
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa
File: 02d90035-da81-3e67-96c7-9feeef8b261e.roa (raw, json)
Hash identifier: aARFn1jXHDJSgAHLZj7k+/pSJPfa4CDKITzkHdkg/u0=
Subject key identifier: AB:72:AD:7F:F3:64:C2:E0:1F:22:8F:16:07:9E:E9:1B:36:36:4A:42
Certificate issuer: /CN=45657d9f-043b-4838-9072-ef0906bb567e
Certificate serial: 010D0C9F4328584D83CA9B00F8467EF97D8A6B00
Authority key identifier: D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 16652
IP address blocks: 199.254.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:9b:00:f8:46:7e:f9:7d:8a:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45657d9f-043b-4838-9072-ef0906bb567e
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=329720ee-e2a9-4f22-84b9-e84cc34706d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:09:53:a8:fc:f1:91:ec:5a:a4:6a:a2:0e:
e6:f9:b1:6e:8f:4d:ab:4b:2f:b1:3d:b8:79:be:2b:
4d:7b:dc:5c:fd:19:ef:ca:71:85:85:52:fa:6e:6c:
af:ac:37:07:e2:27:16:75:06:96:34:e3:98:b6:0c:
a1:ad:0d:ad:a8:41:0e:14:0f:4f:af:e4:3a:fe:6a:
70:84:aa:78:36:73:cc:61:27:ea:69:2e:f0:68:d5:
7a:72:f9:7b:73:d4:07:55:53:b3:67:b4:84:91:c0:
a1:ba:f4:40:51:e7:ef:b1:b8:a1:95:0d:35:33:b7:
fe:88:4f:73:e6:a6:19:dd:74:4e:bb:b3:37:1c:2b:
50:30:7e:57:36:a5:02:98:a3:39:a9:d6:50:b2:de:
5d:8c:5d:d3:81:80:30:d3:0a:2c:86:48:ae:8b:88:
40:a4:65:f3:98:ff:11:19:ee:60:dc:ce:a4:36:b7:
9d:5f:96:8e:48:b4:a8:6d:76:ec:6f:f0:88:39:a0:
db:5d:f8:30:7c:67:16:7a:6f:46:79:79:d2:a1:5f:
48:db:53:e5:68:b4:e1:07:e5:53:56:fa:93:40:10:
bd:0c:6c:34:31:aa:51:d6:1a:7c:ce:1e:e6:0e:7f:
97:c4:b0:fd:6a:b6:ab:85:77:6b:86:d3:70:96:63:
9e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:72:AD:7F:F3:64:C2:E0:1F:22:8F:16:07:9E:E9:1B:36:36:4A:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl
X509v3 Authority Key Identifier:
keyid:D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.254.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:df:7d:fd:5c:30:32:11:d6:b6:8b:20:43:73:4f:f9:e4:79:
e7:62:ed:d5:4b:a0:24:2c:6c:65:93:cc:22:bd:d9:b0:91:65:
14:53:b3:19:fd:8d:3d:db:40:ef:e7:30:9e:98:39:48:03:42:
72:7e:69:a6:2c:9c:3f:07:9e:53:77:07:69:3a:eb:14:b6:84:
a6:d9:06:ca:c8:1e:73:0b:4c:f0:82:a1:54:77:a8:66:ca:37:
23:e2:2d:d9:21:ab:53:2d:62:f7:c7:9b:ce:4a:a5:a7:b9:de:
c5:99:8f:71:9e:87:64:bb:e7:2b:ed:b5:fc:39:21:1f:97:9d:
1b:47:9a:94:81:d2:49:56:b1:71:ea:5c:2f:21:e7:60:95:47:
49:93:79:f0:97:54:bf:5a:a9:76:e0:ad:3a:ea:2b:fa:b7:4a:
85:4d:1b:da:3a:2a:b4:fb:3a:32:52:d2:b2:55:a8:fc:02:4d:
1f:5a:e0:50:34:7d:b8:65:e8:8a:00:a8:5f:96:3f:4f:b5:93:
19:af:a9:79:76:b7:a3:6f:37:8b:a4:73:92:29:49:1e:7d:da:
a4:4a:c0:51:f4:8e:79:03:65:65:b0:d6:ec:ef:a0:3e:4a:8d:
7c:d3:76:4d:06:c6:e3:35:19:ee:41:d8:1f:4c:5c:e5:9d:d6:
88:b3:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:50:55 2026 by rpki-client