
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa
File: 3ae91796-d0c5-382c-af8b-cc422804c680.roa (raw, json)
Hash identifier: W1ziOdPnAaklRt8TBl4EmIHUBnn0GX0QsT5nMsB6708=
Subject key identifier: 55:D0:A8:A0:E4:D6:E2:DC:12:30:6C:EB:4B:CA:25:7B:EF:6C:2A:4A
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F4328584D300A4AF5AA51B62BEAA2DC20
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 63062
IP address blocks: 67.44.112.0/20 maxlen: 24
174.32.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:4a:f5:aa:51:b6:2b:ea:a2:dc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=5a8107d7-9a18-48b1-9e4e-38bf7da0dcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f7:5c:81:7a:f8:97:95:98:a8:6c:1f:14:30:
b6:90:15:cd:06:14:6c:d8:22:15:6e:98:7b:bc:8f:
7f:c0:3d:9f:82:d9:3a:ae:60:3f:3e:c0:cc:7a:de:
0a:60:12:03:ba:16:bf:20:4c:f4:d1:c5:8a:65:f2:
a5:5f:91:a1:93:be:ab:c2:02:39:6f:76:b2:7d:17:
c4:95:a9:07:a3:93:f9:d6:82:bf:80:08:85:9c:3b:
25:2a:17:5a:ae:bc:ea:a1:03:3d:d3:3f:1b:f6:b2:
a8:e7:64:da:d7:13:f6:eb:ff:02:b8:f8:ac:15:76:
74:cd:44:2a:a2:4c:55:ed:49:9e:54:71:46:ab:ad:
5f:8c:f2:c6:b9:ce:f4:45:62:d6:97:8e:16:22:96:
06:18:a8:95:e0:40:c9:ef:79:95:19:ed:0a:49:ec:
b5:33:82:59:8b:9e:41:6d:22:6f:c1:c5:e9:8f:d5:
58:e3:08:ea:5b:d3:b7:b3:63:fa:ba:94:df:ab:14:
6e:ca:e3:28:1f:a8:c1:4b:e3:f9:35:fa:ce:36:59:
07:51:de:66:1f:0f:e4:9f:cf:8e:f1:b4:49:62:0e:
7a:71:f1:64:b8:6c:f0:ea:90:68:fe:c4:b8:8f:5f:
83:11:0a:18:17:67:41:a5:12:01:fb:6b:30:81:21:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D0:A8:A0:E4:D6:E2:DC:12:30:6C:EB:4B:CA:25:7B:EF:6C:2A:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.44.112.0/20
174.32.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:b6:cb:09:10:ee:4c:fd:ac:83:c1:e0:e9:3c:74:2e:87:be:
1e:b0:97:d6:63:e3:73:d9:d8:8a:ee:95:d5:1b:d5:ce:78:cf:
a8:2c:bc:07:94:83:d0:e8:16:19:c0:b5:ad:6a:b6:bb:76:62:
7d:d7:96:81:3d:0a:b2:7c:34:cb:93:5b:ed:4e:6d:4c:7f:53:
06:27:4a:9d:e4:f2:6e:30:59:6a:0f:43:de:76:96:c6:66:25:
fc:6a:db:b0:92:3a:bd:0c:62:e6:59:0d:f2:5c:fa:5b:04:86:
9a:4c:a7:08:d5:ea:02:51:d2:60:f7:f3:02:7b:b3:75:f3:8d:
ef:bf:4e:3a:23:22:d5:91:50:4e:fd:e9:57:b5:69:4b:09:69:
ef:03:18:03:cf:ea:49:fb:5a:76:87:17:f6:ca:c9:a3:20:bb:
a2:aa:ec:e8:75:84:bf:2a:60:48:d7:7f:0e:c1:46:63:15:e8:
e9:ad:77:a6:a7:63:ae:39:98:90:14:7d:a9:0d:39:07:73:a9:
79:c9:bf:b0:f7:3e:eb:c9:ab:8b:60:e3:e2:a2:df:83:02:fe:
37:6e:18:bf:11:b6:4d:a9:18:56:f4:c6:bd:d4:74:69:f9:73:
7c:8a:df:6f:d6:c1:b3:ba:b8:00:1f:24:71:bd:a0:ac:c8:3f:
92:05:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:18:55 2026 by rpki-client