
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa
File: b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa (raw, json)
Hash identifier: fD0Oqe8ebOKL1X9NHln1MxN0Mp+vS5V6SY4+ZYis+us=
Subject key identifier: 03:90:F5:F0:7F:2E:16:B8:1A:B4:6D:9E:E4:9B:DE:8F:91:5F:77:A0
Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial: 010D0C9F4328584D0D427DD24EC3F8EC199D6A00
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 31898
IP address blocks: 131.229.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:7d:d2:4e:c3:f8:ec:19:9d:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=9ea446a2-268e-4571-956b-3a8a840d4e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:13:37:a0:53:41:08:ac:68:a8:40:3f:76:
1d:13:06:b6:a4:1f:bd:74:5f:99:d0:b4:29:51:65:
2b:10:a2:d2:ca:74:64:48:74:f6:b0:f0:7d:5c:fa:
88:c1:cb:0b:01:be:54:1f:18:10:1c:f3:ba:e3:40:
b4:73:ce:72:04:49:96:4a:28:5b:5f:fa:d1:86:bc:
8f:30:5e:0d:1c:90:c0:a5:95:6a:c0:43:37:8c:be:
15:0c:db:f3:ef:93:bc:c2:35:48:81:1e:c2:16:c3:
65:dc:26:ea:ec:6d:5b:e7:da:91:26:45:f2:91:63:
12:6f:f2:e7:58:75:e7:17:f1:bd:26:f1:33:b6:7e:
08:19:2d:17:15:4b:c2:82:2a:31:b3:08:86:b1:b4:
a9:f4:01:f9:03:8d:e6:41:a1:1d:4c:f4:4d:92:fa:
64:ad:d3:6e:11:60:b8:3c:18:f5:8c:19:ae:21:87:
9d:ac:14:82:0c:5f:4a:ff:eb:7d:14:0a:a6:b9:df:
7f:39:82:1c:98:04:e6:27:0a:d7:4f:7d:5d:c9:37:
4b:6b:9e:77:07:43:5e:39:8e:08:e6:3e:38:93:94:
4f:26:2b:a4:f8:37:5d:9b:b8:9e:34:49:82:93:4a:
a7:25:f5:86:6d:bc:5a:cd:44:56:47:fe:42:a8:df:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:90:F5:F0:7F:2E:16:B8:1A:B4:6D:9E:E4:9B:DE:8F:91:5F:77:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
X509v3 Authority Key Identifier:
keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
sbgp-ipAddrBlock: critical
IPv4:
131.229.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:56:41:9e:88:7c:2d:0b:77:ad:64:44:aa:e9:f0:f7:d7:52:
ab:42:1d:07:53:d7:9c:a2:30:38:4e:22:78:0e:c3:6c:a8:23:
34:9d:50:43:41:04:83:c8:06:f0:5f:9d:87:e4:03:a5:ca:b8:
17:75:db:ed:91:c5:8a:fb:e5:a7:72:49:74:c0:04:4f:6c:3d:
cc:e7:d1:29:8f:d9:19:7b:d9:a4:97:20:6a:44:a1:4c:26:aa:
37:ea:ae:90:84:60:08:c5:77:cb:c0:2d:b8:f5:84:9c:26:87:
0b:08:a4:67:c6:4c:08:aa:49:ca:1b:eb:84:f8:85:ea:f9:4f:
10:1c:4d:77:9a:d2:7d:a8:57:66:c5:ec:09:0c:8c:08:3b:c0:
33:70:3c:b4:9a:15:88:8f:02:b6:d1:79:ea:34:74:14:2f:dd:
8f:0e:a9:05:b8:6a:28:ff:a9:81:cd:61:b8:95:a4:7d:5e:a9:
50:f6:b3:94:95:b1:58:6a:5a:22:a3:a0:37:76:19:b0:de:19:
e5:46:6c:a8:82:27:fa:59:d1:c6:ed:64:f1:45:59:7b:52:54:
ed:26:13:04:f1:c3:8e:99:6f:25:76:3a:b4:4b:33:53:59:60:
87:ce:7b:58:a1:77:0d:cb:56:27:1b:a5:2e:dc:47:32:ac:4b:
50:20:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:41 2026 by rpki-client