
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa
File: 9866eb47-8ef3-3d63-8638-76ae76aa2833.roa (raw, json)
Hash identifier: GsJCFobwKErvZFVE78+VOtWY+z1DuousrCTwXnXNLgY=
Subject key identifier: 15:AF:6F:33:28:29:5E:47:AA:6B:81:90:38:FD:57:DB:FD:30:5E:1A
Certificate issuer: /CN=94f0eda7-0771-41a2-8806-38174b050cc8
Certificate serial: 010D0C9F4328584D0D4259F65A12AA7648DD17C0
Authority key identifier: 74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 32549
IP address blocks: 216.168.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:59:f6:5a:12:aa:76:48:dd:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f0eda7-0771-41a2-8806-38174b050cc8
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=7666b1da-defb-4d37-89ef-bab0d6bdf4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:33:6f:8c:f7:72:0f:a5:7a:c8:d0:a7:31:
43:7b:a6:e2:dd:49:fc:94:31:4c:10:f3:95:30:c2:
0e:a1:d3:aa:3a:3f:43:a4:65:35:fe:78:93:93:64:
18:97:d8:d4:85:fa:44:f8:23:dc:4a:eb:99:28:2f:
99:18:14:6e:49:e1:a7:24:a6:15:c5:03:29:04:53:
2c:0e:8c:b5:34:4d:89:03:84:79:73:a4:5a:42:0d:
20:bc:ff:c3:a8:72:5c:55:5d:6b:aa:e3:a3:de:30:
d3:81:e6:77:0d:47:fd:7f:68:df:6c:6c:1b:23:4c:
fd:b7:e9:4f:13:54:69:df:79:7a:c0:e9:d9:b3:49:
23:a2:e3:5a:8d:d0:1b:b4:6c:fb:80:27:fd:f7:3d:
74:0d:cb:74:ad:be:21:3a:9d:52:fb:d6:aa:37:de:
ef:92:7d:1d:0b:58:e1:5c:12:7b:93:0c:53:fd:1c:
d3:02:d9:9e:a4:5e:19:8b:4a:32:5b:00:59:e1:87:
28:4a:9d:7b:45:e6:4b:71:bf:d0:d5:7e:75:59:29:
74:9c:d7:35:63:fd:20:14:05:98:63:ad:2f:b7:44:
5e:25:14:07:84:a9:fa:08:a1:77:71:be:2d:23:70:
5a:bc:87:a2:f4:0b:ce:82:c0:56:96:67:27:12:45:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AF:6F:33:28:29:5E:47:AA:6B:81:90:38:FD:57:DB:FD:30:5E:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.crl
X509v3 Authority Key Identifier:
keyid:74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:d2:4e:0f:16:b9:db:e3:6e:b6:d9:9b:38:be:fc:85:ab:9f:
a0:12:da:16:02:51:0a:42:c7:27:58:1b:7b:9b:4d:42:48:e0:
8f:df:59:3f:69:56:12:7d:bf:26:bf:da:c8:11:9b:34:39:ba:
41:75:5e:bb:36:34:ca:69:63:9a:24:4a:55:9d:4f:6d:9d:08:
b7:c7:4f:d6:d0:54:d4:ee:7e:7d:ef:93:1d:51:fe:d6:d2:06:
c8:b0:68:12:a0:dc:be:2b:eb:ef:6c:44:88:7b:6a:e6:ff:95:
5b:26:7f:36:18:59:35:49:a6:e2:4a:ae:f4:e5:00:fe:24:f3:
71:98:bb:d0:60:9a:f6:e1:2d:40:d3:0e:13:3f:2e:5f:d2:6c:
c3:d3:f7:0c:e0:c0:9d:5e:78:1e:3d:45:bb:01:da:dc:87:3f:
1c:83:c2:93:2b:2e:40:c8:99:9d:b5:81:bb:56:98:17:0b:c8:
09:7d:d0:23:ea:25:2b:97:9f:a6:2d:60:ee:9d:1a:dc:ba:73:
d5:3f:62:c1:7c:14:58:f8:f1:c7:c4:71:4f:f8:cd:8e:d9:d2:
95:0a:90:38:11:e1:a6:d1:16:96:0b:80:4d:1a:ac:18:b5:29:
46:c1:70:de:e5:05:2a:e9:3c:96:8a:74:56:cd:6f:ad:13:68:
08:42:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:47:30 2026 by rpki-client