
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4a50e00e-5348-3e74-b79d-2a8ca7968b69.roa
File: 4a50e00e-5348-3e74-b79d-2a8ca7968b69.roa (raw, json)
Hash identifier: aBxqto39fk8VEDZcnCZbmOQzIRl3MynSwAFABZn4k8U=
Subject key identifier: A0:01:64:22:63:57:B5:43:46:B0:A1:44:AE:3C:86:4C:2A:45:B8:B3
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584D3F64D53AAA8C7B2F65AE3F80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4a50e00e-5348-3e74-b79d-2a8ca7968b69.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 31898
IP address blocks: 161.69.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:d5:3a:aa:8c:7b:2f:65:ae:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=ed0a6d06-f207-4482-a7b4-e30a74a0374f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:d9:3b:2a:75:41:88:5a:e1:6f:d4:1d:76:
67:75:36:ed:db:af:f7:88:e8:a9:15:13:a9:3b:1c:
09:c5:d8:9f:19:40:be:ac:b5:fd:4b:dd:3f:a8:c4:
58:40:c1:a5:c9:86:b9:95:50:81:2e:17:14:ce:f7:
39:aa:25:9e:1d:64:4f:9f:8d:66:94:2c:7b:81:37:
36:0f:9c:d8:59:12:11:d8:bf:ad:2e:52:00:cb:ca:
11:5b:c7:63:74:67:9b:3a:3a:78:41:88:cf:b1:b2:
a9:54:13:3e:28:6a:f8:7f:ac:cc:cd:92:d2:00:1d:
42:fa:99:0e:c0:bb:c3:33:76:b6:cb:7d:4e:90:53:
c1:da:a4:dc:df:88:b5:69:3a:ad:ad:c5:54:0b:ca:
27:ff:79:07:0b:72:c4:67:61:3f:14:66:5d:df:a7:
8e:8e:90:f7:73:f8:da:97:6e:74:d9:da:f5:a6:a0:
2c:a0:b0:83:b9:28:be:03:89:63:a2:06:af:0f:15:
ae:03:c8:21:6e:59:9e:46:06:c0:9f:a4:83:3f:8f:
61:20:e6:53:bb:09:c0:fe:39:a8:7e:bb:26:1a:c4:
97:4d:6d:13:7c:24:62:21:3b:0b:d9:4c:ff:65:a7:
2c:d7:17:12:d1:70:38:f0:56:98:ec:9c:d1:1b:bd:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:64:22:63:57:B5:43:46:B0:A1:44:AE:3C:86:4C:2A:45:B8:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4a50e00e-5348-3e74-b79d-2a8ca7968b69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:fe:d5:90:44:2c:f5:c0:db:d0:e9:87:29:f9:f1:db:f2:fe:
d7:e6:01:d4:08:fa:3c:13:e0:e3:86:8b:23:78:61:fc:92:41:
df:e8:aa:cf:ec:37:c1:8d:90:a4:0a:72:ef:15:9d:ae:34:77:
fe:e0:74:8c:38:33:b9:e9:79:1e:12:c2:04:dc:4d:e1:98:ef:
85:40:e9:96:07:b4:52:6e:45:a0:ac:82:76:6b:f6:f7:76:f0:
dd:2d:01:ea:67:13:04:5a:27:aa:2d:f3:f0:e7:81:99:82:33:
73:59:81:73:21:36:b4:df:d9:8d:4a:f6:c5:9a:df:6b:a4:80:
f2:36:29:6d:34:d6:57:42:6e:08:e2:86:94:0e:d6:a1:1f:27:
2a:ad:12:10:33:81:36:90:f1:2b:e4:b6:9c:dd:8a:3a:ba:a7:
5c:2f:c7:eb:8a:0f:c8:d0:f1:9c:7e:aa:c2:0b:52:08:72:4c:
47:61:6e:39:15:8c:ec:81:5d:13:df:1d:44:38:0f:e4:de:2d:
09:cb:30:95:c3:5a:b1:4b:5c:28:d3:5c:9b:b7:1d:8c:a3:0b:
1f:b5:d8:06:6e:f8:2a:b2:23:e1:6c:d7:c7:23:63:5c:02:37:
d6:aa:cf:6f:f4:e9:bb:60:64:a4:05:34:fd:63:98:f1:7b:72:
0f:6c:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:07 2026 by rpki-client