
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/d337d573-261c-3e9a-8b25-de5b23b763ed.roa
File: d337d573-261c-3e9a-8b25-de5b23b763ed.roa (raw, json)
Hash identifier: PjKWBpSCeJixnJPqMOinv+b69ePvMtkmo+gUKN912Xg=
Subject key identifier: C9:EE:F4:32:2F:4B:89:B2:EE:ED:91:97:AA:57:90:72:76:C9:0B:86
Certificate issuer: /CN=c5866eff-c061-4d47-9ecb-06697eb4f13d
Certificate serial: 010D0C9F4328584DA815798AAA86B76789623DC0
Authority key identifier: 3F:51:B2:FE:08:94:AD:35:E3:7C:3D:13:A3:80:5A:29:23:51:B4:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/d337d573-261c-3e9a-8b25-de5b23b763ed.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 53591
IP address blocks: 208.74.136.0/22 maxlen: 24
208.94.32.0/22 maxlen: 24
2604:4700::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/c5866eff-c061-4d47-9ecb-06697eb4f13d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/c5866eff-c061-4d47-9ecb-06697eb4f13d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:79:8a:aa:86:b7:67:89:62:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5866eff-c061-4d47-9ecb-06697eb4f13d
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=dee49ca8-b652-4e76-a1da-b158c7bcf2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:9f:9b:49:09:b7:7c:4c:39:1e:7b:27:7e:
a5:02:47:54:b5:c9:b4:e3:a4:19:0b:4b:49:76:ac:
d9:4d:57:5c:bb:ea:03:72:99:c9:9b:d4:b6:55:0d:
68:06:f0:ed:72:51:78:13:cc:81:b5:d3:d9:de:51:
2e:50:c7:1a:18:73:a5:c3:5b:73:70:a3:4d:80:7d:
26:10:bf:66:e5:32:7f:7c:ee:b2:89:93:2b:83:5e:
4a:51:7f:e9:b8:93:e2:f9:05:af:0c:f1:7e:ae:6b:
1b:89:52:0f:e6:df:f0:d1:80:10:77:04:f4:93:da:
d9:ab:24:c7:25:a8:ea:f6:15:3c:49:11:96:88:28:
83:e4:21:70:ff:1c:12:ed:71:76:3e:b3:34:40:ed:
fd:b5:52:be:e4:50:5c:47:a2:3e:7d:dc:0a:ff:20:
44:08:9a:c7:8b:a9:ea:16:42:1b:c9:32:fe:08:6a:
c5:7d:42:8a:c9:bf:f8:97:4e:6a:4b:21:24:b0:fc:
b8:c2:fc:e5:9e:f2:c7:b9:73:8d:0b:b4:fc:41:33:
32:27:bc:7f:0e:96:cf:8d:ab:e2:e4:8d:eb:31:8b:
de:c2:72:93:86:f2:45:c5:85:b5:d0:45:e7:74:39:
31:9c:6b:fe:6c:ea:c3:7a:47:6e:ff:9d:3c:0a:bc:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:F4:32:2F:4B:89:B2:EE:ED:91:97:AA:57:90:72:76:C9:0B:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/d337d573-261c-3e9a-8b25-de5b23b763ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/c5866eff-c061-4d47-9ecb-06697eb4f13d.crl
X509v3 Authority Key Identifier:
keyid:3F:51:B2:FE:08:94:AD:35:E3:7C:3D:13:A3:80:5A:29:23:51:B4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.74.136.0/22
208.94.32.0/22
IPv6:
2604:4700::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:06:d5:37:a9:cb:26:17:30:4d:43:15:5e:26:62:5a:33:38:
0c:27:78:2a:01:af:4b:87:16:8d:60:ad:58:7d:b3:8d:45:88:
3a:07:a3:69:e6:62:55:a8:ef:86:ed:67:f3:cb:5b:3e:05:b1:
de:9c:69:d0:e9:56:fe:b3:9c:ca:13:7d:2d:c4:90:1b:80:6c:
c5:65:52:99:74:2f:bf:26:47:7a:98:3c:b9:c9:39:ec:fc:e2:
01:82:42:f7:5d:97:81:ea:fe:8d:1e:34:43:a4:12:4d:99:8c:
e3:07:67:bb:35:dd:80:d0:64:d6:57:5b:a1:5f:74:5d:74:5d:
f6:39:0c:ac:a3:1a:0d:c9:dc:3e:79:f7:c0:bc:58:20:a5:f4:
bc:3d:2f:e3:47:14:80:ea:d7:f2:64:22:b6:e7:0a:51:80:32:
64:c4:64:b5:d4:30:be:93:75:64:df:49:db:50:ee:8a:20:49:
c1:15:ce:de:92:87:2a:d7:13:fc:2f:5a:53:ed:af:51:b3:a3:
f7:7e:1a:65:3b:18:af:f8:e7:cf:36:bf:b3:d9:81:c7:ff:32:
00:12:69:b3:79:c9:fb:70:d1:46:d2:b7:76:b2:f8:cd:73:0d:
fa:ea:ec:54:73:eb:e0:c4:c2:af:d1:4e:e6:4b:42:40:dc:b5:
85:78:0d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:06:35 2026 by rpki-client