
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/0648fe06-21be-31a4-993e-e994e731c5cf.roa
File: 0648fe06-21be-31a4-993e-e994e731c5cf.roa (raw, json)
Hash identifier: 7KOhhbl6jl4yWZidOM8ZeTexqQnlANH4x5LMoPeK3d0=
Subject key identifier: 27:17:B4:17:8E:17:8F:71:DA:16:76:62:86:F0:CC:C7:D0:6E:73:03
Certificate issuer: /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial: 010D0C9F4328584D2B7036049400AA4762BBB160
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/0648fe06-21be-31a4-993e-e994e731c5cf.roa
Signing time: Sat 14 Mar 2026 21:27:25 +0000
ROA not before: Sat 14 Mar 2026 21:27:25 +0000
ROA not after: Fri 12 Jun 2026 21:27:25 +0000
asID: 19695
IP address blocks: 169.197.160.0/22 maxlen: 22
208.65.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 18 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:70:36:04:94:00:aa:47:62:bb:b1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
Validity
Not Before: Mar 14 21:27:25 2026 GMT
Not After : Jun 12 21:27:25 2026 GMT
Subject: CN=d0c630bc-e22a-4855-97b4-19a68a11b0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:92:ed:82:f3:6c:20:ab:38:96:1a:6a:54:
52:08:67:76:d7:98:ed:c0:6b:60:c9:cd:f4:be:8b:
fe:1a:c5:bb:af:15:d6:bd:b0:1e:c6:81:09:69:ce:
b5:33:af:39:b6:7d:f0:df:55:7a:35:93:8f:f0:24:
ba:fa:36:a4:69:f1:8d:29:49:63:e7:b2:74:b3:be:
8e:0e:89:00:5f:1a:86:d6:35:38:9d:a6:08:e8:77:
9a:62:fd:4c:8b:0f:58:ce:9f:bd:cf:8e:f0:4f:f7:
a4:50:5c:01:c8:69:f0:22:ae:05:1b:dd:ee:8b:cb:
5c:8f:93:2b:a4:d4:d3:57:48:0b:08:dd:8b:6c:21:
50:3e:13:11:2a:38:e2:96:3e:5e:84:70:4f:1d:86:
fe:b9:25:64:aa:eb:0a:5a:5c:c7:9c:90:54:a3:be:
ad:2d:3a:f5:2f:a0:8f:db:36:c3:49:12:e6:91:6d:
63:fc:38:6b:07:04:1a:76:8b:2e:7e:df:be:41:9b:
70:c9:6c:2c:7b:10:09:c6:1a:55:fb:d2:0c:28:42:
d8:82:1c:fb:14:9c:6b:4a:7e:ff:8f:84:4d:0a:b1:
88:cd:8c:ca:ae:a6:15:cf:37:5b:7f:eb:52:f0:c1:
a6:d4:de:e7:eb:c4:d6:57:5e:f4:be:1c:d5:28:22:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:B4:17:8E:17:8F:71:DA:16:76:62:86:F0:CC:C7:D0:6E:73:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/0648fe06-21be-31a4-993e-e994e731c5cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
X509v3 Authority Key Identifier:
keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
sbgp-ipAddrBlock: critical
IPv4:
169.197.160.0/22
208.65.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:18:b7:3e:c7:e7:35:a4:49:20:4f:84:6d:56:9b:81:e3:11:
28:11:1c:e2:7f:1d:ff:31:f1:4e:92:fb:03:b2:02:b4:9f:16:
40:4a:a0:64:50:1e:4b:40:4c:44:a7:93:3b:70:40:f3:44:03:
cc:18:3d:d2:5a:17:f0:2b:26:17:ed:86:17:b1:09:cb:57:0a:
13:86:67:55:f0:51:3b:55:7f:1f:1d:51:2a:fd:5f:c5:20:6e:
a7:62:44:87:68:fa:f3:69:d3:0c:49:ec:59:5f:28:69:28:94:
b3:61:b1:8f:db:5b:37:57:b5:f1:e5:88:58:49:98:5c:d5:f6:
51:cd:d1:93:15:21:02:b1:dd:f0:92:db:f8:91:7b:85:2f:a5:
c1:1e:06:b9:fc:55:81:f6:f7:58:2a:a0:da:3f:75:9e:fe:bc:
51:9a:db:47:fa:3d:d7:94:da:2c:e1:c5:e7:de:0b:6d:e1:00:
aa:43:71:6e:07:d0:9d:d4:58:bc:0e:b9:4e:b4:d3:04:a2:57:
d8:c0:11:23:44:10:a5:8d:1a:5f:5b:94:6f:58:b0:41:d8:13:
46:51:5d:89:27:31:a9:14:c3:67:a9:57:84:e5:bc:9b:59:a1:
c3:25:bc:3c:67:01:26:fb:86:97:45:95:cb:bc:b9:52:71:52:
e6:5e:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:40:26 2026 by rpki-client