
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/341baf55-f72d-3c76-a1a8-98e45e858f4d.roa
File: 341baf55-f72d-3c76-a1a8-98e45e858f4d.roa (raw, json)
Hash identifier: Ln+ws/psBC85OMYaLH+tAe0dGI/zIsuWDqGXl4ra7aQ=
Subject key identifier: 42:09:B1:AF:93:00:83:24:98:E4:86:1A:B8:A9:87:33:3E:9E:A1:46
Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial: 010D0C9F4328584D3F64E1380C41BFDBA9B04F00
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/341baf55-f72d-3c76-a1a8-98e45e858f4d.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 26211
IP address blocks: 67.231.144.0/20 maxlen: 24
148.163.128.0/19 maxlen: 24
208.84.64.0/22 maxlen: 24
208.86.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:e1:38:0c:41:bf:db:a9:b0:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=f0c4ab53-f8b8-4d14-8e65-6c5a2694b4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:f4:cf:b0:95:53:85:8f:99:f0:c5:af:ec:
75:04:7a:e8:e5:81:50:98:73:49:b4:34:0c:27:02:
5a:58:18:40:46:a3:d7:f7:b7:76:73:f1:6b:a0:d3:
c2:d4:45:5e:c4:94:0f:c5:46:8b:c1:78:d1:15:b2:
bb:16:4e:69:b1:00:da:45:61:0f:19:d2:c8:8e:48:
db:2f:e7:8c:4b:33:be:ea:c0:be:88:cd:ac:0c:d0:
b4:b9:67:79:35:90:4c:54:a3:a8:05:f9:5e:6b:4d:
01:de:b1:59:8c:ba:d7:36:9e:11:c7:a6:39:26:4d:
3a:e1:56:24:97:e3:77:c3:d8:15:f0:c2:e2:f9:de:
c9:70:dc:d4:6f:eb:ae:1b:a7:bc:67:00:73:4f:ca:
c4:24:3d:b1:a7:b6:cf:fe:41:03:74:99:ed:18:3f:
b7:9c:4e:a0:c4:f9:5c:8c:30:ec:5f:6c:19:2e:a5:
ed:a9:eb:9f:66:94:7d:3a:ae:38:94:fe:e7:59:79:
a8:d2:65:4a:d3:17:f0:29:ad:6d:a6:4d:18:6f:44:
01:3f:4d:0e:63:8e:e8:bd:a2:d7:9e:d2:13:4c:c0:
02:c1:17:e7:24:84:d3:c8:ba:60:2b:0c:9e:d6:2c:
03:5c:82:4b:1c:92:6b:41:62:ef:17:ac:4d:0d:1d:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:B1:AF:93:00:83:24:98:E4:86:1A:B8:A9:87:33:3E:9E:A1:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/341baf55-f72d-3c76-a1a8-98e45e858f4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
X509v3 Authority Key Identifier:
keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.231.144.0/20
148.163.128.0/19
208.84.64.0/22
208.86.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:9b:6f:be:40:d5:f4:4d:09:4f:56:46:18:62:75:3b:c3:d8:
bb:df:b0:1e:81:df:11:8e:f5:6b:29:d8:e3:5d:1a:0e:7f:e9:
ad:92:6e:08:a1:df:58:7f:61:19:66:6c:e8:82:bc:a1:35:66:
d1:49:c9:c6:96:93:22:ac:3f:8e:eb:7a:c4:bc:ec:c6:42:f4:
ae:26:30:ed:90:56:d6:05:ce:ca:9e:f7:a8:98:ea:72:8d:48:
a1:09:0f:10:92:1f:18:11:a6:f7:30:41:ed:d8:3a:8a:dc:37:
e3:85:b0:7d:a6:02:16:00:72:41:22:ab:49:17:73:33:b9:c8:
bb:fd:f3:1a:69:eb:81:43:b1:76:24:56:c0:42:ed:f8:30:e6:
9d:5c:a5:a0:e9:9b:20:d6:7b:61:15:76:4b:a6:2e:3e:f0:06:
58:9d:bb:55:72:a9:00:eb:f5:1b:6b:aa:d1:42:74:2c:d0:14:
e1:6b:d0:f1:b0:99:5d:70:6d:cb:c9:70:4f:5a:95:f4:d8:e1:
50:f0:34:f3:20:78:e1:41:13:b0:64:7a:94:75:8e:8d:35:2e:
7b:ca:e7:46:04:64:e2:e0:e7:c3:8a:b0:ab:c5:e0:4a:18:21:
97:66:fd:25:7b:ac:32:ce:75:a2:72:9b:ce:fc:fc:e3:08:9b:
bb:56:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:42 2026 by rpki-client