
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/bef26391-d7a0-3cce-a58c-0b9b66170703.roa
File: bef26391-d7a0-3cce-a58c-0b9b66170703.roa (raw, json)
Hash identifier: YT1R+fLAWZ32Tz1KXH9kjWekvf0PVlb5OoDTnIkzHEo=
Subject key identifier: 4C:C7:3E:91:00:01:7B:C7:EA:78:45:EE:6B:10:C4:F3:C9:6E:FB:C2
Certificate issuer: /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial: 010D0C9F4328584D4394DC956DA8DA33B526ADC0
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/bef26391-d7a0-3cce-a58c-0b9b66170703.roa
Signing time: Mon 23 Mar 2026 13:00:39 +0000
ROA not before: Mon 23 Mar 2026 13:00:39 +0000
ROA not after: Sun 21 Jun 2026 13:00:39 +0000
asID: 40818
IP address blocks: 216.38.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:43:94:dc:95:6d:a8:da:33:b5:26:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
Validity
Not Before: Mar 23 13:00:39 2026 GMT
Not After : Jun 21 13:00:39 2026 GMT
Subject: CN=3c261b26-82b6-4c51-92df-259887f3271f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:b5:e0:2c:53:53:0e:3b:38:5a:66:69:3a:
1a:18:97:21:31:72:02:3a:b3:be:7a:27:64:f5:00:
e0:77:7d:05:a8:94:cc:b0:e5:55:cb:31:f3:63:e2:
57:18:b4:21:7e:8b:11:9e:9c:7b:ec:ce:19:d0:78:
f9:0a:4f:3e:28:6f:a9:d7:2e:32:6e:90:d5:77:75:
d1:29:44:b2:83:18:bb:ad:2d:e9:3b:51:96:8f:2f:
d7:54:68:ee:48:d3:a9:df:8b:1c:41:87:50:71:c4:
3a:20:86:25:b2:73:73:19:67:0c:b8:57:d6:3d:2e:
83:9a:b4:e1:97:10:e4:2e:44:4f:f8:3c:b9:2b:e7:
d5:30:35:99:e5:7b:3e:d7:00:31:29:96:86:62:ae:
0e:36:b5:f8:c8:69:bc:f7:5b:a8:04:c4:e0:17:b7:
46:fc:35:f4:2d:38:a4:f1:e6:a2:11:90:bd:35:be:
c0:e9:c1:d1:6c:c8:cf:da:cc:57:74:4e:8e:92:b4:
e7:f2:dc:9e:bb:01:e2:4b:ac:37:dc:80:99:e3:e4:
c7:7f:ea:f3:cf:ef:55:08:9b:04:11:c3:9e:18:d7:
df:ee:aa:03:51:b2:34:4b:27:b2:a1:6d:80:74:dd:
70:8e:78:47:ae:ef:92:3a:85:da:83:4b:c8:5a:71:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:3E:91:00:01:7B:C7:EA:78:45:EE:6B:10:C4:F3:C9:6E:FB:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/bef26391-d7a0-3cce-a58c-0b9b66170703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
X509v3 Authority Key Identifier:
keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
sbgp-ipAddrBlock: critical
IPv4:
216.38.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:41:c0:1f:24:b4:83:b3:76:88:80:07:df:9a:79:a3:40:95:
4c:0a:5b:6a:d8:23:b2:22:7e:a0:17:ce:46:ca:a3:12:ec:85:
f3:08:a1:5b:81:99:a5:2c:eb:3f:d6:7b:23:db:f6:c1:b3:96:
23:e4:aa:c5:43:2b:98:d6:39:42:ef:ac:ac:ed:81:fb:4e:05:
8e:e3:d0:54:02:51:25:d1:f0:a4:83:ec:da:12:df:2e:25:be:
02:fc:fa:8b:6e:03:98:1a:3e:cd:54:52:45:77:e4:27:b5:06:
ab:20:6d:54:0e:12:50:1c:da:9d:7e:0e:5f:b3:25:d7:21:05:
b5:f6:44:3e:13:cb:41:a3:28:e8:be:01:0e:6f:af:0c:75:65:
ed:ec:30:a8:2c:99:7d:74:94:11:ec:39:8d:e0:a9:43:ea:9f:
c3:b0:80:0e:c7:a1:93:ac:f3:0b:89:91:b1:cf:b2:bd:94:51:
59:25:8e:41:e7:f6:36:d2:46:db:5a:c2:d6:7b:ce:b4:d5:fa:
68:b0:53:55:0c:2a:1f:0d:57:22:1b:63:65:7d:06:dd:a2:7e:
7b:60:66:8d:4c:ac:77:19:65:44:ab:1b:fc:2d:55:29:af:28:
80:2f:60:20:ec:9d:05:c7:88:74:a7:ce:3f:8f:3f:47:4f:11:
cd:2d:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:20 2026 by rpki-client