
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa
File: d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa (raw, json)
Hash identifier: 8gpgCNzRMisxjQOCjflXcyCYs4tZ5gvgNz641Fd69YM=
Subject key identifier: 05:AE:FB:CC:3D:38:94:99:21:20:A3:B4:05:4C:DE:1D:8C:14:68:EA
Certificate issuer: /CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa
Certificate serial: 010D0C9F4328584D17956B30D0D7B0737C7394C0
Authority key identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa
Signing time: Sat 07 Mar 2026 18:46:14 +0000
ROA not before: Sat 07 Mar 2026 18:46:14 +0000
ROA not after: Fri 05 Jun 2026 17:46:14 +0000
asID: 30006
IP address blocks: 23.171.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:17:95:6b:30:d0:d7:b0:73:7c:73:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa
Validity
Not Before: Mar 7 18:46:14 2026 GMT
Not After : Jun 5 17:46:14 2026 GMT
Subject: CN=67689458-7259-4de3-920f-75ae3a09effc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:58:0f:d1:78:ad:88:9b:e2:3f:8f:17:71:
72:27:f6:26:bb:6d:24:4c:e5:ca:da:6e:17:df:10:
dc:59:ae:78:80:ea:82:d3:bf:6d:0d:07:05:6a:fb:
1d:b4:d8:27:aa:7e:5d:b2:08:55:65:50:22:8d:ba:
41:94:56:9d:68:3c:0c:72:55:91:f6:40:83:c7:ba:
e3:48:55:6c:2d:9f:77:40:08:14:70:1b:0d:9b:50:
6a:70:01:56:76:07:26:71:f6:e8:cf:6d:10:e4:aa:
cc:24:19:63:06:99:25:85:5d:44:f4:ca:e3:2f:b1:
20:7b:2b:19:5c:f4:a7:0c:ff:07:d5:9f:08:08:17:
36:e3:58:9f:2f:25:a4:04:e5:ba:1b:06:c2:67:10:
18:12:2d:13:d8:69:ba:ea:03:e2:bc:69:d3:19:93:
f8:28:5d:0f:cc:a0:1b:07:29:73:60:cc:c8:ab:5e:
45:0b:2f:83:cd:f5:d0:16:72:0b:1b:fa:c7:ac:8a:
34:87:2f:e8:d4:b6:2f:fb:17:34:62:8c:1c:a5:5c:
cf:42:ba:08:15:83:be:55:9c:20:de:6a:17:7c:8e:
da:00:36:dd:a9:76:9c:3c:8e:90:2f:b0:0d:15:32:
75:fa:6f:d9:ae:2e:f4:7a:75:3e:73:b1:42:29:c3:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AE:FB:CC:3D:38:94:99:21:20:A3:B4:05:4C:DE:1D:8C:14:68:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl
X509v3 Authority Key Identifier:
keyid:3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ff:03:66:f0:80:56:11:de:2d:32:e7:67:97:06:51:cb:23:
96:cf:a7:d9:91:59:7a:c8:30:f7:29:39:da:7b:f8:93:5b:a6:
b7:91:2c:6d:6e:11:27:b8:3a:93:90:44:8c:04:c8:b8:95:73:
ee:6f:4e:0a:9e:8f:ec:ad:37:58:ef:02:08:ff:16:30:3a:9e:
ac:85:07:ff:41:be:37:08:44:17:fd:0a:2f:f2:1d:9a:83:b3:
c3:77:e1:fa:d2:09:08:c7:26:25:0a:96:48:41:f8:d2:e9:25:
25:91:12:b2:ac:85:e4:79:49:f5:37:79:66:58:df:78:b7:3e:
c4:fd:87:97:a7:16:c7:37:55:38:04:78:df:86:ad:ee:13:74:
1a:1b:44:b3:91:63:1a:c0:5b:5f:1d:10:4a:bc:bb:aa:51:5f:
5b:be:1e:53:79:fe:69:2e:5c:43:ea:a6:fd:75:df:ab:31:4f:
92:ad:a1:ea:fe:4f:b4:b4:5d:53:ea:4b:59:c1:97:87:05:4a:
85:dd:9f:2a:6c:00:41:e5:e7:10:a7:88:95:6b:54:96:42:c4:
89:68:1b:67:c7:c9:2a:d8:2e:73:ea:b1:8f:b8:fd:bc:7e:17:
c3:7a:1c:49:2e:8b:db:52:ef:75:56:bc:65:e2:94:00:7f:5b:
cd:aa:06:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:13 2026 by rpki-client