
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2aa28a3d-7ec2-35be-9e4a-cfa9bf38cfe0.roa
File: 2aa28a3d-7ec2-35be-9e4a-cfa9bf38cfe0.roa (raw, json)
Hash identifier: opmrpiqIOzszENpcZ4yn5sI0WbV615/ElFoSGlm365E=
Subject key identifier: 69:4E:7D:19:03:69:AB:E8:DF:60:D8:E4:16:EC:37:9C:1C:97:66:54
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584F13024003B0636A73189FAB4C
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2aa28a3d-7ec2-35be-9e4a-cfa9bf38cfe0.roa
Signing time: Sat 05 Sep 2026 13:00:12 +0000
ROA not before: Sat 05 Sep 2026 13:00:12 +0000
ROA not after: Fri 04 Dec 2026 14:00:12 +0000
asID: 3561
IP address blocks: 206.154.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:13:02:40:03:b0:63:6a:73:18:9f:ab:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Sep 5 13:00:12 2026 GMT
Not After : Dec 4 14:00:12 2026 GMT
Subject: CN=7036bc3a-be94-43c5-8c9d-cee635b63ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b0:d2:8a:73:4f:2d:fc:57:ce:f9:56:35:ed:
25:75:62:d9:00:7e:88:b0:4c:7a:b7:c0:55:07:07:
aa:c3:86:74:0e:22:94:19:b8:bc:b4:7b:a7:f7:3b:
4b:5a:eb:55:b8:c6:53:e9:70:12:54:47:e4:1c:53:
a6:08:cf:7b:4f:e8:9b:3c:75:94:00:0f:4b:e4:6b:
36:e4:d9:89:29:ed:83:0e:89:48:62:4c:6f:89:89:
4c:c8:01:0b:ce:7c:1c:54:a9:35:77:ca:37:79:59:
14:c5:32:58:a8:b1:55:3e:79:16:7f:19:26:ee:c7:
89:6f:53:a3:c3:1c:2c:28:2f:39:21:a9:9f:01:1b:
fc:a0:c4:6c:0d:1a:d9:17:f0:1c:5c:ad:63:58:76:
02:7b:5d:c8:4e:97:9e:c5:87:d5:45:17:63:3e:57:
f9:b2:3d:a6:7c:3e:4e:2a:99:7c:80:87:64:78:6a:
a5:f1:e6:a8:af:24:b2:7e:79:a3:ae:b0:65:34:d8:
6f:fc:a8:bb:c4:1a:98:b6:07:be:13:dd:cb:14:40:
22:09:05:92:d3:48:72:9d:28:da:57:0b:52:2e:23:
2b:b6:34:e8:fd:49:93:ab:80:1e:d8:8f:88:10:5c:
96:cd:b5:5c:b8:f1:88:25:14:da:5c:67:1a:9e:72:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:7D:19:03:69:AB:E8:DF:60:D8:E4:16:EC:37:9C:1C:97:66:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2aa28a3d-7ec2-35be-9e4a-cfa9bf38cfe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
206.154.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:72:f9:6e:9e:c0:03:28:e8:92:56:44:af:1d:03:ee:51:b7:
8a:0b:17:e3:3b:a4:ca:d5:74:59:1d:ea:03:72:78:2e:22:c4:
25:c9:3f:52:12:0b:a8:de:f5:2d:77:2c:c2:38:a0:81:cc:52:
8e:de:ae:28:c0:7a:2a:4d:c2:68:51:78:39:c3:a4:7a:f6:65:
5c:1d:70:1c:00:1d:0a:ab:f6:a5:20:75:26:32:bf:d0:1d:54:
f9:a0:5d:21:1b:44:f6:20:38:8b:82:48:c1:aa:af:45:4c:83:
b3:ba:61:fd:25:44:4a:92:0b:76:88:8c:51:84:4d:55:ed:0e:
96:4e:cc:cd:08:02:4d:c8:0e:a9:e5:0b:0c:80:66:1f:97:9c:
04:b9:39:95:a9:0c:ad:14:43:67:2b:87:fd:76:70:32:a5:df:
b7:7a:0e:bd:1d:8e:c1:20:1a:00:72:6e:78:18:dd:2d:0b:74:
0e:e9:f7:d1:55:e6:dc:93:19:ba:d9:e9:75:46:58:fc:52:ae:
85:f4:9b:04:92:b8:af:9b:28:68:0a:68:c7:e5:f8:ef:b4:3b:
8c:80:94:35:60:aa:88:db:92:0d:16:a4:4d:67:47:94:ce:f0:
82:43:20:fc:6d:4c:71:9a:17:cd:ad:eb:81:eb:8f:9e:3f:52:
de:26:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:38:57 2026 by rpki-client