
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8d456bdf-dc21-332e-b55e-05623dcb6140.roa
File: 8d456bdf-dc21-332e-b55e-05623dcb6140.roa (raw, json)
Hash identifier: sAyd/ZxAYL1yGIDH8iX4VWSpEN5NM5eKKjdBqrDzDO8=
Subject key identifier: E8:2E:C8:8C:09:5A:EC:9F:0D:EC:F7:5B:05:83:61:11:CB:35:B5:E6
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584D40CB3CF778C902F3A2032500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8d456bdf-dc21-332e-b55e-05623dcb6140.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 33363
IP address blocks: 24.160.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:3c:f7:78:c9:02:f3:a2:03:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=6f7c3c63-c8bf-4348-b9f3-488503090a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:05:a5:88:5f:39:b9:ea:d8:45:6e:d2:84:
60:ff:21:77:ce:3b:3b:39:ac:74:0b:97:44:bf:a7:
8c:61:fe:f6:3b:0a:e1:32:fa:65:9d:3b:fd:74:69:
b8:e1:44:e2:64:24:ff:51:f9:1d:6f:38:0f:bc:2a:
7a:27:46:df:05:48:6e:02:ad:9d:3e:49:12:ba:1e:
cd:a6:b3:5d:1c:aa:86:7f:cd:54:5a:b7:f6:09:2c:
3a:0a:bf:7b:16:95:c2:f5:59:69:20:b1:ef:73:d5:
79:a2:05:7e:c5:3b:22:bd:94:65:c5:1e:09:9a:f0:
2d:7d:57:5a:6b:15:aa:83:65:46:0d:2f:4a:ee:f6:
16:4c:c1:53:d0:7f:bb:da:7f:d3:82:09:d5:5e:62:
d3:44:d0:09:be:63:17:b6:fa:ea:67:ee:c6:27:77:
f3:1a:d5:c3:2d:1b:52:1f:ee:06:f0:05:dd:48:a6:
8e:67:6a:33:ab:ed:b1:55:c8:2e:c1:f7:04:20:60:
e5:3a:fa:d1:35:f0:ed:82:06:b9:df:e4:4e:4e:41:
30:8d:f9:f8:c6:6e:7b:96:fd:9c:86:9c:af:9c:74:
00:ec:1d:5a:e8:87:a2:2f:9c:a7:b8:3b:a3:38:11:
df:89:4a:85:5e:17:9a:bc:4e:7b:8f:8a:d0:21:80:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2E:C8:8C:09:5A:EC:9F:0D:EC:F7:5B:05:83:61:11:CB:35:B5:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8d456bdf-dc21-332e-b55e-05623dcb6140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.160.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:e3:ec:cd:73:70:67:1e:1a:ff:7a:9b:e7:4b:5d:3f:f0:d3:
a6:41:0b:4e:39:77:4a:ef:e7:68:ca:4f:cf:ae:ba:ad:0c:2a:
37:39:c7:93:e9:41:55:36:e8:b9:6d:9c:4c:25:fd:21:d4:23:
a2:48:ab:27:0c:d1:fb:82:95:db:38:7e:23:e2:60:bf:fe:09:
e6:3e:61:06:4a:8b:5b:20:a2:c0:2a:36:74:2c:5d:66:c5:d1:
60:d5:ad:24:19:a7:d9:1a:68:37:e2:c8:8b:89:09:7c:66:93:
7b:11:d0:f2:7a:f2:05:96:d4:fa:8b:a5:f4:75:e3:b1:ee:9e:
29:97:2e:dc:6f:7a:95:13:86:01:06:47:3b:97:e3:2d:d7:59:
7d:2f:c4:2b:7e:41:fb:5c:21:6f:54:c5:d7:fe:60:c2:65:12:
1b:9e:1c:fb:22:8e:82:83:f4:a9:5e:2e:49:ef:35:7a:1c:c3:
c9:23:21:c0:2d:38:a9:11:09:30:a4:89:c4:8f:1b:81:8f:40:
6f:df:6c:54:35:06:06:98:07:25:a1:e2:1a:6c:6b:3d:8e:f3:
22:e5:e7:8a:3d:14:8d:5f:64:fd:5c:8f:8a:ba:ce:eb:4b:47:
d3:b5:2b:9e:a1:fb:3d:48:3e:f0:35:fe:44:97:e2:b3:10:32:
e5:42:78:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:01 2026 by rpki-client