
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
File: ee02f89e-d151-39e0-a655-f74770f9addd.roa (raw, json)
Hash identifier: cl2UsCozZGOYOFFGEHoNxJHubTzZYzJtz40+z/GueS8=
Subject key identifier: E4:9B:D8:EE:AB:4A:C2:62:49:46:DF:70:2F:94:72:DE:D8:8B:D2:84
Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial: 010D0C9F4328584D7F9A7C17DD923AE5B8574C00
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 31875
IP address blocks: 216.21.216.0/21 maxlen: 24
2604:ebc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:7c:17:dd:92:3a:e5:b8:57:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=917b11d9-3e2f-4087-ab8f-4e515e292ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:ae:01:fc:64:30:58:7a:82:bc:a2:ff:09:
6b:50:1a:b4:03:d5:68:56:5d:48:dd:13:c7:41:03:
53:b1:15:93:82:f6:38:b3:fc:eb:d1:fa:8f:5a:67:
be:63:03:b8:f0:eb:6f:2e:cf:7d:e0:05:9e:7d:35:
49:b0:b4:ec:d3:3c:dc:d2:80:6c:f9:c8:3e:0a:e2:
5a:4b:88:c9:43:f4:7c:43:27:93:e7:d6:da:ba:b5:
bb:d9:80:6b:b8:b4:55:1b:10:5f:9b:a7:81:69:52:
05:4e:eb:cb:90:4c:31:13:0a:ef:58:36:4c:02:50:
30:04:da:7e:5c:e8:20:65:b9:15:da:2f:3f:0c:ae:
25:1f:70:2b:f2:b5:d2:54:2b:b5:ce:57:fa:5f:ef:
ac:bf:f1:01:32:23:13:84:de:f2:ff:fd:1b:51:ea:
bc:9c:3a:45:7b:14:a7:e2:09:4f:74:6f:48:52:32:
41:6f:e8:8f:07:58:88:15:9f:aa:4e:b6:47:63:5e:
9f:c7:02:0d:31:1b:ab:9d:c6:a6:67:fe:85:2f:d8:
b7:ad:50:c7:65:85:64:3f:67:0d:24:3d:bc:ff:d1:
13:2e:09:74:ec:60:59:2a:07:0e:ac:d3:17:e7:fd:
ea:29:20:eb:47:39:38:f3:ea:15:9f:ea:8c:df:09:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:D8:EE:AB:4A:C2:62:49:46:DF:70:2F:94:72:DE:D8:8B:D2:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
X509v3 Authority Key Identifier:
keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.21.216.0/21
IPv6:
2604:ebc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:aa:ff:20:2b:af:03:7d:c2:46:f6:f8:d0:44:7d:57:22:13:
98:f1:f9:d6:27:ee:be:65:10:07:ad:74:06:42:bd:15:0f:47:
e9:41:a2:38:4e:60:be:33:4e:8b:f4:87:7a:01:67:d7:66:a9:
ae:f9:bf:97:0c:4d:eb:36:3e:92:6b:7d:aa:a3:2d:a2:4a:49:
7e:b2:15:43:2c:0c:3b:a3:51:39:69:d1:03:06:48:5c:d8:7c:
80:4f:b0:08:b6:61:78:15:2e:c8:a0:4d:6b:f7:84:a3:fa:35:
16:96:da:e5:9d:e3:1e:03:c6:f5:bd:f8:99:e8:38:b8:de:06:
7c:e7:7f:05:bb:8d:12:26:75:4b:91:8b:6e:ed:b4:ba:54:8d:
c9:ae:8f:ae:15:0a:56:90:91:f0:eb:e8:fd:b9:33:61:df:d9:
35:0c:59:8c:02:86:bf:b3:67:2d:6c:de:41:e1:24:bf:0d:d5:
e5:c0:ff:91:a4:22:eb:ad:64:98:d6:a9:10:71:8a:38:65:53:
c6:1e:c7:7c:8d:3c:19:5f:68:62:1d:2e:83:7d:14:ca:b4:20:
9b:1f:d7:80:17:28:96:08:79:bd:49:84:ce:0a:b9:38:8e:85:
51:42:8a:b0:37:87:27:4a:b7:50:4d:69:50:31:b2:96:eb:cb:
ef:65:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:00 2026 by rpki-client