
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa
File: b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa (raw, json)
Hash identifier: qa/suhR1ly0GkZmffhmbrDeBZ73enSLITyDq5q8VGJg=
Subject key identifier: 58:F4:06:06:FF:BE:FB:10:3F:18:75:B4:72:C3:3B:76:D5:43:00:1E
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F4328584D492A546301B4509CCED544A0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 14618
IP address blocks: 216.83.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:54:63:01:b4:50:9c:ce:d5:44:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=88bcc429-0c56-4405-b8a4-6d9e9edff72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:98:0c:e2:ac:d6:79:8e:bd:52:e1:99:ee:
db:34:1b:8f:f5:79:61:b0:d9:b1:8e:1c:96:4a:29:
67:09:88:ea:b2:16:87:13:65:d9:9a:72:c2:38:9c:
2a:7d:07:29:9b:d0:61:62:37:59:57:88:52:a4:dd:
cf:bc:6a:be:46:7c:07:b7:c1:01:a9:4f:f4:77:99:
0a:97:16:12:32:6b:a8:f3:96:6e:6e:86:a3:b3:d5:
68:19:42:52:c5:ed:75:f5:be:22:15:58:ff:22:ab:
fc:e2:e0:55:33:1b:1b:6e:9d:85:13:8f:51:b9:4b:
66:68:6a:49:2a:8e:a9:3c:fa:85:1e:0d:c4:cf:8e:
ab:9b:53:f4:28:24:27:01:80:ee:22:f2:25:5b:09:
69:15:17:7c:9e:29:3f:18:e8:c9:81:35:7e:39:8e:
a6:4a:c8:39:76:7a:43:75:b1:86:a9:dd:8a:b5:12:
22:85:b9:d0:9a:df:59:83:9c:a1:fe:3e:94:11:43:
0d:0d:2f:f2:a9:a8:da:d7:f9:f3:f2:bd:9a:27:24:
03:3e:64:52:41:54:f2:03:d0:94:a7:29:97:9c:6d:
66:f1:4a:a9:e5:b0:e6:86:cd:8f:1b:32:45:c4:da:
3e:cb:d6:5c:91:c6:b1:71:97:5a:8d:20:58:a4:7d:
46:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F4:06:06:FF:BE:FB:10:3F:18:75:B4:72:C3:3B:76:D5:43:00:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.83.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:6b:c2:08:22:2b:09:78:e0:f3:ce:ba:37:9d:c9:69:5c:35:
f6:b9:b2:1e:e2:79:c9:bc:21:a6:2c:73:cf:95:fb:59:a4:48:
3e:2d:26:7f:f3:19:e8:fb:9e:00:cc:05:0d:1d:3b:d4:da:1f:
50:fe:90:43:f3:31:b1:dc:03:36:4f:39:53:3c:90:66:0a:bd:
b6:d8:3d:68:83:23:08:79:5a:0c:8e:6b:a7:41:3a:e7:e1:76:
5a:e2:9f:a4:07:76:4d:16:7f:48:a4:a2:53:e8:54:a8:fe:e2:
3b:a3:0f:37:c9:47:fe:bb:e5:83:3e:94:cc:5d:ca:ad:19:a9:
24:9f:b4:02:53:f1:da:23:9c:81:33:c2:1b:cb:06:ce:bc:8d:
45:df:d1:57:97:e0:4a:8f:b3:f3:5a:71:e9:ab:96:f0:97:f4:
fe:cc:66:14:17:fe:d1:7b:10:d6:21:3a:58:82:d5:05:6a:be:
7e:9e:23:a5:51:17:c9:e1:59:42:a4:e8:aa:6a:55:11:27:98:
cc:60:0f:2a:a4:b4:83:8a:71:14:b2:e2:13:8e:d2:71:7a:5d:
98:70:f9:c1:33:b0:78:34:ce:0c:56:96:31:cd:30:2a:64:73:
fd:20:61:a0:ac:23:65:f6:7e:02:13:6c:29:5b:71:fc:6e:a4:
22:f8:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:09 2026 by rpki-client