
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa
File: ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa (raw, json)
Hash identifier: A5JFfSPjKdmE30ULaJb55rQ9fQsiE0hjuPcCssZJlVg=
Subject key identifier: 6F:D1:D1:54:4F:5D:56:6B:8D:CF:80:14:D3:88:B7:14:A1:51:6A:1C
Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial: 010D0C9F4328584D60E50A87ECE2737A68D7AB80
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 2734
IP address blocks: 208.64.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:0a:87:ec:e2:73:7a:68:d7:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=842489b7-f573-4bfd-bab6-8e7dd78f0a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:dc:7c:ab:c4:17:c5:22:0a:39:2c:18:bb:
3a:bd:5b:6a:c3:35:8f:96:92:97:bf:94:2e:45:fe:
9a:ad:3d:e0:21:be:d0:9c:3f:bf:73:de:2b:63:4b:
bd:56:dc:f3:50:ac:08:6b:58:4c:93:dc:f4:20:78:
f9:1e:c7:7c:7a:d5:f4:9a:3d:87:d8:0f:01:c5:79:
96:dc:9a:c0:d0:33:1a:29:99:c7:97:9a:b0:26:ea:
19:d3:b9:8a:85:3c:d8:04:93:ae:be:c0:a5:73:23:
46:35:a9:24:6b:16:8a:b8:fc:4f:a4:a5:db:a7:ea:
0d:dc:e2:8a:98:fc:6f:f1:42:46:23:6b:dd:72:3b:
80:1b:60:bc:30:c1:59:ef:c9:43:1e:0e:99:62:d7:
db:a5:5f:f0:f5:e5:5c:f2:c0:45:56:cb:30:ed:f2:
b4:9e:32:e3:d0:28:3c:25:e2:5c:10:13:50:35:41:
7e:36:2f:fd:b2:34:c9:c5:2f:69:f3:fd:50:b3:f6:
f3:97:ee:e7:f0:11:94:bd:92:95:52:76:2e:9d:7d:
da:ae:a4:9d:b6:73:20:66:ce:b2:bd:f9:41:e1:ec:
cc:42:e8:e6:64:b2:8b:30:c8:9f:c3:b5:c6:57:cf:
e2:80:bc:15:97:65:11:f1:df:5c:2b:58:92:46:57:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D1:D1:54:4F:5D:56:6B:8D:CF:80:14:D3:88:B7:14:A1:51:6A:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
X509v3 Authority Key Identifier:
keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
sbgp-ipAddrBlock: critical
IPv4:
208.64.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:d8:7b:81:50:2e:21:fb:98:a7:dc:75:b8:93:f6:37:d4:81:
e1:4b:3d:fb:21:a8:7d:b9:a9:3b:05:f1:cc:77:98:24:09:64:
5e:02:69:c1:30:a5:b5:8a:1c:1a:dc:8a:17:70:9d:4e:c3:c8:
7b:74:26:0a:76:a1:78:c4:19:c1:36:27:32:ff:ce:a5:48:35:
5a:14:42:8d:a0:54:78:90:36:b4:40:46:26:50:b3:02:a2:be:
da:d3:be:a0:e8:2d:a2:85:19:ad:75:78:d6:ac:7b:0b:ac:6d:
d2:e1:7a:8b:64:0b:70:9b:2c:cd:bc:3e:cc:ab:cb:14:35:53:
85:d9:0f:f1:8e:68:c0:85:02:e9:e8:78:f5:19:84:7c:2d:8a:
a7:43:35:4f:24:7d:e6:62:38:c5:ba:8d:03:bd:97:d1:6d:f1:
96:07:e0:df:24:64:53:a4:7d:89:86:d4:a8:58:5f:fe:c8:df:
dc:dc:00:81:fe:3e:0c:36:d3:ed:aa:1b:62:e7:26:50:37:22:
d2:62:a2:42:d3:4a:d0:6f:a9:3f:5d:6b:f0:9d:b4:46:69:64:
eb:2a:98:84:a4:9c:d2:10:06:03:6a:5b:69:b4:bb:9e:47:34:
de:91:46:00:9b:85:81:e2:f9:8e:93:a1:88:53:7a:d5:06:fd:
ee:0b:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:18 2026 by rpki-client