
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/822ce805-7e21-3279-80a9-f3b442084477.roa
File: 822ce805-7e21-3279-80a9-f3b442084477.roa (raw, json)
Hash identifier: Xbok/g9pETspyevyDM1wysTPx/qa59LGuWJk+fXnuIE=
Subject key identifier: 0C:FA:85:46:8F:B8:F0:05:BB:91:DE:6C:32:BD:BB:5E:DC:52:4B:E4
Certificate issuer: /CN=88cca465-78be-4daa-a3c3-ad2fe957745b
Certificate serial: 010D0C9F4328584D4491405CDF948ED9F71DADD0
Authority key identifier: 7A:A4:BB:9E:94:E5:52:E3:E3:A3:F8:E8:AD:AC:8E:7B:38:49:E0:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/822ce805-7e21-3279-80a9-f3b442084477.roa
Signing time: Mon 23 Mar 2026 21:29:12 +0000
ROA not before: Mon 23 Mar 2026 21:29:12 +0000
ROA not after: Sun 21 Jun 2026 21:29:12 +0000
asID: 21958
IP address blocks: 208.64.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/88cca465-78be-4daa-a3c3-ad2fe957745b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/88cca465-78be-4daa-a3c3-ad2fe957745b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:91:40:5c:df:94:8e:d9:f7:1d:ad:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cca465-78be-4daa-a3c3-ad2fe957745b
Validity
Not Before: Mar 23 21:29:12 2026 GMT
Not After : Jun 21 21:29:12 2026 GMT
Subject: CN=b5d3fdb1-ca17-4fdb-a7a4-f0150920a8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:ff:3e:2d:bf:33:aa:f9:77:7a:08:fa:2e:
af:ea:64:11:82:53:8e:b3:e6:57:be:86:9f:cb:6a:
b3:1c:d8:18:79:c2:38:42:67:53:52:e3:ac:12:cf:
4d:ec:7d:31:23:91:28:44:38:d0:0a:49:e2:78:5d:
9a:98:46:7b:19:48:bb:fd:c0:26:40:c9:46:89:3d:
68:6f:45:5e:14:b2:4b:3e:e7:ee:23:bc:b0:53:fd:
29:47:ee:69:d9:2e:d1:26:2e:d3:a4:56:06:22:20:
37:7b:3f:b7:57:bb:8e:e7:6e:a8:3d:d2:5c:f8:72:
87:8b:73:69:5a:cd:81:a5:93:c9:41:e7:4a:73:71:
c0:18:9a:19:d1:55:c7:3e:0c:71:07:87:35:93:fc:
46:3e:fd:8a:04:d7:3e:2e:eb:8a:d8:6d:c6:6a:6e:
6e:6b:4b:75:bd:75:93:2e:d1:ee:5d:3e:13:05:1b:
c6:8f:c8:03:14:98:50:79:03:d7:68:28:63:e9:68:
44:85:19:18:0d:cc:3c:e0:20:6f:70:02:04:55:82:
5a:7b:49:1b:69:46:6a:e1:79:a5:82:73:8b:a2:64:
4a:cf:a9:c5:34:36:c1:13:2d:08:0a:78:51:e8:97:
7e:e7:e8:f7:45:e0:c7:cc:95:8c:8d:fb:6f:4d:ec:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:85:46:8F:B8:F0:05:BB:91:DE:6C:32:BD:BB:5E:DC:52:4B:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/822ce805-7e21-3279-80a9-f3b442084477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b/88cca465-78be-4daa-a3c3-ad2fe957745b.crl
X509v3 Authority Key Identifier:
keyid:7A:A4:BB:9E:94:E5:52:E3:E3:A3:F8:E8:AD:AC:8E:7B:38:49:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88cca465-78be-4daa-a3c3-ad2fe957745b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.64.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:7b:44:77:45:90:1f:96:b2:12:c8:78:4f:02:f6:a5:27:7b:
31:4a:58:d4:97:40:f4:6d:94:50:72:a6:5d:0b:fd:bf:2b:62:
18:39:3e:82:33:a3:ab:d8:22:a2:0a:38:45:89:12:eb:9f:f8:
26:4a:c7:18:4f:a8:07:64:1c:b5:ce:dc:ef:9b:e7:de:72:fb:
cd:96:9c:5e:88:25:61:9c:14:aa:dc:cd:6c:cf:6d:cc:93:40:
2d:13:37:c1:f4:a4:71:7d:c1:e9:df:17:cf:0a:38:ca:96:23:
e4:67:9a:ac:e1:29:16:78:82:46:76:ff:41:58:ba:27:26:bf:
9a:06:ce:cb:16:d7:5a:d3:71:fa:d9:55:60:28:07:a2:85:a6:
6f:e7:cc:da:5a:e5:43:dc:e5:3a:fc:46:18:41:38:8f:9f:74:
11:79:31:08:37:6f:63:af:e5:b2:f6:ae:90:bf:42:c0:cf:b4:
3f:31:33:4f:2e:61:71:14:12:16:2d:88:f5:a6:b1:c8:8a:c9:
48:8d:ac:60:6a:ef:50:2a:61:65:a7:5a:36:53:aa:1c:94:4c:
30:d7:e1:bb:74:8a:d1:d3:d9:e6:19:c8:ea:bd:24:32:3d:48:
69:f6:69:a9:c6:48:58:6a:ba:3a:9e:ad:ab:5b:73:66:ae:fb:
23:e9:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:31 2026 by rpki-client