
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
File: a91f6701-0585-395e-ad18-03c9b663d0f6.roa (raw, json)
Hash identifier: C3XE+ufOqp4uBp+a8sP4DtlhG31gJSM2QGGD8eLpaUM=
Subject key identifier: 45:2A:C2:CF:86:8D:95:16:08:43:6D:A6:C2:E5:FD:8C:B5:19:C8:F9
Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial: 010D0C9F4328584D9FB573FAF483ADBDA0282CA0
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 16509
IP address blocks: 69.89.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:73:fa:f4:83:ad:bd:a0:28:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=f7a028bf-9c58-4185-9349-c6493d212b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:2c:0a:a2:15:99:18:09:68:e3:5b:31:62:
49:55:29:b0:26:8e:44:ef:a6:d8:44:0b:88:63:85:
d3:f2:0c:cf:9e:9b:65:81:ce:50:a0:70:e3:3b:4a:
3a:a1:f4:c2:9f:e9:20:d7:e6:72:9a:bd:97:32:bc:
b6:be:8e:bb:37:1e:e5:58:3e:66:f0:df:a3:06:45:
de:d0:82:99:ad:1a:7c:c5:e9:3c:07:17:96:55:40:
8d:e5:89:05:92:84:b6:53:86:4f:58:07:c1:92:6d:
62:5b:00:dc:52:ce:2c:88:ae:eb:88:7b:56:87:0d:
39:32:af:0a:a4:a9:4a:16:79:23:25:6b:cd:66:34:
fb:27:8f:d1:7d:ad:b7:3b:f5:58:4f:93:9a:7b:80:
01:5c:49:5b:1a:d6:b6:11:e2:86:a4:e0:3f:20:54:
f3:13:89:14:79:c6:71:0e:20:09:c8:9d:cb:d4:d6:
6e:b5:cc:6c:5a:da:64:3f:49:f9:57:ce:08:fe:cc:
55:1e:c3:59:cc:0c:57:76:d2:42:ef:20:32:ba:e8:
4a:6d:a9:39:36:68:95:02:5f:1e:d2:5e:0e:c6:94:
ca:67:b4:14:e7:f3:a9:e4:66:8c:83:df:60:31:7c:
4b:63:cb:bc:97:7a:4e:ca:24:3b:d3:43:46:9f:e3:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2A:C2:CF:86:8D:95:16:08:43:6D:A6:C2:E5:FD:8C:B5:19:C8:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
X509v3 Authority Key Identifier:
keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
sbgp-ipAddrBlock: critical
IPv4:
69.89.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c9:0c:1c:06:67:ac:5f:29:6a:59:d2:71:c6:f4:65:e2:ee:
5c:00:b8:a7:8d:8d:87:c6:fc:eb:13:af:77:4d:76:2d:33:57:
31:f0:bf:cd:bd:9e:19:eb:f2:d9:ec:d4:3a:c7:a6:97:fb:95:
fe:c8:54:6e:2e:4b:50:eb:8c:4c:cd:19:38:fa:b8:3e:65:c7:
eb:21:67:b0:bd:e1:7c:3b:3b:af:ed:70:e0:bb:30:94:63:52:
77:1e:b7:b5:fc:3d:11:05:e5:ac:1b:33:26:ec:35:27:28:03:
db:37:1b:9c:7d:71:2b:62:62:9b:13:8a:33:5e:0a:01:eb:df:
ab:f2:7d:fc:85:ea:8f:dd:51:af:34:24:c7:37:09:db:b7:6f:
aa:31:b8:08:c8:1e:2a:9c:54:d5:16:3d:4b:52:89:37:f2:ab:
df:0e:38:2b:c8:54:7b:c0:22:ea:ac:ba:3f:f0:1a:57:4c:6a:
ad:2e:fd:bf:a1:2f:f4:0c:14:04:d7:7f:86:ea:cb:d8:62:4f:
78:ec:15:29:b5:69:c2:cc:b8:75:d8:60:2d:c1:80:83:86:8c:
9c:f4:14:6e:03:9b:94:15:ca:f4:ee:41:93:43:dd:82:e7:be:
76:8a:1c:54:07:9d:57:71:13:49:d6:bc:a5:9e:44:00:78:08:
58:87:4c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:27:30 2026 by rpki-client