
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3754b53b-bd6d-3ab2-91c6-dffcc3227967.roa
File: 3754b53b-bd6d-3ab2-91c6-dffcc3227967.roa (raw, json)
Hash identifier: eetLD62AUlPGRyqi/oSIAslZ+QUdENMKm8Ygjm/2Qj4=
Subject key identifier: 4F:BE:72:2E:9C:B0:84:81:03:70:E5:DC:0B:76:E2:65:0E:1B:18:1B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D3DFFE359C85CC012091F1500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3754b53b-bd6d-3ab2-91c6-dffcc3227967.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396572
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:e3:59:c8:5c:c0:12:09:1f:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=6577443d-064c-4652-ba1a-628694c34c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0f:39:fc:09:5c:97:d7:8b:2f:b4:d6:8e:3a:
d0:d7:73:e6:25:0c:66:20:fd:cd:47:78:69:52:98:
7a:c3:d1:1a:11:a0:7a:d8:f7:98:ed:d4:47:24:0d:
aa:76:1c:ed:83:8f:d2:96:3f:c4:0f:de:65:e2:a3:
16:e0:1e:e7:58:be:35:c3:f5:43:47:ef:fc:d4:39:
60:39:6d:94:10:46:0c:05:fe:cf:24:07:4d:cd:75:
3a:24:2d:11:a1:59:96:fe:f6:20:b0:78:a7:01:66:
1b:91:b8:62:e2:fd:b9:96:1e:50:46:14:4c:90:ef:
f5:9b:1d:84:7e:97:78:e8:9e:da:c3:30:2d:6a:f1:
06:2e:a0:b7:70:81:ed:a6:f8:6d:27:20:07:a7:c3:
f3:22:8c:4b:11:b0:0b:80:98:87:57:8f:94:e4:e9:
54:fa:ff:19:cd:11:c7:68:d6:12:61:2c:29:16:17:
91:53:73:ac:c6:0e:52:fd:3d:11:24:c6:c5:34:19:
43:53:c9:e2:63:75:cd:11:e0:e9:9e:f1:fe:f1:be:
98:06:5f:e6:39:04:12:1a:ff:a5:b5:35:1a:a2:0b:
4b:6d:ee:03:2d:b2:fd:de:b9:2b:2c:4a:be:1e:0c:
c8:fa:ed:ca:e4:72:cd:2e:4b:97:02:67:97:48:8c:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:72:2E:9C:B0:84:81:03:70:E5:DC:0B:76:E2:65:0E:1B:18:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3754b53b-bd6d-3ab2-91c6-dffcc3227967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:a4:f7:a5:27:76:1a:74:2b:ad:8c:a9:67:1f:a9:92:af:9b:
ed:13:d2:36:50:8b:a0:46:bb:4f:57:29:3d:a6:61:b8:75:4b:
d8:19:8b:65:8f:b1:61:6b:6b:90:fa:89:c1:b8:58:89:26:f3:
db:58:28:a0:5f:23:13:48:c2:a3:6a:a1:b1:e2:89:c9:a5:88:
77:2b:84:29:69:3c:24:d9:55:76:00:76:b4:2b:6e:e4:dc:02:
dc:81:e8:56:fd:35:69:65:9e:61:9e:f9:0e:8b:0e:60:a3:4f:
09:f5:74:e0:5e:08:02:0d:fc:2b:72:ff:1b:eb:12:90:bf:34:
43:57:e2:89:c4:30:54:94:87:d3:c6:04:9a:eb:0c:f0:23:96:
ba:3f:9a:ae:2f:fe:5c:ee:09:a6:70:35:30:96:21:4b:34:e5:
1e:2c:8c:69:b5:dc:09:ff:88:5f:86:47:a9:8b:2d:b3:7d:e0:
65:39:5e:3b:dd:1e:74:36:20:e6:19:bc:3c:90:81:1a:35:fe:
dc:ae:62:db:4f:b7:2d:9c:fa:cb:5e:63:32:ac:c1:a6:81:51:
ab:46:8e:3f:34:f0:f2:35:b8:d6:76:ed:97:01:9a:ed:db:c1:
b9:2a:b2:53:4f:fc:14:30:c3:6f:15:a9:90:9a:6e:28:56:d4:
1d:f2:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:38 2026 by rpki-client