
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa
File: 3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa (raw, json)
Hash identifier: EkEbJSsD8Kd7XqdwYdnDjdHEFG2OmStSljCcAuwZz6Q=
Subject key identifier: 00:0E:63:63:AF:6D:90:D7:A4:8D:13:14:CD:91:15:46:47:B8:97:4E
Certificate issuer: /CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Certificate serial: 010D0C9F4328584E4129D0202BC7E568165C8C80
Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa
Signing time: Mon 22 Jun 2026 09:00:11 +0000
ROA not before: Mon 22 Jun 2026 09:00:11 +0000
ROA not after: Sun 20 Sep 2026 09:00:11 +0000
asID: 19331
IP address blocks: 149.149.0.0/16 maxlen: 29
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 23 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:41:29:d0:20:2b:c7:e5:68:16:5c:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Validity
Not Before: Jun 22 09:00:11 2026 GMT
Not After : Sep 20 09:00:11 2026 GMT
Subject: CN=17494c33-5456-4b80-a610-82af5f9abefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:be:03:0a:6e:a5:b4:43:78:16:32:5d:a6:e3:
03:43:98:86:96:34:91:4c:42:a5:d3:d4:9b:bb:1d:
76:c4:e9:9d:b1:6d:55:1e:45:a0:24:ff:dc:35:6b:
13:89:e7:a4:3c:65:43:a7:5d:e5:f4:1e:14:87:aa:
99:f0:56:56:2b:f3:98:dc:fe:29:04:2d:68:39:6d:
2c:a2:ef:6a:7b:39:07:4b:58:fa:27:1f:47:15:e7:
9a:9d:ac:e1:d8:d5:47:80:2f:38:ea:41:d3:cd:22:
01:c6:b3:39:4f:6d:d2:11:36:84:a3:37:10:a0:9a:
a4:b7:84:cc:7f:32:bc:1a:61:d6:bc:8e:64:d0:c8:
47:de:ca:4a:ca:d7:3f:23:6d:81:14:23:1c:b5:10:
da:1c:93:7b:36:d8:5d:27:aa:a9:2d:16:14:97:44:
bf:ab:84:32:5d:0e:15:a9:8a:64:fd:0e:d4:21:2f:
9f:db:99:36:1d:e4:fc:85:2b:4c:16:c7:d8:6c:04:
c5:7f:50:f8:e6:32:ed:26:9f:39:5a:bf:f4:e1:d7:
6e:d0:b9:97:90:d3:fe:c0:8f:5c:2b:f9:9f:45:05:
89:14:52:c7:9a:df:c9:03:62:61:42:82:3f:14:31:
9a:e4:cf:6b:34:b6:27:cf:0e:33:df:5b:7c:32:2d:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0E:63:63:AF:6D:90:D7:A4:8D:13:14:CD:91:15:46:47:B8:97:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/3f35fd67-5df2-3eaa-ab48-10f5762d0aa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
X509v3 Authority Key Identifier:
keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
sbgp-ipAddrBlock: critical
IPv4:
149.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:1c:fc:5f:10:ee:90:9c:42:fc:12:af:b2:d4:20:b9:d3:76:
f6:4c:ed:bf:f7:dc:ee:4a:2d:98:d6:fa:77:5c:97:f2:2a:59:
ec:47:ac:83:4d:81:73:3f:f6:ae:b0:99:fa:3b:d1:f9:dc:e4:
69:a1:9e:84:0a:a5:3a:60:e2:14:f9:b6:60:94:d1:20:44:cf:
fd:05:85:7d:cd:17:ea:ef:db:6b:41:28:55:16:e3:11:4c:f0:
8a:2c:b5:35:97:03:e0:7d:75:a2:ca:00:0d:e5:c3:5b:dc:cf:
36:6f:d2:4d:37:37:5e:07:f5:46:dc:c3:0c:28:08:0c:b5:86:
1a:17:06:df:23:8e:e1:3f:91:1b:6c:1b:04:d7:af:5b:4a:70:
e3:31:da:c1:be:a0:5b:e6:b9:fe:5e:ed:c5:18:8e:e7:e6:f7:
07:0c:00:61:b9:63:d9:d9:8e:54:de:2c:9f:b7:bb:f5:75:04:
c7:20:28:e9:75:c4:dd:1a:0d:36:84:ff:85:dc:54:1f:0f:e4:
d7:2c:2d:5e:70:a6:29:82:12:d8:c8:ca:66:3b:cc:5c:6c:b8:
6a:f9:a1:02:be:71:87:da:58:2e:ee:61:5d:d5:c7:5e:1a:1e:
a1:0e:94:d6:ad:da:fb:51:69:ff:d4:a3:f5:62:c5:d0:b1:6f:
48:2b:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 11:09:50 2026 by rpki-client