
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa
File: 43abee32-0b0c-3284-ab75-86047f53ab34.roa (raw, json)
Hash identifier: 5jdgYBcS/WLMbzimtO5NOKBSRL05hDONVBu/dF2b7dQ=
Subject key identifier: A6:6C:FA:89:B8:25:0F:E0:A5:1E:BC:6F:CA:23:B6:5F:5E:3D:0A:55
Certificate issuer: /CN=3555956f-7142-453a-8aea-177a684dd7aa
Certificate serial: 010D0C9F4328584E0865E7A65FFB42F291750610
Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 13821
IP address blocks: 206.218.248.0/24 maxlen: 24
206.218.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:65:e7:a6:5f:fb:42:f2:91:75:06:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=578b31e7-caea-458a-8024-cbf5b6398004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:c2:b3:0c:b1:49:48:93:ba:4d:21:5e:4b:
8b:a6:84:26:e5:e3:f3:62:4c:e0:24:cd:ae:73:02:
64:7e:98:53:24:fd:c3:94:8e:b5:eb:3e:e3:0c:df:
55:ed:18:b1:8b:d8:c2:7e:63:d3:0e:ed:44:c9:d8:
15:2c:52:63:6a:98:56:fb:ae:05:4d:69:35:b6:8c:
ef:94:39:f8:aa:21:98:75:20:22:7b:63:f0:9e:85:
35:38:04:ab:76:dc:78:8a:e5:3b:5d:73:cb:25:85:
b5:6d:1c:bf:95:74:3d:5a:37:e0:97:7c:d3:b7:22:
7f:19:80:85:ea:b0:3b:f2:96:7f:f4:39:e5:42:fd:
e8:19:29:76:e2:1b:71:5f:fb:29:6d:2a:83:3f:de:
5f:76:77:85:7d:47:80:0d:4c:04:1e:58:9a:7a:ee:
26:db:57:1d:4e:73:51:70:9b:1e:8d:37:7a:bf:1c:
0a:1f:b5:b9:6e:a3:ad:c5:41:b2:00:a1:06:0d:b7:
36:63:d6:ce:a2:db:67:47:c4:07:dd:d8:77:0c:2c:
71:65:41:03:55:c7:e4:9e:b4:8f:01:c7:4e:13:2c:
f7:12:6a:4f:03:f3:3f:22:26:ad:00:27:d9:0b:2e:
4e:9b:73:97:d7:16:65:74:9f:6b:10:7e:6d:94:a1:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:FA:89:B8:25:0F:E0:A5:1E:BC:6F:CA:23:B6:5F:5E:3D:0A:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl
X509v3 Authority Key Identifier:
keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer
sbgp-ipAddrBlock: critical
IPv4:
206.218.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:10:e1:51:ff:2a:ec:25:17:a8:65:42:93:b2:e1:92:07:4c:
35:73:76:ad:58:1b:33:9a:b2:b2:2c:68:b0:c0:19:70:49:96:
67:75:78:12:db:c9:78:8f:08:1a:c6:3b:56:7b:3d:30:73:40:
8a:40:ef:0d:a7:d2:4f:b8:3a:69:4e:fd:08:40:0b:79:a1:5b:
48:51:65:11:96:cd:96:96:d4:f1:4f:9a:59:b4:71:6c:df:69:
99:e8:ec:be:d6:27:a1:8c:de:c4:ca:9d:6a:93:25:9a:44:8d:
4f:0c:e7:4a:a2:df:77:a2:ea:22:ba:fa:cc:81:0d:98:0d:16:
9a:35:da:58:53:19:7c:5d:39:13:31:99:73:3f:1d:69:a2:61:
35:4e:13:12:ac:aa:00:a9:f5:13:eb:57:32:7a:e6:43:41:8b:
b2:96:24:0c:fb:91:2d:2d:c9:4b:a2:c8:3f:9a:d2:54:b6:33:
38:0c:e6:ee:e9:e4:ce:b9:a8:58:4b:be:9c:c4:ba:39:6e:3b:
f2:41:13:cc:e8:7b:34:d9:a5:08:7e:cb:ff:d1:4d:9e:87:58:
9b:60:aa:2d:95:11:67:dc:aa:df:73:e7:88:6d:72:d7:b7:2a:
16:1a:c6:5f:d8:7e:e3:2b:13:5b:1e:ce:c4:57:5e:c4:56:24:
41:64:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:41 2026 by rpki-client