
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0cd116cf-03c5-3e02-99d0-68d5022c0285.roa
File: 0cd116cf-03c5-3e02-99d0-68d5022c0285.roa (raw, json)
Hash identifier: lexR3ZMq1U6ibf1NWaz027RW6hlkBjuuhoWWGJU2g8A=
Subject key identifier: B4:97:4C:6E:5C:5A:B4:4E:23:54:98:87:4D:57:08:DC:C8:B8:F7:2A
Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial: 010D0C9F4328584D6EDA90101C5B08F716708580
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0cd116cf-03c5-3e02-99d0-68d5022c0285.roa
Signing time: Wed 08 Apr 2026 01:00:24 +0000
ROA not before: Wed 08 Apr 2026 01:00:24 +0000
ROA not after: Tue 07 Jul 2026 01:00:24 +0000
asID: 393474
IP address blocks: 64.90.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6e:da:90:10:1c:5b:08:f7:16:70:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Validity
Not Before: Apr 8 01:00:24 2026 GMT
Not After : Jul 7 01:00:24 2026 GMT
Subject: CN=4c860bf4-14f4-405b-8cba-08d9f4154440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:b4:39:61:a3:41:d7:a4:f1:d3:53:63:86:
61:44:e2:8a:49:ff:49:ce:ba:7f:15:c1:c9:5f:37:
66:cf:d1:1d:ad:df:94:0c:00:e8:93:d2:5a:2a:e5:
bb:44:6a:21:a5:1f:f3:c0:a0:67:3f:56:49:ad:0e:
52:1e:1f:20:99:86:9f:7d:4a:7b:4d:70:2b:fb:43:
4d:cc:e2:22:f5:5a:ab:dc:95:fc:a2:70:43:e9:63:
bc:65:f8:ea:53:7f:13:f5:1f:ce:59:94:21:d7:0d:
86:fa:82:5f:40:95:a0:7d:97:38:1e:ee:93:69:02:
06:c6:09:70:98:90:5e:b5:6b:dc:f3:42:9c:c0:40:
02:9f:1f:0b:ee:44:01:21:78:43:4d:79:ac:de:20:
78:5f:e0:01:a5:95:4a:65:51:a7:f2:dc:6a:b9:d9:
c5:4e:4b:32:f4:87:43:c0:e6:b8:e4:49:90:0c:d1:
be:f2:1a:b4:bb:d4:3f:30:5e:f8:2e:fe:ed:05:38:
e9:9a:b5:ff:d7:4a:8d:ac:cd:c2:22:95:33:07:08:
72:19:9a:75:52:98:34:42:0f:de:b3:bc:b5:41:a5:
b6:38:f0:a7:65:4e:07:13:81:5f:d7:08:a0:69:75:
a0:fb:85:b2:3e:94:43:fb:19:79:13:e1:b7:f2:06:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:4C:6E:5C:5A:B4:4E:23:54:98:87:4D:57:08:DC:C8:B8:F7:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0cd116cf-03c5-3e02-99d0-68d5022c0285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
X509v3 Authority Key Identifier:
keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
sbgp-ipAddrBlock: critical
IPv4:
64.90.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:40:24:59:65:41:92:20:fc:63:5a:b3:79:a7:14:89:ab:52:
a0:f9:fa:85:69:74:60:b7:dc:4a:b6:dd:50:21:ac:16:ea:95:
46:e7:b6:5d:a1:02:5c:80:1b:fd:a1:1a:1e:9a:cd:3a:d8:3f:
74:f6:ce:53:43:4b:f9:59:25:9b:5e:a2:8d:97:e0:87:cb:8b:
f6:33:40:a6:a8:0f:5d:86:3f:19:60:69:5d:e0:c4:a6:d5:0f:
65:5c:af:29:01:e8:f3:eb:a6:96:75:53:31:48:72:4a:9a:1a:
5c:12:96:8c:6c:26:a6:9f:5e:21:aa:b6:3a:44:ac:f2:f2:99:
37:52:38:ac:4c:ac:51:cd:8a:92:38:a1:a6:f8:f6:14:7c:d6:
1e:32:61:b8:ea:c1:fc:5f:e1:48:8d:81:cf:de:09:0d:3b:34:
6b:02:f7:7c:7e:7e:41:4b:0a:c1:5a:7f:26:83:f5:13:d6:1e:
de:13:05:e1:5e:f8:2d:1d:ec:44:76:af:10:f5:39:4c:09:29:
1b:4f:9b:49:70:e5:26:af:26:37:3e:43:d5:de:94:5b:a4:9d:
d1:b9:80:df:a4:39:cc:49:f9:db:fc:5a:af:fe:4a:f1:d6:27:
27:11:38:05:91:8a:3a:76:ea:78:c4:2d:b0:56:e5:90:8a:b5:
22:0c:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:21 2026 by rpki-client