
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa
File: 95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa (raw, json)
Hash identifier: C9ZLWxLlyC0Rr4R0jmFhB0SxxyCWxOIRT4BW9WfSCF0=
Subject key identifier: AD:E7:53:26:A9:0C:37:38:0B:45:52:59:DB:0C:AF:CD:38:04:EB:A7
Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial: 010D0C9F4328584D7A0532330724E5F281164300
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 33211
IP address blocks: 206.41.120.0/22 maxlen: 22
206.41.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:32:33:07:24:e5:f2:81:16:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=05ad81a0-e796-438b-a482-370e9792496b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:8b:f9:11:78:07:ab:78:93:52:07:97:2c:
23:7a:40:5d:14:51:60:23:50:09:d1:0b:3d:ea:e1:
54:ba:d7:df:7c:5d:ac:32:fc:de:9a:db:f8:07:97:
c8:a5:12:36:ad:e2:51:89:6e:3d:51:45:a0:6e:a4:
9a:69:72:cc:0f:b7:73:f7:13:d9:28:2a:bd:56:60:
97:2f:12:f7:d0:31:73:87:4b:21:ce:5c:ca:aa:b4:
1f:5c:a6:18:31:e1:10:f4:de:2b:5a:fc:ba:b0:e4:
ca:82:83:8e:9c:b6:6b:3e:f5:d9:15:ba:2f:18:db:
50:c1:94:72:e8:9e:f9:f7:02:8c:c3:3c:cc:ef:16:
49:c9:00:d2:9a:50:f2:5e:10:f5:2a:4b:a9:5c:68:
1e:20:58:33:56:4d:3e:84:21:6b:21:46:49:4e:46:
c7:c7:79:5a:af:5d:50:da:ac:cc:0e:05:81:6c:33:
a4:5b:f1:ce:20:e8:f5:9b:f1:b4:37:12:6b:01:a1:
6d:eb:2d:54:8d:08:8f:ee:77:c4:0f:c5:ef:fc:9f:
0f:b8:79:6d:50:3c:22:55:9b:a9:22:02:4d:d3:5d:
3d:5b:1c:fe:03:3c:94:42:32:10:c4:36:0d:8b:09:
a8:11:2c:91:af:ea:f0:cf:41:d0:6d:b6:66:07:ad:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E7:53:26:A9:0C:37:38:0B:45:52:59:DB:0C:AF:CD:38:04:EB:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
X509v3 Authority Key Identifier:
keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:69:9c:79:0f:f2:49:7b:ba:76:73:ae:32:ad:8b:d8:e1:7b:
5c:26:a9:45:39:64:4e:2d:25:e7:38:5c:23:94:e8:8e:98:64:
92:fc:9e:ef:b6:c4:df:12:67:9f:34:48:36:b8:10:98:47:59:
6b:59:10:10:1c:85:d0:dd:a9:b1:d9:98:eb:ce:f7:09:20:af:
de:a2:44:33:2a:8f:c3:1f:26:d9:84:fa:53:f1:3b:18:a0:97:
65:a9:26:29:c0:ef:24:6b:ff:70:56:8d:a5:79:89:aa:18:39:
72:a2:1a:10:2f:ba:ec:8e:cc:1c:f2:c9:05:57:da:94:e8:3f:
cf:95:74:e1:16:3c:08:2b:21:67:63:a9:8a:3f:a1:9f:6b:60:
65:46:f2:42:61:5e:19:1b:1c:b9:67:7e:c0:de:a5:7f:de:47:
c0:88:81:1e:52:c1:e1:ea:1b:1b:19:58:34:5d:82:91:ef:48:
7c:64:d9:bf:69:f3:cc:d9:87:b3:bc:90:f9:94:ed:31:a5:1c:
bc:3c:0e:c4:d4:e3:89:0d:6e:10:3e:e3:ae:61:01:83:a2:7c:
77:97:83:08:fe:8c:6d:20:f0:5c:af:24:13:12:6e:aa:56:25:
af:bb:d0:45:7f:16:3f:47:4e:2a:f8:46:7f:77:51:0b:3e:23:
3f:82:f0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:59:19 2026 by rpki-client