
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa
File: 0a6d902e-b68f-324b-862c-c6d4e9655731.roa (raw, json)
Hash identifier: SG63wGicYPAilnKxFoDh+M4hyXjGBF/S0vc+URnsXZ0=
Subject key identifier: 5F:A9:12:32:56:33:FD:89:30:E6:3D:B7:E0:92:7B:66:F4:51:EC:CF
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584D98BAA776852D2218CB954080
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa
Signing time: Thu 23 Apr 2026 01:00:24 +0000
ROA not before: Thu 23 Apr 2026 01:00:24 +0000
ROA not after: Wed 22 Jul 2026 01:00:24 +0000
asID: 16696
IP address blocks: 216.120.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:98:ba:a7:76:85:2d:22:18:cb:95:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Apr 23 01:00:24 2026 GMT
Not After : Jul 22 01:00:24 2026 GMT
Subject: CN=79c3e4f2-3dea-40e2-a760-22204aa62c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:41:19:86:49:5e:f1:c1:42:7b:93:e9:0f:
14:0c:25:f7:e1:f8:c5:3e:64:39:df:63:b9:25:ff:
4f:b9:24:01:62:ef:fb:19:9f:11:3a:88:80:4a:bb:
2b:1d:85:c8:33:9e:a5:df:21:f6:2a:2b:40:3a:66:
d4:05:9d:10:e0:f7:2f:40:c2:ce:4e:e4:d6:6e:b6:
54:bf:c6:30:b6:6f:9d:23:7c:b5:c1:05:c0:a9:55:
a2:68:2c:cd:09:61:96:80:f7:f5:04:0d:f9:e7:ce:
82:4a:14:96:c1:a0:1a:95:3b:d8:40:06:8f:63:84:
02:de:62:51:69:51:db:59:60:c8:af:e7:bb:99:dc:
64:e9:67:33:08:3f:5f:02:9c:91:72:db:72:ca:90:
b9:3f:71:37:71:57:66:11:02:91:4b:9b:d0:02:f1:
8e:f7:5c:b6:82:a0:fb:74:00:1f:25:79:f3:dc:63:
04:c0:eb:10:e8:85:1a:99:fc:0f:95:94:0c:9f:ba:
f8:fe:11:f6:37:c8:0a:cd:71:cf:b4:64:1e:a4:b1:
19:49:3f:52:27:91:11:7e:2d:58:b5:a5:67:0d:3a:
b9:f5:74:e6:ac:04:52:1b:ac:b6:23:55:fd:80:57:
33:9f:d5:fb:fe:7b:5c:8b:6c:0e:06:04:2e:df:ee:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A9:12:32:56:33:FD:89:30:E6:3D:B7:E0:92:7B:66:F4:51:EC:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0a6d902e-b68f-324b-862c-c6d4e9655731.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:44:75:b8:bf:16:74:bf:6f:a3:2d:d2:35:e7:a4:91:a9:e3:
60:18:f0:c8:21:ac:4e:ea:6e:a4:5d:38:a9:bc:56:fd:c4:e4:
70:c1:9c:51:4e:05:6d:cc:ea:c6:fa:41:53:a7:55:0a:63:c1:
34:c9:c6:33:22:71:ff:62:6e:18:fc:bf:43:47:72:68:7d:a4:
69:e5:ad:cb:d5:87:71:86:f5:d0:da:b2:48:54:bd:99:cb:1f:
b3:13:ac:ac:44:2a:61:d6:74:28:70:94:df:f5:b8:ad:9c:9d:
b1:11:66:4b:33:7c:2d:f4:26:5b:29:b5:1d:71:12:79:da:ba:
61:07:07:aa:c1:92:b0:78:b0:e3:fd:e7:0b:6d:cc:a5:38:92:
ee:ee:31:7b:a9:63:c4:5c:f4:a1:f1:a8:e3:8d:9a:47:4b:0e:
d5:3e:2c:08:da:f0:93:f1:98:71:e2:a1:63:30:5d:95:6f:1a:
48:64:83:ab:93:9b:cd:b6:1c:c1:ad:31:d9:83:ae:49:fb:d1:
16:1d:39:c5:01:f8:5b:5f:ff:87:aa:d3:44:35:eb:a5:f4:84:
a2:74:99:f6:78:29:99:0a:64:a9:c2:58:d7:c6:d3:ff:df:ef:
25:3a:cf:23:7b:da:40:8a:1b:ff:b5:06:d5:49:26:31:2e:00:
86:fc:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:55 2026 by rpki-client