
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/9bba60d3-0bdd-3615-9dee-42f9533f7786.roa
File: 9bba60d3-0bdd-3615-9dee-42f9533f7786.roa (raw, json)
Hash identifier: DHKGg6tTTEUMdpnBaTtiMn0xCHY/tRNBTgz0xNA+Eqw=
Subject key identifier: 3A:6B:6A:35:68:2C:29:9C:66:01:D5:E2:56:67:6C:21:A4:1B:E7:6E
Certificate issuer: /CN=ba2a1fed-6973-4607-a297-20f3f241a739
Certificate serial: 010D0C9F4328584DBD05938D276F0E579438FD00
Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/9bba60d3-0bdd-3615-9dee-42f9533f7786.roa
Signing time: Wed 06 May 2026 01:00:24 +0000
ROA not before: Wed 06 May 2026 01:00:24 +0000
ROA not after: Tue 04 Aug 2026 01:00:24 +0000
asID: 16509
IP address blocks: 192.207.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bd:05:93:8d:27:6f:0e:57:94:38:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739
Validity
Not Before: May 6 01:00:24 2026 GMT
Not After : Aug 4 01:00:24 2026 GMT
Subject: CN=d44480e8-ea68-4c20-ab7a-1b52fd699b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:c3:3b:2f:19:57:c0:68:60:ea:cc:0b:48:
a3:b8:4b:89:d3:2c:00:ab:47:15:08:d1:f6:69:95:
5e:90:35:1f:0a:08:38:fe:68:44:9b:d6:5a:2c:58:
cf:a6:fa:55:be:e1:08:ba:71:11:83:e3:0c:6c:ee:
a3:3d:49:3a:2d:91:eb:1a:95:cc:75:37:d1:7c:6a:
12:c5:8c:91:39:14:0f:4b:2b:33:31:ab:1a:05:97:
e8:4c:40:07:7f:00:6a:29:be:97:ec:93:b8:4d:c9:
96:24:b8:f5:8f:2c:28:2c:7b:24:5e:43:e1:be:3c:
47:a5:44:0d:14:2d:3f:48:40:08:ad:f1:99:d8:99:
2a:bf:33:0b:05:9b:3c:8a:db:e1:84:e9:14:e0:8b:
a7:82:ef:f6:da:3b:76:4b:25:60:81:78:28:32:10:
39:9b:30:5c:cd:fd:17:1d:1c:7d:c4:7e:cc:3e:db:
b2:51:9c:ad:3c:fd:42:d1:39:9e:e7:ce:b5:cb:c5:
b2:f8:ec:44:2c:ac:19:e6:30:c6:b0:cb:3c:b2:39:
95:71:11:57:ad:b8:4d:16:7c:e0:1c:22:e8:98:bc:
f9:f5:9b:37:b4:04:b5:84:eb:2b:b6:7e:c6:5f:88:
11:30:80:70:94:c9:06:bc:25:3e:59:72:bb:4c:d0:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:6A:35:68:2C:29:9C:66:01:D5:E2:56:67:6C:21:A4:1B:E7:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/9bba60d3-0bdd-3615-9dee-42f9533f7786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl
X509v3 Authority Key Identifier:
keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
sbgp-ipAddrBlock: critical
IPv4:
192.207.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:9a:75:9b:66:b5:c5:84:93:17:5d:d6:74:e3:dd:59:32:e4:
41:0c:67:f9:1e:67:f4:ea:cf:e0:12:d5:16:ed:3d:50:d7:8f:
94:a4:8b:de:7b:b1:aa:45:4a:ef:92:06:da:2b:30:df:00:91:
bd:18:6b:4b:d6:3d:9e:49:c1:5e:8b:1d:8a:99:1b:ff:e5:13:
01:48:b4:e4:99:c1:36:a7:33:f8:c5:29:c9:4d:59:b3:7b:3c:
a5:4a:3d:ae:e1:a3:3b:60:08:54:ec:ce:5e:1e:fd:a2:b8:c3:
6a:5a:44:9e:a2:ee:7b:0b:bd:64:97:43:48:95:52:9e:cf:f5:
05:7e:0f:6f:9f:11:1a:0a:78:ba:28:5e:c7:e9:6f:e8:b1:5b:
7b:57:1f:93:05:23:29:bc:45:3c:e2:16:58:a3:5a:bc:ae:c2:
3a:d9:4d:91:9a:05:36:eb:74:ea:4e:82:39:cc:50:1e:c6:87:
00:d2:b7:44:a4:d0:e0:01:3b:19:ff:0a:08:33:1b:a3:15:98:
4a:a2:93:fb:63:b4:a7:19:da:5b:22:af:59:64:55:b4:a1:1c:
65:1b:fd:35:e0:1e:52:4a:81:51:73:21:67:d9:5e:56:a0:5c:
42:4e:c1:98:ca:0c:65:03:40:44:da:fc:b0:85:0e:b7:c7:bb:
fa:fe:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:54 2026 by rpki-client