
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa
File: afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa (raw, json)
Hash identifier: d4qly0gzc9kFlP0RDNt98ieCMWwxEIKOgEEFe4vfq0c=
Subject key identifier: 32:0B:00:A5:8C:6F:57:05:04:AB:A3:F1:41:47:29:2E:A6:CE:CE:60
Certificate issuer: /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial: 010D0C9F4328584D1FC957A6CE56768A50801280
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa
Signing time: Tue 10 Mar 2026 17:17:19 +0000
ROA not before: Tue 10 Mar 2026 17:17:19 +0000
ROA not after: Mon 08 Jun 2026 17:17:19 +0000
asID: 46407
IP address blocks: 173.199.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:c9:57:a6:ce:56:76:8a:50:80:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Validity
Not Before: Mar 10 17:17:19 2026 GMT
Not After : Jun 8 17:17:19 2026 GMT
Subject: CN=a88455f0-a84c-4cfb-8e61-1185f3e10155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:5c:3a:d3:98:a0:fd:b7:ca:3a:6b:4b:17:
96:bb:52:06:bb:3a:5c:70:0f:3e:00:a0:cb:55:d9:
85:5d:cd:94:a8:5f:b0:c7:a7:23:86:17:d2:09:88:
9d:97:87:d8:ef:c5:89:8e:65:6c:1e:d2:91:93:0c:
32:94:3f:e0:5c:4d:bb:bc:5d:fb:31:f1:c1:2b:79:
28:27:a1:4a:15:97:a3:c5:d0:5a:53:32:35:28:71:
6f:b5:3e:94:72:d3:6a:1c:0f:5d:b0:e4:90:64:f8:
0a:64:88:c2:a3:ab:44:8b:5d:e4:74:82:ce:0d:f1:
75:16:b9:55:03:ec:12:5a:5c:77:5b:ab:f7:24:e5:
f2:14:a7:db:e4:0d:21:28:0b:61:c2:51:1b:fd:5b:
79:f0:09:3b:9a:41:20:c8:8d:d7:c8:ad:54:ad:7f:
b0:94:3b:9f:0d:0e:c7:4c:6e:ab:18:f5:7d:00:08:
7d:0a:a5:ff:d4:f9:9b:66:68:7a:77:82:77:45:69:
58:c8:14:a8:13:a7:11:e8:e0:8e:fc:2e:76:2d:66:
1b:2b:9b:70:2e:80:ea:c5:f2:06:a5:95:0a:44:70:
7b:a2:81:07:7c:12:fb:d7:48:67:8b:e9:93:01:fd:
75:b6:47:06:b0:49:88:e6:ab:f8:db:12:80:d8:8c:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:00:A5:8C:6F:57:05:04:AB:A3:F1:41:47:29:2E:A6:CE:CE:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
X509v3 Authority Key Identifier:
keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.199.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:aa:23:fb:61:1d:e8:e0:4a:86:20:d1:62:d3:c1:88:64:04:
e1:42:4e:25:4b:98:77:72:40:c5:47:cd:74:6a:45:ee:5f:77:
d1:fd:e1:f8:22:91:b6:ff:2d:87:1c:7e:e0:80:6f:6a:07:2e:
42:1e:a1:ca:f0:24:09:31:f6:22:93:51:de:7e:93:6e:7a:51:
77:e4:a0:e3:7a:29:8e:bf:f8:e7:ee:ff:53:d0:e1:a1:32:77:
9c:7a:b1:de:9e:c7:3e:a9:d5:70:7f:75:dc:bc:43:3d:c8:3d:
9c:85:ec:88:62:22:b0:b8:51:0e:c2:c8:7d:be:d6:8e:56:05:
f2:14:17:ed:a9:35:c0:17:52:74:34:b2:6a:22:bc:eb:21:40:
3a:92:f4:e2:7f:30:7a:ae:24:d1:00:9c:54:b1:78:e2:0f:e8:
ef:7a:5d:24:b2:0f:09:9c:cb:91:1c:85:11:7d:fc:5d:c6:47:
91:3a:06:c0:3f:b0:ab:3a:05:20:75:59:0f:a0:16:77:58:a6:
6b:48:3d:90:57:1e:3a:f1:5d:57:dc:25:07:f3:f0:a9:af:b2:
d6:75:c8:1c:d1:34:6f:a1:3e:00:63:b8:f5:54:01:fa:aa:3f:
94:a5:25:2b:b6:9d:f9:b4:5c:67:56:9a:a1:9f:bd:47:4a:70:
f0:4c:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:32:10 2026 by rpki-client