
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa
File: ff815538-39d0-348e-910a-f73be4832b91.roa (raw, json)
Hash identifier: cT/inNreu+CU2gwu8OxWAJ0x3AXFhRokYtmuaywWnr0=
Subject key identifier: 17:40:6D:D5:08:AD:F1:07:DE:6F:36:39:00:90:02:EB:EF:08:9F:1B
Certificate issuer: /CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7
Certificate serial: 010D0C9F4328584D3F64E90D49CF7B5F2E576E80
Authority key identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 32334
IP address blocks: 192.30.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:e9:0d:49:cf:7b:5f:2e:57:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=d7ac61bc-352d-470e-9b4c-0f271af7d50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:14:c9:2e:f4:d3:eb:e4:6b:45:73:48:23:
72:3d:d8:8b:61:da:fd:7a:7a:d1:7c:e5:0f:07:84:
f1:30:8f:af:4c:1f:0e:0c:92:65:80:57:31:fa:4f:
44:e8:20:0f:17:22:dd:5a:1d:b8:b6:8a:8c:e3:9c:
ea:aa:61:43:53:0d:4c:99:31:b3:08:e0:7b:4d:0d:
22:28:d4:ca:08:1c:35:69:39:b5:64:08:b6:06:bd:
29:59:d8:d4:96:f7:1c:c5:6d:d2:35:d1:a9:ea:83:
0e:40:08:a4:16:19:5b:a0:a8:c3:8d:eb:e7:6e:64:
b3:17:61:df:21:29:31:2a:90:0a:a7:42:51:0d:d9:
72:35:7f:51:e1:f7:00:06:6c:bd:f9:2e:d0:f7:10:
88:1c:f2:9e:cf:3c:cb:cc:a4:27:74:bd:fe:29:ef:
1b:11:f4:68:07:27:7c:01:ec:32:a5:e6:05:ba:d8:
26:c9:1d:aa:c2:4d:27:d5:1c:73:65:c9:27:d9:c8:
e3:9b:15:01:88:90:f6:9d:20:6a:84:78:37:d4:c7:
52:2d:e2:1d:4e:e0:67:54:d1:1f:c9:c8:61:74:61:
0d:43:35:38:54:a3:06:ff:cc:94:16:95:30:9b:62:
85:e2:84:a0:3c:cb:d2:3f:86:b7:0f:ed:e0:31:8d:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:6D:D5:08:AD:F1:07:DE:6F:36:39:00:90:02:EB:EF:08:9F:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl
X509v3 Authority Key Identifier:
keyid:8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:c4:d5:3f:26:fe:98:ff:ba:f1:2e:33:0c:77:5d:69:e5:93:
fc:72:07:5f:34:f6:f1:e8:fc:ce:fa:09:6c:97:95:f4:a6:f6:
a1:03:51:ac:40:6a:73:2d:d8:87:52:59:d9:1d:e1:15:68:55:
e2:15:90:aa:32:97:34:91:b2:74:ae:dc:4b:f9:a8:98:b7:1f:
5d:3f:98:1d:63:1c:2f:f5:41:3f:2f:9f:d7:02:7e:35:64:5e:
81:9f:98:d5:0c:4d:5c:fc:a7:3a:c8:15:d2:9f:97:be:d3:27:
7b:92:36:d3:8f:fc:38:95:c4:18:7a:dd:61:3f:95:f4:25:e3:
0f:94:de:01:2d:0e:98:88:ed:4c:29:a5:b9:1d:dc:00:2c:44:
d1:65:b5:58:0f:18:38:80:a2:60:ff:a8:fa:a6:fb:19:25:eb:
48:2d:83:bc:f8:bf:18:a5:0c:71:e2:6e:eb:ed:40:b2:99:cc:
16:16:62:87:46:ba:dc:e9:6a:b2:c2:aa:03:1e:b3:be:e1:04:
d8:5a:1f:46:86:ae:8b:a7:ae:6c:31:73:6c:3d:47:bf:9d:b6:
fc:65:c5:cd:31:2d:a5:3f:07:c8:e8:25:e1:b6:e5:ab:57:5f:
9e:46:77:58:e0:22:81:8a:a8:c1:65:10:b3:8d:b5:ff:59:1f:
39:6a:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:06 2026 by rpki-client