
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa
File: aa5da138-9d26-3e7e-94b6-ab99c4387134.roa (raw, json)
Hash identifier: S0EG9fBJyhzbF0pX3TYf/nUut2nRqsi+JwYEamR6X0U=
Subject key identifier: 1A:60:52:68:1D:B0:B5:BB:F6:B5:45:A3:53:E3:D2:C5:BD:7C:D1:EC
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D3DFFDB815161336319F19F80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396542
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:db:81:51:61:33:63:19:f1:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=5d6e1e4e-f6a8-4c9a-84cf-c81182814124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:5c:51:b8:63:fb:bf:d3:53:0e:bc:48:38:
03:9c:21:56:c0:11:f2:12:41:86:47:88:de:82:d1:
27:8d:4e:e3:99:51:6b:62:ef:40:19:2f:a4:23:89:
c3:80:15:52:5b:be:20:77:c9:82:7e:c6:8b:9c:64:
13:1c:82:99:85:70:c1:04:e2:2f:c5:94:e8:36:a1:
60:32:8c:17:12:94:62:ba:44:d9:63:39:a4:e5:61:
27:7a:b1:80:52:ee:38:5b:56:f3:72:91:99:36:98:
6b:2b:e8:da:d2:17:e5:98:15:95:09:b9:61:f7:da:
bc:c2:a1:41:23:a9:03:fe:24:e0:11:78:67:9e:3d:
0e:3a:27:f6:c9:5e:5d:cf:c8:3d:d4:ba:f9:07:70:
b5:f9:7f:e0:b3:3a:ef:31:14:4c:bf:89:3d:5e:89:
14:45:4a:9a:c6:ba:9d:63:e1:16:58:b8:ad:bf:7e:
83:dd:4b:a9:35:29:92:2c:1f:96:99:81:c3:c8:ee:
bf:2f:d6:4a:2d:4a:49:32:6a:91:7a:4d:4a:e0:54:
6a:15:4d:1a:6e:fb:2e:23:3e:53:ee:29:48:bd:0a:
ea:6a:6b:2f:f8:89:f2:1e:eb:83:fa:35:9c:06:1a:
59:05:78:92:fd:ab:14:62:9b:55:2b:99:52:ca:9f:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:52:68:1D:B0:B5:BB:F6:B5:45:A3:53:E3:D2:C5:BD:7C:D1:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:f1:05:66:0c:7c:f1:db:d0:bf:d2:b9:48:c7:3f:09:2f:09:
88:20:fb:2e:e0:b4:0e:2e:61:c3:6e:03:53:dc:87:9c:d0:a7:
ae:64:5b:7a:b5:12:fc:f4:c4:dc:09:a0:dc:e0:35:0a:b1:6b:
ae:52:23:88:da:65:57:be:ed:eb:7b:a1:87:8f:e3:14:c1:9e:
9a:d0:28:9a:ef:d3:16:30:fe:17:f6:25:b1:34:19:40:a0:6c:
32:47:2f:ef:7d:f7:1d:89:96:82:d8:9c:fc:a5:48:5c:e4:6d:
a0:35:b3:fd:47:d6:4c:02:63:c7:60:c8:93:f8:55:55:f8:65:
4c:2f:c6:32:47:d7:1e:d2:4d:98:c2:8d:b4:e7:73:81:9c:61:
fe:39:6c:44:05:93:42:f1:1c:6e:16:53:91:8b:4b:6f:87:86:
e9:7c:53:e3:2c:3e:b6:68:3c:20:bd:87:a1:28:a9:fc:55:58:
82:72:8b:7b:da:e8:7e:c0:c9:db:a8:90:c5:6b:2c:30:43:01:
13:33:49:94:1a:1d:6d:b5:19:7d:f5:62:08:7d:1c:ee:77:5c:
cf:25:36:f6:60:a0:e0:ed:dc:55:3f:28:85:4c:b7:7c:1f:35:
e8:b3:81:d0:14:e4:be:14:c7:38:dc:4c:80:2e:b4:68:b5:bf:
95:7d:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:31 2026 by rpki-client