
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/9f6a7cb0-70c0-32da-89fc-c37ab73deeb3.roa
File: 9f6a7cb0-70c0-32da-89fc-c37ab73deeb3.roa (raw, json)
Hash identifier: QaeCazfAvlmkM0iE+a7k8zi8eImYLJm4px6jGvyr2Xo=
Subject key identifier: 56:2F:70:91:74:4C:B2:FA:01:9B:96:EE:51:E1:27:2A:BB:3C:E0:AE
Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial: 010D0C9F4328584D75D52B8EEA31C6E0FBB5C9C0
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/9f6a7cb0-70c0-32da-89fc-c37ab73deeb3.roa
Signing time: Fri 10 Apr 2026 13:00:31 +0000
ROA not before: Fri 10 Apr 2026 13:00:31 +0000
ROA not after: Thu 09 Jul 2026 13:00:31 +0000
asID: 40501
IP address blocks: 216.235.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:d5:2b:8e:ea:31:c6:e0:fb:b5:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Validity
Not Before: Apr 10 13:00:31 2026 GMT
Not After : Jul 9 13:00:31 2026 GMT
Subject: CN=434adc4b-ee7c-4324-b954-f0896166f986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:cc:c1:f9:4b:7e:d8:3c:ef:3f:4f:08:94:
34:87:e3:84:00:8e:07:8a:77:94:99:b0:07:c8:d8:
dd:8a:65:f9:b9:ec:99:a7:11:26:70:88:19:60:ee:
59:1a:a6:d9:77:02:15:3f:eb:9d:31:1b:25:76:01:
a0:61:74:e9:8e:3e:e6:b5:7a:0c:38:88:66:5c:0a:
f1:bd:c8:82:cb:6c:ae:40:f4:7e:9d:0d:77:d4:d5:
27:69:55:df:65:fb:2d:6c:b6:5d:fb:cc:32:75:66:
4d:21:da:83:3d:2d:66:a7:9d:c1:18:2f:4c:68:cd:
ca:c9:a7:07:4e:57:24:e2:1b:6e:21:71:9a:f5:35:
75:5c:36:94:30:cd:19:e8:41:7e:b7:b7:c0:ff:dc:
51:a7:d6:4a:cf:4a:92:e3:98:51:83:42:8b:92:64:
49:b1:ba:0d:7c:54:a6:dc:c1:bb:54:9f:6f:98:04:
0b:3c:27:f8:e1:b2:39:f9:4f:eb:4a:38:29:0e:1a:
7a:29:37:bf:85:44:6a:3b:af:45:a3:63:41:83:0e:
d6:cf:dd:63:d5:83:d1:1c:6b:5f:0b:e6:3e:bf:02:
4e:9b:a4:32:2f:10:94:7b:49:44:39:bd:7b:1c:34:
aa:a4:f8:97:2b:64:83:1c:c6:78:37:1b:26:ae:eb:
cb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:70:91:74:4C:B2:FA:01:9B:96:EE:51:E1:27:2A:BB:3C:E0:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/9f6a7cb0-70c0-32da-89fc-c37ab73deeb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
X509v3 Authority Key Identifier:
keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
sbgp-ipAddrBlock: critical
IPv4:
216.235.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:d9:a8:db:03:08:d5:3e:63:e2:6f:bf:12:bd:59:e4:1e:ab:
11:a2:61:8b:61:b6:fc:00:29:5d:26:6a:fc:63:7c:da:d0:8f:
89:6b:71:5a:00:83:60:2a:f2:e1:d3:66:d1:ed:ce:c7:f2:2e:
cf:ad:d7:38:aa:7c:f1:36:e6:72:27:9e:31:63:66:f0:31:a5:
f5:59:d0:ab:2f:67:45:ed:20:9e:54:a3:c8:10:ff:1a:77:bf:
8c:a1:37:eb:3b:ea:e6:32:e3:6d:a9:15:ca:e1:fa:58:5e:8e:
da:50:0e:20:6f:2c:ca:9d:c8:5f:46:da:46:de:a2:27:7b:a3:
0c:01:d3:d9:45:35:6f:5c:23:82:26:d7:07:d8:8b:0e:d3:6d:
88:b8:c5:86:39:f1:45:5b:c7:41:f1:b2:63:2c:f5:9f:af:d7:
1a:5e:ed:7b:42:15:27:16:7a:43:05:05:dd:f0:a8:05:1c:22:
be:d1:eb:a1:bd:b8:62:2c:26:c6:60:e9:b4:3b:18:92:9e:d1:
23:70:17:44:3a:7a:2a:ff:04:ed:89:33:2c:0f:0e:e7:e2:cf:
ae:0f:77:4f:96:a9:a4:ba:c8:da:99:3c:81:8a:bd:6b:c0:7a:
db:b3:98:da:0e:c3:9f:e4:68:5d:05:a3:da:6a:a4:8a:29:db:
2c:67:3c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:42 2026 by rpki-client