
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/dd13d1dc-4cb4-3565-9765-680c241c28a5.roa
File: dd13d1dc-4cb4-3565-9765-680c241c28a5.roa (raw, json)
Hash identifier: bcC2F+yJw8D9IHb6P1azYYYE0eja6wulJNW4rRpcBSs=
Subject key identifier: FD:79:72:94:F1:9C:AC:EB:95:AE:54:AF:81:1E:93:A8:49:F4:C6:B1
Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial: 010D0C9F4328584D492A4A60849F4699F7CD1800
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/dd13d1dc-4cb4-3565-9765-680c241c28a5.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 400400
IP address blocks: 205.234.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:4a:60:84:9f:46:99:f7:cd:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=2136f6b2-44e8-42c1-b33a-21964587eb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:06:3a:a3:bc:93:78:aa:65:17:4d:dd:62:b3:
e0:e1:2d:14:4d:4c:60:62:b6:42:df:95:59:ee:ed:
fe:36:47:c6:39:b5:1f:25:e6:0d:d6:06:bb:3a:4f:
58:20:36:ec:dd:db:7f:f0:59:c8:64:9a:d7:d0:0d:
37:23:0a:b4:6d:78:e5:8f:88:39:0b:07:de:bf:bf:
20:59:83:45:76:bd:a5:bb:12:84:37:a8:d1:8b:1f:
b7:fe:56:40:25:24:a8:c1:9b:e9:65:01:43:d0:24:
ad:c2:75:2f:f9:71:14:3c:be:e2:1d:01:ac:fb:b5:
75:b2:a5:83:27:ef:32:b8:07:2c:a8:5c:74:9d:34:
e4:04:be:9f:a3:3a:b3:8d:0b:e2:83:f2:d0:81:ea:
84:75:ca:13:05:7e:e8:5e:53:63:8a:9f:c9:a0:a2:
69:f6:b3:f8:f9:10:71:38:3f:df:37:f0:f4:40:79:
14:34:ae:c9:3b:7c:29:cf:58:68:72:16:e4:e9:9e:
6c:bc:e1:e5:4a:46:b4:f5:02:cf:33:c5:85:f2:ce:
75:b2:e3:c9:9f:8c:75:2a:04:94:db:30:7b:ff:88:
b7:46:4b:92:f3:a5:38:ac:be:c0:79:72:64:ed:53:
c2:95:af:df:23:51:b1:b0:fe:5d:1c:e9:ac:34:b5:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:79:72:94:F1:9C:AC:EB:95:AE:54:AF:81:1E:93:A8:49:F4:C6:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/dd13d1dc-4cb4-3565-9765-680c241c28a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
X509v3 Authority Key Identifier:
keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
sbgp-ipAddrBlock: critical
IPv4:
205.234.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:a6:03:e1:cd:19:b4:97:79:8e:d7:54:d2:82:e1:ee:8b:c7:
82:e3:1d:e1:44:8d:81:52:6e:7d:b2:6d:07:67:f0:a6:22:fa:
69:24:fe:23:1b:74:68:04:08:ae:dc:9a:c7:e7:c0:c6:b1:32:
91:ad:6c:46:0b:03:b3:d2:2e:0c:fe:0e:b4:23:2c:26:0b:de:
96:19:ab:3c:89:21:e2:82:bf:c8:37:f2:b7:c2:0c:2b:c9:a3:
c7:a1:d5:26:0f:bc:75:8d:22:dd:29:fb:e6:a9:90:e1:71:d7:
5d:34:69:fb:62:91:2c:a7:5b:99:57:92:16:fd:9e:00:d6:22:
0f:09:8c:df:42:39:2c:be:70:5c:a5:a0:bf:d3:28:11:08:13:
61:e7:c2:08:7f:a7:d3:77:a2:af:28:36:5c:ba:27:d5:7c:d1:
44:1f:18:2a:f5:ce:98:84:07:23:c3:c9:0d:22:10:5a:ae:02:
d0:3e:36:ba:42:bb:65:97:b8:a7:fd:2d:0b:07:ff:79:32:1e:
a6:77:49:7e:83:f1:71:d5:3a:68:83:18:c6:ba:af:e7:6d:89:
1e:07:5f:2f:5e:ee:94:ae:ac:f4:69:0b:77:b8:b6:83:2f:da:
74:f7:71:14:bb:11:ee:7d:d1:59:a8:68:a2:20:43:9c:e6:54:
c8:7e:69:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:06:11 2026 by rpki-client