
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa
File: cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa (raw, json)
Hash identifier: n9b6HVr1BhZo38u/xuDQCBmRfKWNFO58ZEJ+Yq2ko4Y=
Subject key identifier: BC:AB:E4:DA:32:0F:A6:6C:A5:EB:A5:38:80:B6:7A:AA:28:98:DC:62
Certificate issuer: /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial: 010D0C9F4328584F2C225CC7823B1AD41F25AA40
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa
Signing time: Mon 14 Sep 2026 13:00:12 +0000
ROA not before: Mon 14 Sep 2026 13:00:12 +0000
ROA not after: Sun 13 Dec 2026 14:00:12 +0000
asID: 393336
IP address blocks: 169.197.160.0/22 maxlen: 22
170.39.172.0/22 maxlen: 22
208.65.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2c:22:5c:c7:82:3b:1a:d4:1f:25:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
Validity
Not Before: Sep 14 13:00:12 2026 GMT
Not After : Dec 13 14:00:12 2026 GMT
Subject: CN=e7e205c1-632f-4dd5-9283-9538ac160a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:3b:17:ba:c1:08:51:31:df:4c:0b:96:24:
d1:e9:83:6d:44:b3:8f:04:92:80:a1:7e:8d:24:ca:
33:7f:e1:85:4a:12:e8:4a:6c:06:cc:1f:3e:88:dc:
44:f0:53:82:ca:50:e4:53:42:e5:1d:e4:2c:ba:a9:
a9:96:39:d9:45:ed:39:7a:78:aa:10:13:f8:31:5a:
25:b7:a0:89:e4:4b:ac:c8:20:40:37:76:b1:30:3e:
54:89:0e:67:60:fc:1b:22:88:07:e9:d5:a8:2f:a5:
3b:77:17:0d:be:98:d8:b4:45:12:48:b8:96:87:d0:
d9:64:44:69:df:79:e4:17:16:5a:95:95:6e:f5:03:
a5:bd:ef:58:96:77:f4:7b:2f:18:e0:db:19:f9:10:
4a:89:9b:4c:82:9d:6b:4b:43:79:0a:ef:dd:74:95:
86:16:f1:53:dc:89:0c:82:f2:dd:eb:41:e3:34:c4:
e5:4e:64:e6:5e:5c:81:8c:69:51:b4:cd:fe:1e:97:
39:10:37:61:d1:e6:45:fe:95:a0:60:2c:93:50:b1:
4b:90:89:06:f9:83:d5:91:a2:31:6b:4f:28:6f:37:
36:b4:e0:19:bc:98:ae:e9:32:18:4d:19:21:67:de:
ce:32:f6:9f:bd:62:31:e3:a5:07:62:e7:b7:4f:8a:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:E4:DA:32:0F:A6:6C:A5:EB:A5:38:80:B6:7A:AA:28:98:DC:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
X509v3 Authority Key Identifier:
keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
sbgp-ipAddrBlock: critical
IPv4:
169.197.160.0/22
170.39.172.0/22
208.65.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:67:66:bd:6f:8f:b8:33:7f:c3:f1:7f:51:2f:81:0f:37:a3:
9c:3d:3c:f8:31:cd:e1:61:b1:a9:d3:80:02:17:49:d3:d4:f4:
2d:fa:29:94:b0:e5:37:35:64:70:d1:e5:ed:b0:09:8a:8f:aa:
d3:9c:24:32:00:9d:18:7c:a0:0d:a4:0c:7f:ff:c6:b1:26:2a:
34:e5:e5:bc:e1:ff:d1:7d:77:35:0f:33:a3:08:a4:4b:76:c5:
1d:f6:81:83:7b:d3:69:71:e5:02:1e:58:a3:2f:ee:a5:1c:fd:
8e:57:68:a0:c0:27:c0:34:b8:e6:27:84:5a:4a:47:71:79:96:
09:6e:24:b4:7a:c9:be:f5:be:91:98:54:6a:fc:10:95:34:3c:
41:9a:d7:11:54:2a:7d:7a:2f:73:a4:6c:f6:f2:04:d9:5c:ed:
64:59:77:52:10:a3:7a:b6:fa:56:c9:8a:6d:5f:eb:72:4b:0c:
e6:b1:5c:dd:fa:7e:04:04:9f:b6:7f:4d:62:62:8c:27:f3:ff:
fc:66:cd:ed:9d:7f:8b:74:b9:4d:c1:1d:10:8f:75:49:28:7a:
d7:23:79:91:c1:f7:1c:6b:1d:42:f2:1e:10:c6:37:dc:1b:6c:
45:06:44:0a:39:25:5f:d1:64:ee:d6:bc:37:97:cd:83:7b:9a:
6d:99:00:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:47:38 2026 by rpki-client