
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
File: 826ab303-5f30-342d-91ae-d20393f81fa2.roa (raw, json)
Hash identifier: 3Gr3MnYqneW5jKxt+yeriUUPFYwVXEFkpQEFdh71KsM=
Subject key identifier: C6:3B:87:0D:22:BB:70:4E:79:DC:6A:E2:40:21:27:37:01:ED:BE:A0
Certificate issuer: /CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
Certificate serial: 010D0C9F4328584D3F64F214C93494074BC11000
Authority key identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 33099
IP address blocks: 207.167.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:f2:14:c9:34:94:07:4b:c1:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=b8f17d21-7ec9-4d72-aa83-c7e0b79d7d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:b5:81:97:35:65:0f:50:5f:99:2b:76:4e:
6f:4a:a0:06:ff:8d:45:1d:4e:5b:71:8e:67:71:0f:
b0:46:3c:d0:76:76:37:c2:10:88:47:e6:1a:7e:94:
15:b3:fb:24:a6:05:d3:1d:74:52:bc:97:0a:3c:0a:
6d:ee:91:2f:e8:23:d3:cb:1f:7f:29:9f:6a:eb:e0:
fb:5d:38:66:b5:98:60:e5:77:7f:4d:7e:eb:bc:96:
7b:59:e9:75:30:de:5c:3c:5f:5b:7b:bc:20:20:e4:
96:1c:58:1c:00:4f:cf:e1:d3:d5:38:86:4c:70:d6:
98:74:9e:7e:70:20:10:cd:46:ae:1d:02:b8:35:c7:
2c:ec:03:2f:81:56:bc:86:02:29:19:fa:5c:95:0e:
0b:a0:09:19:74:e4:d9:2d:0e:b4:b3:4b:83:bc:45:
15:fb:b3:ba:db:30:6e:b7:65:ad:ed:45:bf:a8:72:
33:39:81:7c:75:5d:7b:12:8d:8a:17:02:29:08:fc:
33:9d:b3:79:d4:a4:6d:ec:0f:19:2b:e4:6b:5d:b0:
9c:39:ab:57:9b:9f:b4:ee:a3:f1:e4:99:34:27:cf:
3c:68:71:27:58:08:65:18:be:cd:1a:49:ec:01:b6:
37:d0:99:99:62:9d:73:15:b3:78:d3:05:f7:77:48:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3B:87:0D:22:BB:70:4E:79:DC:6A:E2:40:21:27:37:01:ED:BE:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl
X509v3 Authority Key Identifier:
keyid:33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
sbgp-ipAddrBlock: critical
IPv4:
207.167.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:d3:57:7e:47:2e:92:62:36:92:6a:af:f8:74:7c:64:22:c0:
56:81:1b:c3:a5:29:e9:ae:18:f1:bd:de:3c:6d:db:28:27:09:
79:c1:32:1b:8e:6c:54:54:f8:0e:72:a4:f9:80:69:e4:6e:39:
46:31:52:da:1a:51:63:8d:f0:66:64:0c:db:9e:c0:cd:c9:61:
d2:8b:ad:3a:a0:ae:c0:b2:36:a9:a3:4b:5f:4c:5f:3a:fd:45:
24:a8:98:f8:54:b6:0b:e4:87:50:6b:b0:fd:52:24:ec:62:48:
db:35:80:5b:d0:30:b3:e5:d6:73:d7:cb:82:af:ca:1b:fd:5d:
5c:ee:ed:46:6f:8a:4a:22:87:a1:4d:21:cc:ac:90:1b:7c:ac:
c5:11:09:1c:5e:20:ee:f0:22:a7:d5:26:5a:ed:38:35:53:f6:
57:8c:ba:a8:7d:a1:4b:4d:9f:ba:46:9a:28:7a:21:1d:7c:b1:
10:79:32:42:d0:a6:b9:92:7b:2b:ac:30:8c:01:fc:71:a3:40:
92:df:0d:58:6d:1d:23:8a:a8:9a:f2:de:16:5a:e7:44:67:76:
b8:4d:dc:1f:e3:92:4d:7a:0a:80:54:28:a2:2a:f6:e8:c3:07:
cb:77:bd:35:3f:a2:49:c3:a5:d3:bf:98:04:5c:c3:bc:16:4b:
c7:52:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:05 2026 by rpki-client