
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/33028ba9-27e2-3b38-90b7-315e62ccf89c.roa
File: 33028ba9-27e2-3b38-90b7-315e62ccf89c.roa (raw, json)
Hash identifier: T6tszMyjyfCz/VFXqZG58dnd1gtRaPPFVnv/cValuUs=
Subject key identifier: 28:6A:D1:3F:0F:5F:A5:27:D7:1C:8D:84:D4:26:C2:74:AB:43:34:BC
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F4328584D5243443E65B99873C428A280
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/33028ba9-27e2-3b38-90b7-315e62ccf89c.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 31915
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:44:3e:65:b9:98:73:c4:28:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=de6400f1-d4b0-4aac-8eac-885796c62f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:70:5a:5e:7c:e4:7c:fd:b5:8b:4a:1b:57:
a7:25:b6:cf:cb:84:f6:fa:fb:dc:2d:7f:d2:28:f0:
c1:d6:0e:3f:df:38:fa:73:ba:bc:88:aa:aa:d6:0c:
29:95:05:bf:65:d9:71:8a:80:b7:e3:63:ee:54:4a:
b3:da:13:54:25:9a:e1:82:a8:ed:fc:95:dd:10:da:
84:f9:ba:fb:0d:05:ce:21:ee:d0:95:13:46:b1:82:
21:b2:e8:9c:be:26:35:a9:05:58:2e:5b:4a:b9:a4:
f0:52:dc:29:4c:c7:b9:b2:d4:49:c9:94:77:3f:28:
90:84:d9:1f:98:45:29:17:06:16:17:16:a7:13:74:
8e:15:37:fc:f0:71:93:45:eb:b4:21:77:f8:34:af:
80:6a:51:58:f7:df:6e:27:96:c7:e4:b1:fc:a5:d7:
86:2f:b6:9d:57:47:8a:52:56:4c:6b:16:d5:44:88:
42:4d:dc:b8:93:7f:92:20:14:86:b7:ba:8b:b8:38:
96:29:ce:5c:70:06:f2:53:91:22:bb:b4:f5:79:5d:
37:8c:24:b0:eb:54:64:c1:67:ad:c7:f8:63:8d:17:
c2:67:d9:5c:1e:de:6e:8d:6e:7c:bd:2e:bc:8c:82:
9a:8c:e4:e3:87:6d:ac:6d:5a:fd:9c:59:64:cf:de:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:D1:3F:0F:5F:A5:27:D7:1C:8D:84:D4:26:C2:74:AB:43:34:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/33028ba9-27e2-3b38-90b7-315e62ccf89c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:44:49:cc:a2:91:03:82:78:70:f5:e6:d8:00:28:fc:ad:68:
8c:c0:db:b1:fc:9b:a5:87:67:f1:ab:26:f8:ad:4a:10:08:c8:
01:b3:42:88:f4:42:40:e4:ef:37:12:73:ba:04:bb:1a:1d:42:
d1:fe:ca:ef:5d:cf:37:c4:a7:fb:2f:30:d8:aa:84:77:5d:d9:
18:9c:ba:cb:ba:0a:4b:a2:fe:e1:70:04:63:74:72:e3:88:58:
00:05:cc:6c:1f:2c:bc:03:c0:d9:a2:03:05:26:bc:d1:8e:47:
8f:ab:fa:13:10:13:57:10:3f:65:43:32:be:bf:d9:bf:49:2e:
4f:a9:5d:d0:41:84:05:60:b1:b6:71:ec:20:ae:32:eb:bc:fd:
c9:f1:ee:ba:e8:40:e1:53:32:c8:23:ec:8a:02:12:df:c7:48:
e2:6b:40:0b:6a:fb:aa:1c:98:f2:fb:2a:f4:64:c2:2e:02:93:
34:d8:50:b6:ff:85:8b:10:ca:36:42:ef:3d:b8:81:8e:16:7a:
2a:b2:17:53:55:59:3c:dc:25:a6:2e:78:33:8b:5c:c0:5f:68:
a3:1a:ba:a4:94:de:3b:62:69:04:9e:82:bd:8a:e1:f3:e7:ca:
74:79:47:c9:11:6a:be:9e:e9:80:f3:09:be:85:91:7d:c4:ee:
d7:f4:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:33:08 2026 by rpki-client