
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa
File: b01d2239-7b24-3ca6-9965-8de122cf4593.roa (raw, json)
Hash identifier: LomxZJ04c8g9ydSr/Oh28PM5NJrZHzKKqjgV573pjjc=
Subject key identifier: C3:C3:4D:0C:75:F7:8D:3B:A3:08:BA:C9:F6:D4:0E:09:3A:76:FC:65
Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial: 010D0C9F4328584D24E1274EAF03B7136E4228C0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 14813
IP address blocks: 72.22.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e1:27:4e:af:03:b7:13:6e:42:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=ba38833b-0541-4fcf-a972-f12f98b95040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:5c:1d:ea:99:54:4e:bc:84:e8:dd:9e:4e:
f1:8d:0c:eb:0d:74:a4:67:dd:1d:f9:c5:07:af:25:
c7:92:a5:4f:f7:7f:8b:1c:9c:9c:4e:3e:71:43:b1:
99:f6:c1:21:97:38:7d:54:32:1d:33:55:55:09:8b:
d5:f8:e8:98:01:67:9e:4e:a0:d3:e1:d3:8b:f3:b9:
f8:96:77:0c:75:bc:ab:46:25:d5:bb:76:77:92:b2:
b7:ad:cd:31:7c:b1:40:9e:dc:b5:68:18:70:5f:ab:
0b:f2:44:94:5b:14:b2:e3:3e:2f:6f:e4:69:ce:86:
e6:31:90:78:68:59:8c:0a:d1:57:1f:e5:14:01:ed:
75:bb:9b:cc:7a:2f:c2:6c:91:55:ae:21:a1:f7:c7:
3b:f4:bc:1b:cb:86:ff:72:df:26:c5:5e:2c:e1:c6:
c7:83:04:4d:4f:f3:b8:56:0b:48:85:a4:9a:cb:42:
91:a4:fc:7a:6b:da:81:43:ee:e4:ba:ac:44:eb:ec:
44:fd:26:d6:08:1e:a9:0f:bc:86:f8:d1:7c:da:1a:
fd:9f:d5:0f:58:85:52:67:6b:e5:8d:1a:7b:3f:5e:
68:27:23:ae:1d:90:a2:b6:9a:3b:e4:24:33:f6:7f:
07:d5:d9:8b:c4:04:14:12:cc:d6:7f:9e:3c:64:06:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:4D:0C:75:F7:8D:3B:A3:08:BA:C9:F6:D4:0E:09:3A:76:FC:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
X509v3 Authority Key Identifier:
keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:30:e0:00:7e:09:c3:53:08:97:6b:28:f9:ca:35:96:fe:e1:
f6:28:96:b9:e1:f8:e4:ad:ff:d0:e4:89:6d:22:b9:81:0e:c0:
69:5d:7d:ac:98:68:4b:7d:6e:e1:5e:e9:cc:be:c4:d1:27:60:
78:1b:bc:0d:9c:74:82:74:9e:0f:22:0b:78:12:40:4c:5f:35:
d0:61:d0:b3:95:ef:01:52:b1:22:ed:2e:de:0a:54:1f:f5:5b:
84:74:3f:de:70:32:3b:61:7b:d0:be:0e:0c:63:22:ff:59:08:
ce:93:13:dd:87:2b:87:66:d5:58:d6:a0:27:b9:82:4e:16:14:
89:86:b2:f7:24:a2:0b:b1:0b:31:70:91:d7:95:31:44:bf:4b:
aa:55:07:50:7e:c7:6a:24:7d:74:e6:96:4c:11:2f:2f:6c:a3:
d1:73:1e:71:8b:f7:d5:6b:a1:9c:75:05:54:68:ed:5a:70:38:
4f:0b:7e:e8:b9:59:68:19:14:af:3b:62:af:12:7a:97:ac:f5:
15:fd:35:ef:83:7c:95:3f:04:32:e5:82:9f:5d:1e:33:fc:85:
3e:d2:ac:e6:87:f8:97:23:75:51:f9:1a:ab:61:05:6f:e9:94:
09:f9:8e:02:60:9b:93:e5:7e:67:ea:51:64:4a:6a:4d:85:64:
ff:ed:1c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:12 2026 by rpki-client