
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/93d6b93f-3255-374e-ace8-dd676533f7a3.roa
File: 93d6b93f-3255-374e-ace8-dd676533f7a3.roa (raw, json)
Hash identifier: ccRnxUz1++Msk5nQl2mDW2lPZyVttahdLH4mxRAQpIo=
Subject key identifier: E2:DE:CE:08:1B:B8:AF:B3:7E:D6:10:88:1B:C9:8D:04:6E:0B:A7:6C
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584D2644B8F526E3BB5D78528000
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/93d6b93f-3255-374e-ace8-dd676533f7a3.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 3561
IP address blocks: 208.158.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:b8:f5:26:e3:bb:5d:78:52:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=64aba958-88a4-428d-a00a-e9fbff1aabeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ff:2d:e8:bb:e7:a2:fb:91:68:bd:64:74:61:
6e:22:b6:77:48:24:64:1a:30:d0:73:d4:03:7e:88:
aa:e4:96:fa:d8:8e:d7:fb:a6:85:9f:f2:f1:60:22:
16:b1:33:05:38:2b:fe:37:c8:bb:49:d2:02:80:21:
24:b2:e3:a5:e5:13:a6:ab:e7:49:e9:4a:c2:3a:ee:
ff:48:22:e1:27:9a:2c:04:74:e7:78:11:71:94:37:
45:b4:ef:32:c0:3f:50:dd:e2:e4:00:59:7c:20:a0:
17:2a:77:9f:64:81:e6:f6:df:10:fb:cb:07:4b:5c:
0c:df:36:67:4e:b8:7f:26:06:c3:07:2b:cc:5c:b1:
c6:d2:b5:cd:f8:2d:09:1c:2a:7e:38:70:38:32:f9:
78:a4:7f:9f:b3:d3:c3:35:fa:5c:2b:b2:04:1c:e5:
1a:32:d8:c8:f9:a5:f9:9e:2f:e5:d7:95:96:b0:8f:
a2:7a:bc:52:b5:93:be:78:f4:4d:49:6e:8d:77:b7:
51:37:8a:9a:dd:37:6d:6c:c4:9a:ce:b8:9a:37:d3:
77:4e:0a:56:a3:28:a0:96:2e:41:a0:5d:be:7b:82:
58:f9:fc:ff:c4:b2:ff:9c:34:41:8b:eb:39:4a:40:
04:c5:be:31:80:99:29:8e:5f:44:f4:32:98:34:21:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:CE:08:1B:B8:AF:B3:7E:D6:10:88:1B:C9:8D:04:6E:0B:A7:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/93d6b93f-3255-374e-ace8-dd676533f7a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
208.158.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:25:5c:a8:76:6f:96:98:26:18:2a:21:7f:84:d2:f0:f9:2c:
69:01:b9:a2:cc:2d:a3:36:24:9a:95:f5:ce:6c:8c:d7:d2:a9:
38:d2:4e:9a:64:c3:58:9b:d5:3a:b8:5d:fb:0d:81:52:bd:39:
8e:0c:96:6c:92:03:55:0f:ab:02:91:0e:0e:ac:3b:7d:36:19:
57:8b:00:94:2e:27:35:14:08:ed:7e:20:f5:98:0e:9a:39:35:
a4:9d:c7:85:0a:49:c2:6a:fe:f7:63:f3:b1:1f:12:04:36:a2:
0a:4e:08:f1:6e:4f:8a:78:5f:16:40:74:b7:8d:b3:25:20:dd:
7e:3a:40:5e:ff:13:c0:6a:8f:6e:7a:1f:8d:0b:e2:01:b7:7f:
e0:b2:cb:45:41:a2:65:21:d5:34:bf:6b:08:b3:2c:7f:ca:c3:
d4:65:39:87:f1:2b:35:1f:e5:31:52:3d:d8:11:43:ed:7f:bd:
fe:0d:26:6d:4a:dd:4c:6f:ef:39:d0:68:32:f2:1c:63:c3:26:
09:3c:23:89:39:5f:4e:a9:94:58:bd:e7:18:a4:04:87:76:ae:
dc:da:97:6d:54:86:16:13:e9:8e:ff:29:9d:63:ab:1b:49:5e:
87:1c:c4:d4:8f:7c:83:42:90:d8:92:7b:ad:30:19:d1:ba:be:
58:97:ff:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:29 2026 by rpki-client