
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb242542-4e4e-34ae-87df-fab8ff011f24.roa
File: cb242542-4e4e-34ae-87df-fab8ff011f24.roa (raw, json)
Hash identifier: vxZiP7aXSoH9p6e5W3MNvEE97FarAW/Q4pQFwSxMQZw=
Subject key identifier: 7F:12:2C:7C:45:65:AC:AA:11:F5:75:EB:24:09:17:1C:99:CB:E5:FF
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584D597D6243F6C0F6E757134200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb242542-4e4e-34ae-87df-fab8ff011f24.roa
Signing time: Tue 31 Mar 2026 09:21:09 +0000
ROA not before: Tue 31 Mar 2026 09:21:09 +0000
ROA not after: Mon 29 Jun 2026 09:21:09 +0000
asID: 401783
IP address blocks: 206.135.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 12 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:7d:62:43:f6:c0:f6:e7:57:13:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Mar 31 09:21:09 2026 GMT
Not After : Jun 29 09:21:09 2026 GMT
Subject: CN=9c446c1d-5349-4605-a0f0-5060d6a76310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:6d:48:c4:b1:86:3d:c3:7e:2c:51:c9:fb:
32:b0:63:c9:b0:65:f2:b1:0e:aa:d8:2d:0e:93:7c:
a6:19:50:da:f2:a4:96:b1:10:55:65:96:58:94:ba:
25:d6:40:3f:00:dd:38:ad:b5:9f:ea:e1:57:50:87:
a4:17:12:8c:e2:f4:81:ef:f8:90:3a:f1:1f:da:12:
eb:83:2c:ed:c7:d9:41:19:84:64:59:a9:36:07:6e:
12:1e:07:a2:11:54:21:8d:a6:05:7e:13:95:7a:e7:
f4:79:8a:f7:c2:9f:0c:11:e9:09:3f:d8:de:96:1d:
e7:3f:56:c7:70:ec:a1:6a:cd:79:31:31:82:13:dc:
b6:5a:a8:7e:cb:39:cb:86:c8:4d:1f:db:72:bb:9e:
93:68:2a:6e:4c:00:09:08:29:1e:00:95:b3:57:8a:
d4:56:7c:ec:cc:2a:10:67:f0:eb:b4:2f:08:3b:2a:
ce:00:d7:fc:45:01:f1:b0:95:aa:bd:35:6b:43:9f:
4f:a7:5f:bc:de:c1:b8:29:4e:3e:2b:d5:ba:8e:65:
38:8f:27:5f:5d:66:2f:8a:d5:4b:55:fc:c9:4e:95:
1c:de:df:eb:22:be:59:79:6c:28:ab:a4:a0:58:51:
96:c7:81:bd:5c:6a:b9:34:84:d5:63:e1:2d:61:e1:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:2C:7C:45:65:AC:AA:11:F5:75:EB:24:09:17:1C:99:CB:E5:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb242542-4e4e-34ae-87df-fab8ff011f24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
206.135.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:7d:1c:f2:15:6e:81:ba:70:ba:a9:26:38:09:91:5d:ff:de:
a6:f8:4b:88:b3:dd:81:4a:84:a7:36:17:3b:17:9c:ec:61:df:
8c:2a:00:15:8d:46:70:12:6f:9e:8f:d0:e5:d2:61:83:ef:4c:
08:62:50:d1:83:04:3c:9c:84:c9:9d:2c:d7:ee:dc:c1:4f:ea:
08:dd:fc:bd:d2:16:24:8d:74:fa:33:7c:5a:ec:80:5c:79:aa:
10:35:14:1e:21:2e:53:78:d4:63:88:f9:28:bb:44:a3:21:71:
9d:2a:f0:55:35:c7:58:a3:c6:da:0c:f9:b2:9c:89:f8:57:03:
72:57:5b:b0:5e:f4:a0:e9:7f:68:b6:4a:f4:cc:1b:7d:f8:42:
07:6e:eb:fa:70:77:5a:5a:cc:82:8d:90:26:36:bb:7f:03:d0:
32:3b:31:51:f1:6c:c6:c7:16:98:5e:37:66:69:9a:5c:22:21:
64:0c:33:c0:89:67:9d:2a:dc:df:25:9b:71:0a:16:d6:88:ba:
90:e6:69:5f:ac:72:05:74:22:e1:93:ce:7f:c5:ff:c9:02:48:
c1:51:3e:4d:8a:d6:19:12:ea:b0:04:b7:7a:51:c6:3e:3c:eb:
3f:bd:c2:6a:25:dd:42:45:40:eb:75:eb:ca:c8:0c:f5:e5:09:
c7:79:48:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:13:05 2026 by rpki-client