
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa
File: c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa (raw, json)
Hash identifier: uHfSzBJLmyv0g/x3Ror+mzAs+RtJQRYEFPNP3uQ884s=
Subject key identifier: F7:2C:AE:6E:86:34:39:77:6A:90:83:76:0E:24:A2:E6:9D:B0:75:AB
Certificate issuer: /CN=3e08da12-c2b8-4581-b1af-e8322645d15e
Certificate serial: 010D0C9F4328584D237A6717D13008EA305F4180
Authority key identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 398448
IP address blocks: 208.93.120.0/24 maxlen: 24
208.93.121.0/24 maxlen: 24
208.93.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:67:17:d1:30:08:ea:30:5f:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08da12-c2b8-4581-b1af-e8322645d15e
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=e01127f1-2fda-4b83-9bd1-650d1d2cb439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:de:bf:1f:cc:92:4c:71:8c:5a:74:f3:9a:
25:50:01:32:7d:95:a6:d2:f1:ef:da:3c:36:29:4a:
0c:1d:03:f5:2f:49:b5:1b:e6:e6:1d:99:bb:fd:f8:
05:c0:14:8a:36:8a:17:cc:41:1f:db:08:38:2d:af:
81:46:56:7a:be:89:d6:b8:18:13:f4:df:1f:75:f2:
06:b5:6d:fa:c0:86:d8:fa:c3:31:d6:1d:f9:c8:f5:
0a:bd:ef:96:7d:ba:bb:ef:35:60:78:4f:64:56:3f:
36:6a:1e:5d:96:d6:16:9e:21:13:a0:09:25:1c:9c:
85:75:6c:9d:f4:54:51:be:0d:06:42:ca:2a:51:23:
c6:0b:49:90:ac:15:87:58:7f:81:5d:ad:09:20:7b:
bf:4d:4b:bb:b5:af:11:f6:55:32:cf:c9:2d:46:76:
0b:8d:f5:2d:e2:ff:4b:3e:48:ae:18:ca:dd:c0:41:
7e:01:44:c8:23:4b:d4:8c:2a:82:2a:f5:f8:d7:18:
d7:45:67:36:53:17:ca:c0:8b:f8:0e:97:be:55:e0:
9d:60:5e:65:26:01:ba:14:3e:7f:f8:aa:29:c9:b9:
9b:4c:ff:21:a2:b2:96:83:63:29:1f:d7:9e:48:8d:
06:b9:c2:e4:56:e0:6d:21:f1:aa:5a:ce:c4:c0:28:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:AE:6E:86:34:39:77:6A:90:83:76:0E:24:A2:E6:9D:B0:75:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl
X509v3 Authority Key Identifier:
keyid:8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.93.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:83:f3:2e:56:f9:72:7e:b1:6b:7e:d3:9d:ab:85:01:44:63:
5e:1c:5c:a9:a3:29:3a:0f:a0:5e:c1:fc:5b:01:c1:02:63:5b:
73:3e:26:69:0d:f1:1a:5b:ff:c4:aa:71:28:70:a8:1e:98:3b:
19:d2:6c:1e:52:ce:38:a2:d5:bd:0c:cb:d0:3d:a2:15:85:32:
8d:1e:13:fc:3f:a6:e1:ba:94:a5:38:7f:44:23:2d:99:b9:73:
27:69:9f:5e:9d:72:b6:9a:43:19:33:90:49:28:2a:4d:35:21:
0d:42:d5:b5:d0:83:9e:ef:bb:0d:ee:78:6e:06:d0:e7:f6:ca:
82:80:b2:17:07:48:03:01:9d:1f:3e:9e:4d:a8:27:42:47:47:
2d:c0:fc:4f:60:cf:37:95:d5:7c:82:b6:01:7b:e0:9d:16:ef:
9d:fe:37:b5:b1:06:c5:85:32:f8:d3:e4:37:ce:12:4d:89:05:
61:93:5b:7b:98:37:ee:03:41:dc:f0:f4:5b:48:10:f4:37:a7:
24:12:81:2d:72:b9:29:57:d8:44:c7:9c:73:94:8c:42:26:5f:
0e:03:a2:6e:d2:1f:97:93:45:9b:71:b1:fa:f1:33:d1:75:1a:
30:87:5a:9f:18:92:5e:a0:69:a6:34:a4:d8:45:9f:94:e5:13:
9f:c5:58:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemcX0TAI6jBfQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2UwOGRhMTItYzJiOC00NTgxLWIxYWYtZTgzMjI2NDVk
MTVlMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZTAxMTI3ZjEtMmZkYS00YjgzLTliZDEtNjUwZDFkMmNiNDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ijevx/MkkxxjFp085olUAEyfZWm0vHv2jw2
KUoMHQP1L0m1G+bmHZm7/fgFwBSKNooXzEEf2wg4La+BRlZ6vonWuBgT9N8fdfIG
tW36wIbY+sMx1h35yPUKve+Wfbq77zVgeE9kVj82ah5dltYWniEToAklHJyFdWyd
9FRRvg0GQsoqUSPGC0mQrBWHWH+BXa0JIHu/TUu7ta8R9lUyz8ktRnYLjfUt4v9L
PkiuGMrdwEF+AUTII0vUjCqCKvX41xjXRWc2UxfKwIv4Dpe+VeCdYF5lJgG6FD5/
+KopybmbTP8horKWg2MpH9eeSI0GucLkVuBtIfGqWs7EwCiJ4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPcsrm6GNDl3apCDdg4kouadsHWrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTA4
ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMyMjY0NWQxNWUvYzljZmZiYzUtOGJjZi0z
ZmM4LWE2MTgtMzFkNjBlODU0NmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UwOGRhMTItYzJiOC00NTgxLWIx
YWYtZTgzMjI2NDVkMTVlLzNlMDhkYTEyLWMyYjgtNDU4MS1iMWFmLWU4MzIyNjQ1
ZDE1ZS5jcmwwHwYDVR0jBBgwFoAUj08rWNpeVzJWK/eXMxgyPBcpDUYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zZTA4ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMy
MjY0NWQxNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F14MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKD8y5W+XJ+sWt+052rhQFEY14cXKmjKToPoF7B/FsBwQJjW3M+JmkN
8Rpb/8SqcShwqB6YOxnSbB5Szjii1b0My9A9ohWFMo0eE/w/puG6lKU4f0QjLZm5
cydpn16dcraaQxkzkEkoKk01IQ1C1bXQg57vuw3ueG4G0Of2yoKAshcHSAMBnR8+
nk2oJ0JHRy3A/E9gzzeV1XyCtgF74J0W753+N7WxBsWFMvjT5DfOEk2JBWGTW3uY
N+4DQdzw9FtIEPQ3pyQSgS1yuSlX2ETHnHOUjEImXw4Dom7SH5eTRZtxsfrxM9F1
GjCHWp8Ykl6gaaY0pNhFn5TlE5/FWC4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:41 2026 by rpki-client