
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/dc75d141-87f6-3220-a211-448fe340bb14.roa
File: dc75d141-87f6-3220-a211-448fe340bb14.roa (raw, json)
Hash identifier: WxtCEPWfdS5nxioRLDvSMvb2AIVpBwG9LrBQYiPpYyY=
Subject key identifier: 06:7E:DF:F7:E0:43:80:D2:88:16:19:51:14:ED:3F:D5:A9:FD:37:FE
Certificate issuer: /CN=4fba60d2-29a5-492e-80a8-8126449210aa
Certificate serial: 010D0C9F4328584D117295ED17F6C41A3B904000
Authority key identifier: B2:76:16:47:BC:DD:F2:D3:50:12:76:34:2C:65:39:B5:AA:22:5A:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/dc75d141-87f6-3220-a211-448fe340bb14.roa
Signing time: Thu 05 Mar 2026 14:00:40 +0000
ROA not before: Thu 05 Mar 2026 14:00:40 +0000
ROA not after: Wed 03 Jun 2026 13:00:40 +0000
asID: 27578
IP address blocks: 130.51.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/4fba60d2-29a5-492e-80a8-8126449210aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/4fba60d2-29a5-492e-80a8-8126449210aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:11:72:95:ed:17:f6:c4:1a:3b:90:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fba60d2-29a5-492e-80a8-8126449210aa
Validity
Not Before: Mar 5 14:00:40 2026 GMT
Not After : Jun 3 13:00:40 2026 GMT
Subject: CN=631f55e7-1b1f-4916-b913-d8600919e127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:50:a9:22:94:cb:44:36:c9:46:eb:04:71:23:
c2:8a:1a:4f:28:de:b8:d8:d9:50:1e:88:68:f6:0b:
96:45:17:e8:a3:42:27:3f:36:d2:3e:2a:68:19:02:
33:1e:0d:f0:44:60:54:74:60:67:2f:78:3e:25:0e:
85:57:9f:09:b8:df:35:b2:49:6d:8f:c4:9e:f2:bc:
80:01:4b:fd:d6:05:f8:a8:7a:29:c3:e8:64:7c:5e:
8f:c5:de:6a:59:3b:3a:7e:c8:e0:52:7d:2e:77:81:
e2:83:eb:85:26:04:72:cb:e5:09:30:51:94:96:e0:
11:48:18:c8:bc:12:13:a8:2c:9e:de:e2:da:fe:f7:
18:07:b6:45:ed:a8:c8:3d:93:e0:23:f4:be:52:30:
3f:58:d2:f8:a1:9c:9c:cf:a2:7c:4b:39:ac:5c:cd:
82:cb:f7:23:cc:56:63:98:d1:dc:11:c4:25:1b:2f:
33:9e:be:1b:af:76:21:7c:4e:0e:5b:4f:ea:f9:7c:
c7:21:b0:2e:dd:5d:ee:28:16:bf:4f:5b:05:25:34:
31:ec:00:6c:fb:b7:78:2e:ba:5b:39:5a:60:52:a1:
75:e2:77:7c:b1:58:28:62:41:f6:95:c1:5a:fd:cb:
ca:8b:7f:f5:fc:c8:72:fd:b0:ed:0d:3b:d1:14:1e:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7E:DF:F7:E0:43:80:D2:88:16:19:51:14:ED:3F:D5:A9:FD:37:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/dc75d141-87f6-3220-a211-448fe340bb14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/4fba60d2-29a5-492e-80a8-8126449210aa.crl
X509v3 Authority Key Identifier:
keyid:B2:76:16:47:BC:DD:F2:D3:50:12:76:34:2C:65:39:B5:AA:22:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa.cer
sbgp-ipAddrBlock: critical
IPv4:
130.51.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:0a:4f:57:1c:4f:eb:3c:a2:e8:4f:51:b1:f0:fc:b7:41:5f:
b9:14:d4:c0:4b:46:94:b5:d0:44:66:38:eb:3a:1a:a9:2d:ee:
34:32:27:9e:b6:df:a8:08:07:a2:54:1e:ef:f3:1a:f8:24:49:
e1:32:8e:2c:89:8a:a0:99:01:23:bc:d6:2b:e7:f7:77:7e:ad:
d3:bd:1e:39:b0:31:bc:3b:a7:ed:17:d0:99:20:92:f7:2d:53:
80:c9:d2:77:67:ac:16:66:84:71:51:32:48:fe:b5:84:b1:d2:
1a:e2:bc:b9:a0:66:cf:d6:35:d1:44:b0:73:47:d7:5c:14:73:
39:88:21:ee:36:e8:d2:e3:83:83:87:fb:b9:cf:59:03:6d:66:
ed:cc:91:29:fe:96:d7:1a:0e:af:37:f3:35:8d:14:99:5c:e6:
e2:88:2b:ee:b7:6f:82:0a:3e:ae:1c:56:a2:b1:67:8d:64:eb:
f4:4d:9c:8c:e1:60:26:4d:19:6b:68:29:dd:7a:ea:e7:73:ae:
b0:ad:fe:f2:88:ab:5b:f3:fa:bf:50:2c:11:d3:f8:5e:b2:a1:
36:ce:4e:57:72:60:bc:25:d8:a4:a9:e6:9f:16:2b:4f:25:61:
80:45:29:63:9d:42:35:f2:da:0b:43:ee:86:bf:54:6c:2b:c7:
57:dc:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:43:15 2026 by rpki-client