
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
File: 6b20c6c8-b544-3233-9c89-ea3eead2913d.roa (raw, json)
Hash identifier: YhkN4sA2iQ+QXJ/XkEJ5D0iyucShvKERpEuwBzpT9Oo=
Subject key identifier: FF:AC:A0:CE:E4:89:65:B1:F2:3B:78:62:DE:F3:AE:C3:C7:B0:06:5C
Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial: 010D0C9F4328584ED861E924954D2957EBDB3460
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 18914
IP address blocks: 204.8.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:61:e9:24:95:4d:29:57:eb:db:34:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=0dd1c1e3-96d4-4bd2-9b9a-1b67b67b007a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:3c:a7:ea:0d:9b:09:d7:c8:e6:b2:5c:bb:
5f:c5:0e:92:78:d9:04:2d:c5:a5:8f:68:03:b4:d9:
2d:fd:c9:17:08:ef:2c:5f:bf:2b:61:de:1b:2d:07:
ed:7a:7e:40:4f:8e:ed:24:cb:39:73:54:7b:5b:b2:
4b:04:af:d5:20:91:ee:d7:df:c8:f6:23:0b:b2:12:
1f:91:df:72:83:fc:66:f6:12:55:47:df:49:2c:1c:
ff:31:0f:a4:d1:ac:f6:8c:08:e8:e5:27:58:f8:71:
96:96:dc:d2:8b:d4:16:46:ca:e8:a9:8a:05:84:e7:
8f:1d:a1:20:0f:a7:7a:78:87:8c:5b:89:44:e1:7e:
a6:6c:51:f4:61:d5:de:ee:db:45:0a:04:88:50:76:
bf:b4:9a:1a:76:4f:10:2f:f2:45:e4:d9:66:6e:94:
cf:e7:7b:e6:c7:03:3a:84:51:19:36:73:46:11:e1:
f2:c2:6c:8c:9f:6e:70:da:20:30:cb:93:b1:4a:f8:
65:f8:14:7e:c3:a0:37:68:bf:9c:75:ee:3b:35:97:
99:ed:2b:df:47:9b:b9:39:64:ee:c2:92:6f:cc:25:
63:58:9b:cd:af:35:45:05:5d:ee:71:30:6b:a8:96:
77:98:8d:9f:36:9e:d7:4b:e2:88:a3:9c:e0:f0:eb:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AC:A0:CE:E4:89:65:B1:F2:3B:78:62:DE:F3:AE:C3:C7:B0:06:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
X509v3 Authority Key Identifier:
keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:ef:92:99:2e:e1:02:12:d1:26:e5:b3:ec:be:af:af:32:4d:
0c:1c:f2:a8:75:91:67:9e:4b:41:05:c9:43:e1:e5:02:43:b0:
f4:5d:08:96:2e:86:14:1e:dd:1d:93:e1:98:c3:8e:2d:4c:18:
25:3b:a1:fe:1c:d2:d7:c0:c4:05:4f:9d:56:74:66:50:d4:a9:
b7:0e:eb:5f:59:00:cf:04:1f:2e:e8:77:fd:6c:c0:e0:08:ef:
38:b1:8c:b6:cf:6d:b4:57:0e:51:36:29:f8:41:e1:7d:cf:54:
e1:0f:d8:2b:b2:8f:2c:61:6e:58:cd:2d:c2:dc:e0:98:32:24:
9b:ff:56:a0:f8:54:96:9f:fd:77:13:d5:7e:a9:45:68:6b:fe:
66:26:3c:a8:a0:03:be:67:d8:77:18:ee:85:ea:6e:aa:0d:23:
43:51:66:e4:4c:ba:6c:b5:8a:53:e7:85:26:85:71:cf:2b:31:
8a:89:8e:c5:e2:63:d1:78:c1:0f:74:f3:0d:65:19:a1:f1:b8:
fc:af:a0:66:e0:87:36:6c:2c:86:31:99:47:89:ba:c3:ab:48:
c7:7b:a7:45:28:78:37:1f:a4:e2:90:c7:de:52:6b:82:d6:b2:
46:08:79:39:85:d0:ae:5c:94:74:04:f3:ad:88:ed:cf:f3:c3:
d3:1b:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:45:31 2026 by rpki-client