
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa
File: 328a9f9e-f8c1-360f-88b5-5283333c29d7.roa (raw, json)
Hash identifier: pHOiIPBeLdInIk6yclgEv7AOGrOQxskmRe2rkVAd3TE=
Subject key identifier: C4:84:96:BB:CD:24:8D:55:6B:66:67:AB:46:53:5B:42:7F:6A:00:9A
Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901
Certificate serial: 010D0C9F4328584D2D3F7E9A82B9641EFDBC9800
Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa
Signing time: Sun 15 Mar 2026 13:00:41 +0000
ROA not before: Sun 15 Mar 2026 13:00:41 +0000
ROA not after: Sat 13 Jun 2026 13:00:41 +0000
asID: 46694
IP address blocks: 216.229.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2d:3f:7e:9a:82:b9:64:1e:fd:bc:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901
Validity
Not Before: Mar 15 13:00:41 2026 GMT
Not After : Jun 13 13:00:41 2026 GMT
Subject: CN=896fc727-9fe7-4757-961d-ec1a6165b6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:a5:b3:79:15:93:6c:11:6d:ff:1c:3a:af:
8f:31:5b:05:70:c5:84:b9:a4:9c:3d:c6:f0:f3:11:
75:74:be:a8:ea:9f:9f:44:81:3d:e4:1d:b0:55:9e:
53:8d:0f:72:33:1d:03:64:85:73:cb:e9:1b:fb:30:
e3:40:32:d3:a1:bf:d1:d0:67:18:99:29:fa:87:80:
26:1f:30:48:a5:bd:f0:9b:3e:6b:de:cc:4b:e8:ce:
84:66:5b:6c:b2:44:fb:29:ad:1f:fd:8a:36:0f:52:
05:0f:a8:b6:45:38:ef:6f:02:09:ef:4d:67:cc:41:
69:8b:fd:ed:b4:a3:67:bc:46:b2:eb:5e:c7:7e:ee:
d8:17:1a:e7:2a:85:cb:ef:0f:74:ed:c7:14:35:c9:
4e:0c:5d:04:e3:ec:b3:a5:e6:a1:6c:d8:0b:51:39:
1d:83:2f:d4:71:e2:34:be:d8:5f:54:72:3c:04:87:
c4:f9:d8:4a:9a:01:db:cf:96:d8:de:ba:78:c3:09:
da:89:72:58:4c:90:fe:13:0e:c2:31:f8:cd:38:90:
3e:33:b5:78:27:b0:1d:92:73:02:50:90:79:31:03:
9f:c8:90:64:b0:ef:fd:3a:b8:0d:63:7b:01:44:aa:
09:b0:0c:f0:3b:c7:40:e1:4b:61:ea:72:3b:af:71:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:84:96:BB:CD:24:8D:55:6B:66:67:AB:46:53:5B:42:7F:6A:00:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl
X509v3 Authority Key Identifier:
keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
sbgp-ipAddrBlock: critical
IPv4:
216.229.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:33:8e:84:20:39:b5:3e:16:7a:43:bc:f6:f8:d1:28:3f:17:
9d:3e:7f:6c:d0:25:f0:d7:e9:24:d8:9a:14:6a:22:7d:81:ce:
a0:5b:57:ff:a9:8d:93:6b:1d:32:41:56:d7:ec:a1:69:6f:59:
e7:a0:a7:52:95:60:75:4e:0d:91:1b:c0:0f:e2:5c:e7:7e:37:
e3:8b:2d:b1:36:87:79:02:83:a1:7e:33:cf:69:b6:8a:f3:19:
c8:fd:8f:4a:1f:95:05:87:43:94:a1:da:86:90:d8:cf:dc:f9:
bb:4a:5a:20:03:7e:fc:db:40:c9:1f:4b:18:14:00:45:9a:03:
73:a2:23:c9:d2:f4:82:fb:55:29:ac:66:bf:a5:90:4b:94:91:
05:5f:e0:a8:04:85:d0:e6:1d:c8:dd:58:d6:dd:40:99:c2:f1:
4d:89:10:8f:5c:76:9e:98:fc:66:cb:e4:a9:c8:9f:d6:7d:28:
8b:f5:98:d8:68:72:ce:60:83:ab:85:8b:95:3c:ec:63:62:b0:
44:e9:2b:de:df:c0:d0:5d:1e:f0:ff:e8:1c:3c:ca:14:42:d4:
8b:0a:21:c8:27:7f:83:2f:29:d2:f0:13:9e:25:8f:71:3d:d2:
01:eb:bd:e6:33:e9:95:7a:43:46:b1:66:b2:8a:2a:02:63:22:
df:b1:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:35 2026 by rpki-client