
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/287ef630-99a2-3d8b-a99f-08d6be573b12.roa
File: 287ef630-99a2-3d8b-a99f-08d6be573b12.roa (raw, json)
Hash identifier: C8lK73nlvj8zHxe65QhQ9jpl0o/Ox0vV6MD64VIMb70=
Subject key identifier: 81:5E:E6:7C:03:00:D5:09:B6:96:1A:88:0C:3A:89:AB:54:AE:61:31
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328584D24E04973D772849527415180
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/287ef630-99a2-3d8b-a99f-08d6be573b12.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 36492
IP address blocks: 209.107.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:49:73:d7:72:84:95:27:41:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=8385eb75-e3f6-4e52-bf27-411f33a05326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:da:c3:7b:47:12:ef:59:db:f7:a9:15:0a:
58:3b:e6:a4:67:75:7c:e6:e6:1f:7c:b5:7b:cd:52:
ec:f6:9e:a4:e1:75:8e:af:36:b4:bd:dd:c6:42:ce:
d8:23:12:0e:32:a6:3a:4a:45:df:41:9e:cc:64:40:
58:12:ce:f0:71:ed:01:9a:c3:86:cc:9c:c1:61:05:
af:0f:e4:97:21:79:f6:26:4f:63:30:93:71:dc:94:
8f:a6:83:c3:ee:00:bc:0b:a1:c4:06:24:f1:cf:ab:
ca:c8:90:59:47:10:22:6c:7c:75:43:12:61:7d:9a:
b9:67:6d:32:df:16:29:e8:7e:c2:c3:13:de:b8:bb:
7d:7d:36:b6:a0:5a:98:18:7f:b4:f9:b8:33:74:80:
8c:28:2c:eb:70:32:31:9d:cb:9a:6d:2a:9d:6d:c7:
1d:f8:a3:2c:b5:5a:52:c1:47:7b:e0:fd:da:d8:54:
f0:b5:07:5d:6e:81:44:ce:b6:43:c2:d7:9b:d0:c2:
00:7d:d5:37:78:33:20:ba:cc:12:66:47:f6:40:b5:
c2:84:5e:7a:c9:47:b9:ef:a7:4b:7c:67:a2:75:c7:
50:b4:c7:5d:af:02:df:4a:5e:12:c3:15:5e:54:d3:
fa:a8:9b:76:01:e2:8c:1c:92:49:22:d0:b4:49:45:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5E:E6:7C:03:00:D5:09:B6:96:1A:88:0C:3A:89:AB:54:AE:61:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/287ef630-99a2-3d8b-a99f-08d6be573b12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:e4:57:8a:c8:a0:2f:79:52:7e:54:6b:32:56:a6:8d:69:3b:
42:22:e0:40:ad:64:ee:9e:75:03:d3:cc:24:ec:84:1e:60:1a:
9d:bc:f4:ae:28:7a:7b:10:15:b4:e9:54:d2:51:a7:57:eb:3c:
85:cb:53:97:8a:c1:4c:d5:ed:ac:97:e3:cd:69:f8:eb:2f:7c:
f3:db:f3:ba:43:87:fd:3c:77:89:bc:e1:85:75:8e:22:13:83:
61:4e:4a:6b:4a:df:42:ef:85:9a:17:4e:10:92:3e:cd:9f:1f:
0d:5d:42:ce:46:fa:9f:75:2c:6a:a8:0d:06:92:f7:af:6a:5f:
6d:c8:e8:42:83:6b:40:9b:3c:83:76:4c:65:a4:ca:25:28:fb:
10:83:54:8f:43:da:81:fc:1a:24:a6:19:3b:4d:4b:4c:a9:6f:
51:1b:d9:dd:48:88:f0:38:88:d7:8d:ca:1e:85:91:9e:09:83:
e5:28:fe:50:4e:79:66:42:e8:9b:38:c0:5b:98:fb:67:05:b4:
57:3f:f9:dc:2e:90:25:70:74:33:e0:cc:ec:20:ec:9d:10:8e:
f6:c4:3d:15:07:30:53:59:45:35:68:3c:50:8e:95:16:90:d0:
69:c0:dd:22:42:17:fd:1e:ef:47:94:1d:d3:81:8c:4c:d0:9a:
c3:c5:3a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:45:21 2026 by rpki-client