
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/b68f39be-2699-3e0e-a76d-a98cf991241a.roa
File: b68f39be-2699-3e0e-a76d-a98cf991241a.roa (raw, json)
Hash identifier: 00J0DZIvSyIN+ZO8GShhacnX4osWwVJmz2Yn/2PDKMk=
Subject key identifier: B7:F6:93:C4:4B:80:7D:D2:BC:9B:56:90:EA:0E:2F:99:D4:7D:26:9A
Certificate issuer: /CN=3990f0e4-fc13-467e-a765-98d98d252d56
Certificate serial: 010D0C9F4328584D19B4D9586425B7A19864C400
Authority key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/b68f39be-2699-3e0e-a76d-a98cf991241a.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 25956
IP address blocks: 66.64.0.0/18 maxlen: 24
66.196.192.0/18 maxlen: 24
67.200.128.0/17 maxlen: 24
69.94.224.0/19 maxlen: 24
74.213.0.0/18 maxlen: 24
96.43.0.0/19 maxlen: 24
139.138.128.0/18 maxlen: 24
162.252.160.0/22 maxlen: 24
192.52.188.0/22 maxlen: 24
192.64.92.0/22 maxlen: 24
199.15.164.0/22 maxlen: 24
199.115.168.0/22 maxlen: 24
199.241.248.0/21 maxlen: 24
206.126.32.0/19 maxlen: 24
207.91.128.0/18 maxlen: 24
209.94.224.0/19 maxlen: 24
209.189.232.0/21 maxlen: 24
216.74.224.0/19 maxlen: 24
216.130.240.0/20 maxlen: 24
216.201.128.0/17 maxlen: 24
216.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:d9:58:64:25:b7:a1:98:64:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3990f0e4-fc13-467e-a765-98d98d252d56
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=5baa974c-f42f-4d43-a31d-3849e70c3d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:d4:e1:e7:5a:20:e4:d9:a3:c4:4b:38:19:
fb:31:68:29:d4:6e:dd:9a:17:a9:de:fe:63:1e:fa:
b8:28:0c:af:a8:d6:08:64:23:4b:ce:b6:d8:bf:77:
a2:dd:9e:a9:40:cd:2e:4a:11:af:2e:e7:b5:83:c8:
a4:51:e4:a5:86:7e:f4:f1:27:e9:19:63:5c:e7:2b:
a5:54:6b:fa:36:3c:db:3c:1f:32:c9:dc:d5:db:8f:
96:68:6c:3e:e8:b0:60:e2:a3:97:c0:e2:bd:2d:47:
12:a9:39:61:95:f1:8e:51:b9:d4:2e:2a:b5:88:15:
75:fd:86:a2:ba:9e:bb:96:db:47:fe:bc:66:ad:04:
18:a3:c4:57:d4:8e:57:23:c0:67:35:6d:83:65:0e:
4c:97:65:15:3b:81:48:34:ed:02:5e:94:26:b7:05:
a3:3a:08:3d:72:8b:67:d2:b1:e1:7d:f1:7b:98:8b:
35:fe:e8:99:51:fd:2b:63:a9:15:b4:fd:03:bf:ae:
c7:da:3d:f2:b5:9c:ee:6f:dc:e6:1c:cc:89:af:7f:
98:47:4c:25:c4:c4:af:65:1d:f1:35:29:aa:8e:56:
da:8c:40:dd:63:ad:f9:c9:5a:46:5d:91:50:ff:9f:
7e:59:1d:3d:ec:4e:0d:d4:e3:06:c4:4a:ed:90:5a:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F6:93:C4:4B:80:7D:D2:BC:9B:56:90:EA:0E:2F:99:D4:7D:26:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/b68f39be-2699-3e0e-a76d-a98cf991241a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl
X509v3 Authority Key Identifier:
keyid:FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer
sbgp-ipAddrBlock: critical
IPv4:
66.64.0.0/18
66.196.192.0/18
67.200.128.0/17
69.94.224.0/19
74.213.0.0/18
96.43.0.0/19
139.138.128.0/18
162.252.160.0/22
192.52.188.0/22
192.64.92.0/22
199.15.164.0/22
199.115.168.0/22
199.241.248.0/21
206.126.32.0/19
207.91.128.0/18
209.94.224.0/19
209.189.232.0/21
216.74.224.0/19
216.130.240.0/20
216.201.128.0/17
216.215.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:34:46:d6:79:bf:9e:fc:e2:96:95:93:f5:24:aa:ce:95:d7:
12:db:db:63:e0:65:c6:79:49:29:c5:22:39:38:7f:98:46:91:
8b:dc:f9:33:85:49:21:89:6c:6c:58:a2:ab:c4:fa:40:5a:a6:
34:a5:74:ac:4b:00:f6:20:cb:5e:df:f0:01:1a:d8:26:44:a7:
8d:d5:9a:e2:40:91:24:63:b3:e4:67:3e:35:8c:ca:66:29:d4:
07:d7:30:03:f6:d9:29:9c:f1:db:76:e0:16:86:5e:60:7f:ce:
8d:da:95:10:3d:d1:67:d8:0c:ca:18:b2:d7:5d:18:e4:9d:fd:
f7:7b:a3:67:cc:3f:bb:12:af:6a:52:b9:c9:d2:23:13:bb:c5:
fa:a5:ad:a7:38:ee:ff:28:50:b8:45:45:4c:bd:c2:07:e2:50:
4b:e7:cb:11:87:bc:e1:56:1d:0d:17:51:13:11:b6:32:16:91:
ea:3b:21:aa:55:bd:ad:c0:03:b9:64:4e:98:85:76:cd:51:6d:
e4:64:50:5e:a4:48:66:e7:d3:83:47:49:80:2a:0e:15:e8:75:
c4:18:e4:6e:e0:ba:43:f0:23:bb:ee:e0:da:3b:4d:0b:6f:6c:
cf:87:bd:97:42:99:13:37:df:99:23:4b:46:a5:f8:54:4e:38:
11:ed:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:54:10 2026 by rpki-client