
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa
File: 6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa (raw, json)
Hash identifier: yheYoj845vyP8IT1+fe/y+2DzpfJAOGX3ORkg6kUHZQ=
Subject key identifier: 29:88:A8:CE:DA:99:85:DD:DF:0C:4C:A2:3A:89:E6:68:15:01:1B:2D
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584E0C1EDBB5294896F3FFF59D00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa
Signing time: Wed 03 Jun 2026 09:00:13 +0000
ROA not before: Wed 03 Jun 2026 09:00:13 +0000
ROA not after: Tue 01 Sep 2026 09:00:13 +0000
asID: 11090
IP address blocks: 216.137.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0c:1e:db:b5:29:48:96:f3:ff:f5:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Jun 3 09:00:13 2026 GMT
Not After : Sep 1 09:00:13 2026 GMT
Subject: CN=028fe4f2-7e99-431c-9d2d-f83c4ba06bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:65:76:8c:63:22:aa:13:13:db:5b:23:f7:
c5:68:3a:da:6f:09:20:b0:92:c1:2b:b5:a7:96:5e:
d8:6e:37:c0:4c:ed:14:97:26:5c:8e:2a:92:f1:c1:
75:2c:37:bc:5d:3a:b1:5a:08:09:bc:8a:00:9b:ec:
dd:ec:18:3d:cf:cf:2b:05:35:12:d0:32:ad:3c:c7:
69:53:27:9f:c0:08:c9:7c:c8:48:ac:ac:2b:67:43:
f2:28:1d:c5:23:17:18:e5:26:5a:23:d1:69:7a:d0:
a3:15:90:b7:4d:54:7b:85:53:07:d3:50:3e:db:ab:
db:b6:f0:00:1a:08:40:24:71:0c:b3:b6:6d:61:a9:
f5:b7:86:f1:45:3b:e9:8d:7c:18:44:84:32:2f:fb:
6c:eb:fc:c3:ce:84:32:92:93:62:ac:75:23:84:8c:
d5:03:d1:32:0c:85:16:64:dd:c1:bc:a2:cf:de:ab:
3e:55:3e:81:39:73:ea:95:21:5d:ee:99:5e:0c:e3:
73:59:38:ef:d1:25:57:0b:7a:f4:38:54:c4:24:a6:
78:68:b5:5f:b6:45:73:61:03:fd:99:19:38:0f:7e:
8f:4b:c6:14:c6:b3:3c:1b:81:dd:10:f4:07:d6:55:
7f:14:5a:a6:fc:24:90:ee:52:54:fc:0f:cc:f5:9e:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:88:A8:CE:DA:99:85:DD:DF:0C:4C:A2:3A:89:E6:68:15:01:1B:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:e8:1c:ce:62:dc:19:d0:b9:6b:ab:a7:45:01:7c:8f:0b:c1:
4c:16:bb:9e:6a:9b:f0:53:9e:89:a5:56:3b:87:21:1f:a5:12:
a7:8a:f3:72:26:b4:97:03:d7:fc:62:e3:43:97:5e:b5:17:a5:
38:63:fd:f5:c1:7e:b5:dd:a7:6b:07:91:ef:b8:4f:0e:67:d4:
58:13:bf:67:b0:db:f7:f5:a4:e7:d1:c2:ac:f2:ce:e8:30:85:
e7:5b:f5:71:3e:c3:b8:3b:ed:6b:82:08:22:aa:f6:72:23:ad:
b4:c8:a4:15:90:cd:a1:82:eb:37:89:23:6f:71:70:a6:63:09:
20:1a:63:40:45:2c:6b:b6:32:15:01:ca:83:2a:2b:fb:9a:43:
c7:f6:f0:79:7a:29:10:bf:87:5c:90:ec:c0:6a:aa:30:77:9a:
63:0c:e0:bc:fd:d5:24:43:50:71:01:64:d3:ea:c1:ed:66:eb:
ca:a7:6a:3f:52:5f:39:56:9f:e0:c5:19:d4:4f:40:51:94:62:
4d:ef:15:8a:aa:4b:bf:40:0c:48:61:5d:9f:b9:9a:2e:12:6e:
6f:5f:91:51:67:7d:d9:f9:8d:37:6d:ee:03:06:21:ce:34:a6:
ff:1e:5e:90:04:59:0b:c5:0a:54:a9:77:9d:15:29:52:89:6d:
4b:12:d5:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtu1KUiW8//1nQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk
MDI4ZmU0ZjItN2U5OS00MzFjLTlkMmQtZjgzYzRiYTA2YmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovZldoxjIqoTE9tbI/fFaDrabwkgsJLBK7Wn
ll7YbjfATO0UlyZcjiqS8cF1LDe8XTqxWggJvIoAm+zd7Bg9z88rBTUS0DKtPMdp
UyefwAjJfMhIrKwrZ0PyKB3FIxcY5SZaI9FpetCjFZC3TVR7hVMH01A+26vbtvAA
GghAJHEMs7ZtYan1t4bxRTvpjXwYRIQyL/ts6/zDzoQykpNirHUjhIzVA9EyDIUW
ZN3BvKLP3qs+VT6BOXPqlSFd7pleDONzWTjv0SVXC3r0OFTEJKZ4aLVftkVzYQP9
mRk4D36PS8YUxrM8G4HdEPQH1lV/FFqm/CSQ7lJU/A/M9Z7Y2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmIqM7amYXd3wxMojqJ5mgVARstMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNmJkOWY5OTMtOGU3NC0z
ZGE5LWJjMzMtMzNlMzc4ODNlNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2InkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXoHM5i3BnQuWurp0UBfI8LwUwWu55qm/BTnomlVjuHIR+lEqeK83Im
tJcD1/xi40OXXrUXpThj/fXBfrXdp2sHke+4Tw5n1FgTv2ew2/f1pOfRwqzyzugw
hedb9XE+w7g77WuCCCKq9nIjrbTIpBWQzaGC6zeJI29xcKZjCSAaY0BFLGu2MhUB
yoMqK/uaQ8f28Hl6KRC/h1yQ7MBqqjB3mmMM4Lz91SRDUHEBZNPqwe1m68qnaj9S
XzlWn+DFGdRPQFGUYk3vFYqqS79ADEhhXZ+5mi4Sbm9fkVFnfdn5jTdt7gMGIc40
pv8eXpAEWQvFClSpd50VKVKJbUsS1QQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:19:03 2026 by rpki-client