 Authority Key Identifier:
keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
sbgp-ipAddrBlock: critical
IPv4:
69.191.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c8:c1:5f:8a:ac:0e:fc:29:9c:29:34:6e:20:03:48:d0:45:
f9:64:32:f6:93:76:59:b0:a1:54:93:99:83:71:17:27:f9:77:
98:38:cf:46:90:d3:eb:76:8f:11:67:a5:44:1a:23:69:16:09:
93:66:99:48:20:86:a8:65:b6:73:a3:56:2f:27:2b:4f:d5:2a:
20:81:32:d5:14:7f:90:64:eb:14:63:d8:14:82:0e:34:b6:ce:
fe:e5:8b:47:39:bf:ea:a7:69:b3:d2:cf:1a:eb:ed:1b:ab:d0:
ec:53:96:a2:db:67:ec:fc:c3:d2:72:4b:49:6d:ce:65:9a:eb:
cb:81:6e:be:df:5f:ce:6b:a3:8a:24:1f:51:b0:9c:3f:f8:12:
5a:13:27:4b:5c:1a:36:ba:97:bd:8f:4f:5b:c7:17:e2:97:1c:
c6:1d:51:67:ed:ab:84:b6:ed:78:a7:56:db:5b:35:7e:c1:91:
67:fd:90:80:46:dc:01:9a:d1:e7:e7:ef:12:d6:4b:c1:ba:67:
7c:79:b6:0d:6b:7c:af:00:d6:ac:f9:9c:98:5b:bc:fb:f0:5c:
d2:48:47:3e:74:d2:7a:f4:2e:2a:54:a4:08:c7:9f:66:1c:45:
ff:96:72:95:67:b2:02:35:39:cb:e1:25:4d:99:6d:39:90:d3:
7b:04:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:36:38 2026 by rpki-client