
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/acff6f76-3542-3da7-84bf-5da0636555bd.roa
File: acff6f76-3542-3da7-84bf-5da0636555bd.roa (raw, json)
Hash identifier: 2zq8oyIGLxiaKAXqMg9zV9x+lY8Awu0BFrrPUEcBA2I=
Subject key identifier: 0C:28:2E:BB:03:1C:4E:67:C3:1E:DF:11:E7:75:EF:20:72:3B:43:4D
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584D20AF4E219213EE9C6AC4E340
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/acff6f76-3542-3da7-84bf-5da0636555bd.roa
Signing time: Wed 11 Mar 2026 01:00:32 +0000
ROA not before: Wed 11 Mar 2026 01:00:32 +0000
ROA not after: Tue 09 Jun 2026 01:00:32 +0000
asID: 0
IP address blocks: 198.255.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:20:af:4e:21:92:13:ee:9c:6a:c4:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 11 01:00:32 2026 GMT
Not After : Jun 9 01:00:32 2026 GMT
Subject: CN=106d56b6-8d24-4526-9e75-a1f7cfc510ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fe:4a:22:d4:35:d7:8e:83:d9:41:51:fc:df:
73:cd:ba:64:8f:05:0b:9e:82:3c:48:8c:d9:3e:51:
a1:79:4b:4e:9a:5d:06:b9:e0:85:d1:cf:31:3e:90:
d4:b4:c3:9d:a3:ce:06:0d:d5:89:9a:d8:2e:d1:4e:
ff:da:fe:8e:1a:24:20:69:44:4b:09:a4:17:e3:dc:
d9:7f:ec:d3:c5:6b:4c:26:62:48:88:e6:0b:65:65:
fb:f1:32:f0:a7:47:b3:56:b5:d5:f5:4d:0f:8a:b8:
68:12:8a:91:e9:6d:ce:6d:e9:db:f8:47:8c:5d:60:
40:84:7a:01:82:6f:a3:ba:85:e4:d7:7a:91:70:34:
0f:15:0e:5e:dc:aa:66:a4:0c:a8:00:d3:df:72:1c:
3a:a0:06:41:c1:d9:78:5b:bf:dd:fa:b6:ba:29:aa:
08:4a:04:d7:05:67:8c:63:05:b7:f2:6a:37:4a:59:
cf:05:73:3c:92:0c:0a:d7:30:73:2d:5a:17:05:bc:
3a:0d:28:a5:d7:43:4a:ee:39:75:1f:6d:7e:6f:e9:
49:bc:aa:e3:22:75:2c:c5:0e:50:39:79:30:44:e2:
a8:ae:c8:e0:fd:4a:68:cd:76:f1:49:96:9a:9b:9f:
79:ba:21:1f:4a:e8:60:cd:c1:55:a2:0d:66:09:80:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:2E:BB:03:1C:4E:67:C3:1E:DF:11:E7:75:EF:20:72:3B:43:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/acff6f76-3542-3da7-84bf-5da0636555bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.255.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:6f:b9:de:ff:00:73:8a:e9:81:04:91:32:3a:aa:89:0f:fd:
d8:b1:a9:f3:55:a0:2a:33:16:c5:8a:6f:ac:07:34:ab:8a:a2:
b3:b2:cd:04:d7:e5:6c:f3:17:68:15:29:20:cf:3d:44:00:94:
48:3c:06:ce:ca:5b:ec:dd:10:c4:38:40:c8:ea:b6:e6:91:f4:
01:b4:93:e9:b8:75:21:95:05:46:af:ea:b3:35:3f:0c:00:89:
de:c2:99:58:0b:de:3a:fb:85:5d:ae:98:ae:e3:47:d6:70:87:
d4:0d:22:ee:4d:05:6a:67:27:94:a5:bf:0c:c4:fc:4a:99:48:
0b:92:3a:a6:7d:c7:6f:41:35:fd:43:09:ff:52:67:8b:b7:ed:
81:3d:15:3e:80:68:d2:5b:d4:e9:e1:77:32:95:48:d1:4f:de:
22:41:d7:14:58:6e:e4:a2:9c:dd:42:14:06:c0:bd:13:fb:30:
4e:32:b2:66:9a:94:27:89:a2:ff:f7:01:1b:f9:30:07:3f:bb:
94:66:25:65:66:07:83:aa:cc:1f:4e:a4:96:d1:27:63:96:17:
d3:16:8c:39:2d:50:1e:d4:57:9b:5c:57:4b:a8:83:98:1f:50:
b9:9a:ff:28:12:6f:a7:71:c3:ba:8f:ab:f8:64:aa:c6:67:50:
1d:c9:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:19 2026 by rpki-client