
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94bc1598-7bff-3c82-b444-2ffd14588c6a.roa
File: 94bc1598-7bff-3c82-b444-2ffd14588c6a.roa (raw, json)
Hash identifier: Lg9/yQnUoIfrSb2zAsAfwXSad3OA9qzp2u4g0iuCuNk=
Subject key identifier: EE:FE:CD:3C:F5:08:C0:11:E6:FE:7F:D2:7F:B7:71:2A:72:2D:77:F4
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D3DFFDB3FB585D29C90F5B6C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94bc1598-7bff-3c82-b444-2ffd14588c6a.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 397210
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:db:3f:b5:85:d2:9c:90:f5:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=042393ba-706e-4062-b258-dd0e3e58e5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:e1:40:25:0a:64:ef:0e:3f:e5:65:f0:15:
7e:e6:7d:9f:a8:8d:f6:40:f5:9f:c3:a4:47:a7:b4:
ee:dc:c9:d3:e0:c0:56:03:fc:9d:55:40:f8:71:f8:
18:bb:e1:29:0e:8c:53:48:8f:01:f1:af:13:09:87:
10:7d:6e:57:25:60:34:76:a9:c2:b7:2f:5a:b6:de:
8b:90:94:aa:e2:1e:0f:93:94:28:65:5b:b0:d3:9e:
83:38:c2:83:6d:30:06:9b:4b:df:42:0e:7b:57:b7:
11:a3:89:68:1c:2d:d4:bd:1d:37:0d:37:0f:3d:29:
6a:46:39:66:f4:28:37:f8:90:28:22:e8:f3:8b:f9:
47:98:9a:f7:b9:88:3b:49:49:5a:16:e9:6f:6d:be:
c7:67:aa:6c:dd:00:5a:c3:51:29:8c:11:88:e4:4d:
7a:6f:07:3b:8c:4d:2d:47:dd:53:c5:d8:b4:ee:a9:
ae:22:55:ab:60:3a:ed:3a:51:52:55:19:0a:bc:bc:
44:76:6d:5a:d0:9f:57:2c:28:e4:82:8c:34:5e:d9:
5a:9f:a1:f1:a6:7a:11:b4:4f:6e:6e:47:1a:72:5d:
b9:0c:a4:45:b9:bb:a3:d9:24:dc:a2:32:f8:09:f6:
ca:f8:f2:59:86:41:b3:69:65:09:97:98:13:24:10:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FE:CD:3C:F5:08:C0:11:E6:FE:7F:D2:7F:B7:71:2A:72:2D:77:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94bc1598-7bff-3c82-b444-2ffd14588c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:0a:13:44:27:89:d7:7f:95:2e:e6:14:c1:9e:a5:fb:75:2c:
89:cb:5a:fe:b9:12:a5:90:c8:e9:40:bb:74:f4:d2:16:77:35:
d4:73:c1:21:be:34:9e:66:4e:0f:30:31:8f:dc:d2:67:66:a8:
db:18:41:60:6f:19:bd:15:d7:e8:a9:7f:70:fe:91:5f:47:d9:
51:aa:75:a4:2a:13:ea:bc:dd:70:fa:45:bd:e7:b3:18:aa:dd:
db:d9:96:00:21:2e:63:a7:a5:c4:0c:43:1f:99:d8:2c:9e:8e:
eb:82:e3:1f:62:98:27:f9:33:f2:48:00:8d:eb:85:91:cd:71:
15:90:5f:8c:ec:97:0a:3c:5e:82:4c:8f:60:72:f5:98:c3:e7:
a5:a3:bc:6a:a9:fd:40:1e:10:ae:50:dd:3a:08:67:46:5a:f4:
05:a6:12:e0:47:f6:57:57:91:97:0a:12:07:ab:9f:e4:c8:a0:
63:b9:d4:30:0a:a8:8e:8c:01:0a:9e:82:0d:33:30:d1:a7:41:
79:be:8d:d4:46:dd:8e:72:19:86:5f:eb:6f:c6:b4:ba:3c:a8:
28:3d:6b:c3:27:1d:d9:02:c4:6f:cf:a1:59:9a:67:76:20:1f:
3f:9a:dd:a8:85:b1:99:ca:11:1d:dc:3f:80:55:04:9e:37:05:
b9:05:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:57 2026 by rpki-client