
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce9edb05-00b6-33fb-b966-269dd30aa498.roa
File: ce9edb05-00b6-33fb-b966-269dd30aa498.roa (raw, json)
Hash identifier: wZKzpboxEQyq4FgloZAaBv8xV9AS9w1dnh3gmjPL4zw=
Subject key identifier: 7C:63:EB:AC:7F:76:B0:72:FA:E3:CC:1A:E0:97:5F:52:9D:B7:84:5A
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584D343A0EA377F99F32EB7BAC80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce9edb05-00b6-33fb-b966-269dd30aa498.roa
Signing time: Wed 18 Mar 2026 01:00:33 +0000
ROA not before: Wed 18 Mar 2026 01:00:33 +0000
ROA not after: Tue 16 Jun 2026 01:00:33 +0000
asID: 834
IP address blocks: 209.101.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:34:3a:0e:a3:77:f9:9f:32:eb:7b:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Mar 18 01:00:33 2026 GMT
Not After : Jun 16 01:00:33 2026 GMT
Subject: CN=494a7620-1082-487e-bcf8-a1fa78f5249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:85:dd:eb:dd:37:3f:7a:dc:96:24:6b:f5:
4d:95:71:21:76:31:18:38:90:78:8b:84:0c:ca:92:
84:9b:b6:70:06:1a:af:8f:a9:97:26:f5:ea:72:fc:
db:dc:9f:1f:b9:d6:3a:58:02:7f:07:ec:91:93:b0:
1b:2f:9c:d4:5e:28:30:d7:38:b2:38:91:c1:f1:80:
54:85:0c:7a:96:36:99:46:09:05:12:f0:ab:88:ee:
c1:b3:db:b9:1e:08:bd:a6:50:f4:3f:c4:42:cb:b4:
4b:58:af:51:9b:53:88:ba:53:ff:55:02:3b:fc:e1:
31:8c:27:e1:fc:13:f8:31:43:5c:6c:9b:df:46:e4:
59:d5:6e:dd:27:6f:64:a9:7a:36:79:e9:48:e6:02:
18:ce:62:63:a5:b6:61:d4:f0:9f:9e:ec:6f:ca:10:
a8:2e:52:40:6f:36:63:6f:37:07:1e:8c:41:6b:a4:
d8:ca:91:62:6e:61:14:d4:82:2e:0c:7f:f5:6f:7b:
df:d6:dc:f0:c7:22:2f:c4:71:bc:83:07:ff:87:cd:
c5:7f:10:51:b6:de:0b:4a:09:d1:af:dd:fc:a7:e6:
ee:e5:9f:a4:79:90:8b:89:56:34:7d:04:f7:a2:ab:
0f:05:33:f4:54:73:8c:66:1c:48:af:aa:d0:da:c9:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:63:EB:AC:7F:76:B0:72:FA:E3:CC:1A:E0:97:5F:52:9D:B7:84:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce9edb05-00b6-33fb-b966-269dd30aa498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.101.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:50:3f:fe:d1:3f:ed:c6:dd:cc:a3:b3:58:cc:99:cf:a5:34:
7f:eb:25:e8:62:6e:13:fa:84:f1:b9:84:d3:1d:f6:86:59:02:
1f:d3:fd:5d:54:f8:59:42:89:5a:35:89:5d:fa:10:14:a6:e4:
8c:12:80:8b:4d:db:88:51:3a:a8:27:6a:42:8a:94:51:9a:65:
94:7e:f6:8c:46:ab:54:50:a9:01:c1:3e:f3:40:d3:28:ad:bf:
6c:4d:3d:b1:f0:80:f8:4a:15:7d:6b:e2:6f:79:43:54:15:83:
f6:2f:ee:3a:96:d8:52:7c:8c:7f:c7:43:ae:81:bd:14:df:91:
c2:e1:bd:e6:67:ad:db:b9:28:d7:54:d2:17:a6:aa:0a:95:a3:
ee:bb:7a:ed:5f:63:17:48:72:ca:74:1c:f5:d5:76:d7:5b:d3:
fe:24:11:cb:32:cb:0e:07:1e:5d:c4:67:59:bc:32:c4:59:88:
1b:bd:17:be:e1:a8:fe:7d:7a:e8:38:98:97:b5:48:4c:25:ff:
a5:17:ed:bb:b1:5b:a2:fe:12:80:cb:5c:97:93:44:6a:0a:70:
5f:72:52:2c:6d:68:49:6b:7c:c8:ab:bc:78:3f:c8:01:94:71:
64:37:cf:64:1f:d1:3d:c4:61:ec:64:1d:d9:be:84:93:a4:c4:
99:b7:8b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:49:12 2026 by rpki-client