
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1d425b2-21c5-3f27-8372-98a3a5444b51.roa
File: c1d425b2-21c5-3f27-8372-98a3a5444b51.roa (raw, json)
Hash identifier: 7oChBOcLCg7uzobzA8fuzYLZMlAYhjciMdabk+sg+UE=
Subject key identifier: 57:53:59:94:23:EA:C3:30:63:9B:DE:FD:EA:CF:9F:69:CD:F8:CD:A7
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584CF878DD0146D9BA383D326390
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1d425b2-21c5-3f27-8372-98a3a5444b51.roa
Signing time: Tue 24 Feb 2026 15:18:38 +0000
ROA not before: Tue 24 Feb 2026 15:18:38 +0000
ROA not after: Mon 25 May 2026 14:18:38 +0000
asID: 36622
IP address blocks: 209.112.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f8:78:dd:01:46:d9:ba:38:3d:32:63:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 24 15:18:38 2026 GMT
Not After : May 25 14:18:38 2026 GMT
Subject: CN=3d659567-0940-43cc-bc17-a3e01564ba4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:07:dc:5f:07:81:dd:75:a3:0d:8e:2b:50:
38:af:b2:66:e1:c0:7d:4c:05:fe:b2:35:b9:fb:d7:
eb:f3:dc:b0:54:ca:71:75:c7:10:96:17:bf:0d:37:
9f:8e:35:0a:9d:dd:af:da:bb:a0:48:b0:fb:1c:6a:
64:46:36:17:fd:34:e9:16:cb:d1:f2:ba:cf:3a:b9:
c8:66:83:9a:34:56:c2:fb:c6:96:37:73:24:35:59:
94:c8:bc:9f:a2:3e:5f:50:26:35:9f:4f:bf:f8:29:
a4:ff:d5:45:16:14:90:17:80:8c:08:84:d5:e5:55:
7b:85:e2:94:9f:b8:d7:18:d9:35:76:fd:50:ab:7d:
7a:ec:cc:41:6b:e8:b7:87:1d:2e:ff:6f:97:08:68:
9b:c8:7a:61:61:2f:87:f1:a9:4a:89:ba:59:a8:e5:
f8:8a:66:5e:77:f3:15:c5:04:09:3e:ae:f3:bb:50:
af:c2:89:16:8d:be:5f:90:65:f4:62:d8:ad:b0:78:
db:cf:7c:12:53:0d:c2:99:7f:22:13:db:4d:ac:1c:
2e:c6:c2:b3:c0:14:46:93:49:cd:44:84:93:62:3c:
6c:84:75:b9:b7:77:fc:57:b7:a9:11:52:54:f1:11:
37:20:b7:34:37:3c:fb:d7:51:ff:a0:3b:85:f3:cd:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:53:59:94:23:EA:C3:30:63:9B:DE:FD:EA:CF:9F:69:CD:F8:CD:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1d425b2-21c5-3f27-8372-98a3a5444b51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:e2:ae:a0:50:83:d2:c7:28:9c:1d:c1:ca:20:17:ac:48:bc:
12:63:1e:61:b7:73:9c:6e:72:c0:16:e8:43:c1:63:85:1a:bc:
c8:17:f2:02:22:3b:35:a1:6e:61:d6:92:07:3c:1b:10:e1:52:
bf:a9:fe:10:bd:ee:1b:69:91:f4:b1:45:14:bb:bd:22:c7:75:
01:09:82:3c:73:64:ae:f9:68:0d:da:7d:5a:3d:0f:21:a7:c5:
58:6b:3d:af:e5:35:6c:82:2b:54:1d:1c:20:9e:dd:ab:34:24:
31:7d:b0:e7:c1:85:e1:8a:a5:f2:50:0b:27:01:b8:43:90:06:
56:1d:fe:b4:e2:8d:35:f0:be:ce:cf:ee:1f:69:99:ba:49:11:
85:fb:73:b1:29:5f:1e:7e:ef:b4:8c:f4:45:2a:4f:4e:a0:65:
fb:1f:12:32:6c:9b:21:05:d3:fb:f7:3f:45:4c:ae:6e:29:c9:
53:8e:63:16:38:04:c4:06:9f:a1:7d:5f:5e:4c:a9:8a:d3:97:
58:32:66:8a:8d:c1:77:b1:97:50:63:a8:71:81:f3:4e:0f:dc:
fc:e5:5e:b6:08:d2:2e:f6:7e:77:2b:06:00:2c:5c:be:f3:57:
da:7a:02:0c:79:67:88:02:cd:07:90:19:f2:f9:30:19:5d:be:
f8:aa:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:34:28 2026 by rpki-client