
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa
File: 2ddea806-81f0-34de-aed2-4e3ace1914b0.roa (raw, json)
Hash identifier: NTJDWlSZGDIWFQArvwU7FpUnH9Au7MJK7vVjNCyVrO0=
Subject key identifier: E6:6E:F5:8E:C7:86:C4:A2:E0:CD:96:58:81:EC:46:BA:45:85:CE:5F
Certificate issuer: /CN=b59f0cf0-b1db-4139-bfc6-e624159d7343
Certificate serial: 010D0C9F4328584D95F007C3239517F4A359DEF0
Authority key identifier: AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 31898
IP address blocks: 168.151.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:07:c3:23:95:17:f4:a3:59:de:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59f0cf0-b1db-4139-bfc6-e624159d7343
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=bf08b158-707d-4deb-88ec-4a6715a32a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:8d:c8:9c:0c:28:c1:df:95:48:55:83:e8:
6f:6e:53:1c:e3:25:5d:13:50:c8:ba:04:03:90:c8:
c1:1a:26:dd:7a:a4:2c:95:6b:ea:d2:b4:2f:8e:35:
11:fc:a9:f5:4d:db:b0:7c:83:37:0d:6a:57:6f:11:
e1:17:2c:d2:bd:5e:91:53:80:d8:0e:18:9b:df:34:
2e:b5:9b:7e:30:67:51:4f:8c:d1:b8:44:5f:c5:0b:
89:55:e6:50:96:55:7d:2b:f7:87:83:49:7b:53:35:
1a:e9:fb:d2:43:81:db:af:3a:c1:b9:12:e3:a9:53:
6b:f9:6d:de:8f:52:6e:40:ee:18:fd:aa:d0:1f:bd:
71:9e:9a:33:ba:3e:aa:08:f6:ae:8d:5f:a0:44:53:
ed:f7:f5:68:6e:64:e8:f0:19:f1:4e:9e:b3:74:a4:
0d:c4:fe:4e:9b:ee:07:d8:15:0e:51:47:3a:29:36:
47:61:af:a2:d3:f5:ab:a3:25:26:4d:6f:b2:ff:a9:
69:5a:57:a6:c7:a8:5a:dd:cf:ce:ff:ff:fb:46:be:
8f:ac:37:d3:2e:5a:1a:c3:19:38:12:e5:44:6d:c9:
e6:be:e7:da:21:20:5c:9a:6f:f7:c8:69:21:b6:a7:
22:d7:4e:99:9e:30:16:3c:50:9b:66:9f:40:27:7a:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6E:F5:8E:C7:86:C4:A2:E0:CD:96:58:81:EC:46:BA:45:85:CE:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.crl
X509v3 Authority Key Identifier:
keyid:AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer
sbgp-ipAddrBlock: critical
IPv4:
168.151.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:c8:23:ac:a4:73:09:1b:c9:d1:80:4c:f1:65:06:08:c5:4c:
01:33:a0:13:ce:41:bb:d3:75:3a:53:a8:d5:7f:b1:eb:20:82:
90:e1:66:2c:79:35:bf:9f:4e:77:5f:46:5a:8e:a0:22:7f:b7:
07:ee:6d:e2:14:cd:bb:96:33:ba:88:ca:60:d7:13:d0:20:f1:
9a:e1:2b:bd:10:32:c7:a6:85:9b:cf:ef:fe:b1:77:ce:67:58:
5a:5c:86:70:94:38:d2:8f:5b:bc:5d:55:e1:29:10:81:ac:d8:
90:31:69:6d:fa:ce:f4:f3:3a:1c:8b:ea:45:d9:9a:80:79:a3:
9f:a1:ec:de:11:ce:32:59:16:2a:2d:68:f1:3a:07:f5:a2:ca:
1e:91:51:cf:ce:66:18:19:05:b1:e3:22:4d:35:1f:3e:fb:0c:
c7:d1:0a:f9:7f:38:d6:25:d8:35:20:b9:42:bc:0f:1a:a5:b7:
5e:1c:f5:27:fd:a9:a6:21:45:d9:dd:db:e4:d6:4a:c7:37:55:
91:ec:d5:a6:61:40:a5:41:61:fb:49:24:91:c7:dd:48:b9:63:
c4:12:5a:a3:e5:0a:99:06:3c:a1:9c:ff:df:a9:75:1c:c7:95:
90:d7:c1:0f:f5:ac:29:1f:84:0e:2c:85:d6:27:b6:c5:83:8d:
ed:51:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:49:22 2026 by rpki-client