
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa
File: 1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa (raw, json)
Hash identifier: mHsvaXA86T/ZJewx6znVqFRbrbeIv/3Cm67ByUT7qFM=
Subject key identifier: C4:52:86:42:F0:C0:79:FD:C3:91:24:32:A4:44:F5:2C:32:78:28:0E
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584D0D4268F1B414F9A3ED6A75E0
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 62929
IP address blocks: 216.234.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:68:f1:b4:14:f9:a3:ed:6a:75:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=2ca72c64-a1b8-4d83-b5a2-4dfbdca1c0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:9e:9c:73:f8:3e:9f:26:e1:de:80:13:97:
9e:45:8d:89:5c:fe:98:c0:af:7a:c5:65:7e:90:87:
d3:2a:11:3b:e1:95:d3:56:30:c7:c5:09:c7:b9:28:
b5:84:21:16:74:6b:cc:6e:c6:a4:8d:59:a4:9e:fb:
61:5c:c7:31:4f:41:9d:f3:2e:fe:47:53:72:6f:70:
8e:b1:b2:13:9c:8a:b2:7e:af:5e:4b:12:96:d5:f7:
82:db:ca:d5:20:b0:45:2f:7d:0d:6f:3d:4a:35:6d:
7d:76:c9:48:ce:b5:99:66:fc:a6:a5:ba:4a:44:27:
e1:a1:4f:00:dc:8a:68:d3:8c:07:02:2e:4e:27:cf:
9e:a4:89:7c:8d:75:b8:fb:83:2a:07:02:34:fb:c0:
f9:41:75:3c:cc:89:69:79:d3:13:11:bd:18:5c:e4:
58:54:a2:9f:f2:c0:38:26:a4:2b:a6:ef:06:7c:a2:
ae:e4:67:ad:82:16:5b:6f:88:ca:43:b7:f7:f1:51:
09:fa:c0:12:24:39:98:8f:ba:ed:01:11:14:b8:c4:
46:36:a2:fd:66:85:0d:a0:18:2c:dd:2c:2e:39:15:
86:a1:17:71:fc:18:4d:b8:5e:b8:0e:fb:79:5b:86:
a7:d1:83:ae:23:d1:28:f2:fb:75:2b:9d:c3:ac:0c:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:86:42:F0:C0:79:FD:C3:91:24:32:A4:44:F5:2C:32:78:28:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.234.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:ed:15:fc:bb:0c:94:a8:a8:36:06:5b:47:90:72:6f:5b:64:
7d:a6:98:8e:69:3f:1d:25:a3:52:e6:d9:d2:ff:2c:f3:89:1b:
66:23:a3:f3:44:eb:48:49:38:fd:bd:a7:8d:d9:e5:be:3b:46:
f6:e2:32:e7:dc:15:3d:ef:e8:1c:49:47:66:1a:cb:9c:62:ef:
ac:3d:e4:75:a0:cb:7e:75:e5:9e:6f:59:30:c1:1f:32:74:87:
ee:0e:28:8b:81:dc:fe:6a:ff:15:df:3a:ac:b8:86:5d:37:60:
29:6a:6e:1f:17:d2:b6:36:8f:7e:66:77:7f:ef:0a:b8:0f:3a:
60:4b:58:9d:24:ee:90:38:d8:cc:b5:3a:c7:7a:50:ff:78:bd:
e9:47:81:93:9a:44:38:18:45:f3:39:3b:02:1e:30:16:e0:ec:
79:fc:c1:30:27:72:59:1d:21:fb:65:79:71:28:aa:6f:95:b1:
09:4c:54:a7:d0:61:ac:23:f0:cd:99:78:ec:b2:f4:a0:b4:69:
b9:7a:cb:73:62:7a:9b:95:b8:2b:d6:7e:5e:25:86:11:7b:32:
35:2b:24:a4:77:11:dc:86:3f:66:78:77:8a:96:57:63:c3:82:
e4:5a:55:b1:cf:a3:2e:0a:6f:81:11:6c:dc:2d:62:37:a8:c1:
a6:03:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:01:25 2026 by rpki-client