
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa
File: 3d359667-78f9-3d87-b525-31bf659ba3c5.roa (raw, json)
Hash identifier: oxuQpkZb9nEAC8e/xiuAYeq08R3tR0HXXjXvCGD3v40=
Subject key identifier: 87:74:A8:9C:FC:DA:E5:24:67:A6:48:E1:D8:74:B2:18:5A:00:5A:DA
Certificate issuer: /CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
Certificate serial: 010D0C9F4328584D40CA5ACAB731C0309E534040
Authority key identifier: 22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 31868
IP address blocks: 216.129.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:5a:ca:b7:31:c0:30:9e:53:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=27eca21b-c980-4d73-94b7-acdc3d1124ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:88:47:bf:2a:04:8d:d1:b8:b0:50:a0:91:
94:f7:8e:74:16:ca:33:06:5e:d8:4a:2c:93:1e:74:
bb:02:60:b7:a1:ad:cf:a7:b3:d9:27:ee:cb:54:1a:
98:f6:25:e7:c1:ec:4b:ee:1b:0c:e1:9d:fc:ad:a9:
2d:4c:f8:dc:ac:b2:8b:fb:7c:46:26:c5:68:78:c4:
67:92:78:42:36:d8:4f:f6:b3:de:ef:9b:42:1d:dc:
ef:97:ab:66:76:25:69:33:53:8a:a6:81:cb:77:b1:
69:c6:aa:a5:02:52:54:08:16:81:86:13:11:32:12:
8f:6a:5d:7e:9c:5e:e5:3c:11:90:11:db:df:49:4f:
a3:40:97:61:0b:e3:61:bc:9b:0e:53:87:42:ed:8d:
bc:ef:6a:99:04:a5:f2:0d:16:9c:90:fd:1e:39:aa:
e8:8b:ce:bc:c5:49:61:eb:51:ef:4a:dd:1b:81:5f:
2a:c8:b7:08:71:86:ff:f2:b0:30:b3:33:2b:e9:ba:
45:c6:70:0c:e6:89:13:94:ea:2d:96:9e:94:82:8f:
64:4c:5b:50:f3:fe:e8:d9:67:29:56:e5:d6:c8:4a:
3f:ad:28:fb:85:a2:9e:39:73:9c:f5:bd:d1:8e:13:
0f:c6:17:e0:e3:1a:95:ce:b7:eb:a5:9c:6a:7c:7d:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:74:A8:9C:FC:DA:E5:24:67:A6:48:E1:D8:74:B2:18:5A:00:5A:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.crl
X509v3 Authority Key Identifier:
keyid:22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
sbgp-ipAddrBlock: critical
IPv4:
216.129.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:15:66:09:0f:1f:98:8d:3c:83:e4:f1:f3:54:29:bc:32:62:
66:0b:7a:ef:6c:93:d0:13:fb:a1:ee:1b:fd:38:cd:4a:7c:64:
64:c3:c8:16:d1:87:b1:93:ec:31:50:4c:3f:b9:57:f9:f0:79:
a5:59:bb:fe:50:c8:c5:a0:3c:5b:37:c8:a4:73:76:0f:b6:8b:
0b:86:03:84:7d:02:0b:92:9c:34:9e:98:6e:79:9c:bb:2b:d9:
83:96:c6:34:7e:69:17:74:48:5f:79:1e:27:d2:08:e7:0d:bf:
a0:21:5e:ae:57:5e:a7:c8:7f:a5:62:fd:8c:fb:07:85:34:79:
a5:cf:10:4d:8c:ea:13:a5:f6:43:5e:aa:33:14:29:0c:fe:e3:
31:74:0b:45:f6:68:b7:aa:7d:6d:d2:99:77:96:13:42:73:ba:
bc:7e:70:a3:cd:54:65:be:29:82:54:80:dc:6e:a4:3e:45:45:
c2:88:dc:42:d2:0c:9c:96:85:88:c4:a2:80:ad:68:87:da:ff:
dd:8e:04:20:fa:44:cc:9e:e7:49:b7:5c:a3:2d:55:da:c3:5c:
d8:d0:c6:c2:54:3f:0e:1b:36:13:fa:a6:c3:de:bf:94:26:a9:
c9:d6:e1:90:a7:28:4c:81:08:94:79:21:88:1f:9a:2b:f6:7b:
cf:40:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:55 2026 by rpki-client