
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa
File: 9a980a6a-941e-34a1-9ffa-edd653116330.roa (raw, json)
Hash identifier: h4zy3i9Lu8l03FVuDDrYzK7tBkccNj3a+ASAMhKVy9c=
Subject key identifier: 72:06:A0:5C:77:87:3E:47:68:FA:B2:31:5E:92:DC:EA:40:73:C4:64
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584E0C1EDBDBAC9DC07FE841EA00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa
Signing time: Wed 03 Jun 2026 09:00:13 +0000
ROA not before: Wed 03 Jun 2026 09:00:13 +0000
ROA not after: Tue 01 Sep 2026 09:00:13 +0000
asID: 11090
IP address blocks: 216.137.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0c:1e:db:db:ac:9d:c0:7f:e8:41:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Jun 3 09:00:13 2026 GMT
Not After : Sep 1 09:00:13 2026 GMT
Subject: CN=7a137286-9774-4c90-921a-b3cad9b6136f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:24:56:42:34:0a:a4:f1:2b:8d:60:21:65:40:
71:c3:85:99:91:48:a8:69:1d:49:14:f4:ba:f6:87:
e8:03:b8:b8:e1:de:b9:b9:45:de:db:82:4f:a7:5b:
ae:fd:d8:36:12:58:83:46:35:6d:a9:62:0f:7e:bc:
f1:de:3b:c1:e6:01:b8:18:75:23:f9:0b:30:12:2a:
44:ce:54:7f:8d:86:b8:0e:c3:c7:44:f2:7e:38:85:
e9:e5:62:e9:fa:e6:79:74:c8:29:df:8a:c1:ab:6a:
03:ef:2a:96:3f:c9:5e:e5:65:c1:f7:17:ac:b4:72:
89:ed:43:da:4c:99:70:28:78:d7:b5:6e:91:23:2b:
81:c4:da:c5:9f:3a:81:6c:f2:f8:00:ea:99:7a:86:
1a:04:3c:df:52:e2:78:40:81:83:e0:d8:96:43:f7:
18:de:e6:9b:34:ad:13:51:72:82:ba:79:ef:57:66:
9c:1a:0b:54:35:b5:7f:67:59:21:51:11:15:77:9d:
96:14:86:54:5b:ed:35:85:4d:78:bd:92:63:0f:5b:
c0:21:cf:61:c0:f0:86:bb:7c:05:84:75:9c:0d:f2:
17:91:43:ac:04:e9:99:08:f4:fd:c7:0d:81:14:a0:
47:dd:f6:46:a5:f0:75:c0:e6:fb:99:70:8d:fb:67:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:06:A0:5C:77:87:3E:47:68:FA:B2:31:5E:92:DC:EA:40:73:C4:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:89:4d:02:f8:0b:87:a7:e4:3a:be:e5:11:19:31:dc:e2:6c:
f3:e4:b4:f3:e3:09:20:84:0d:36:49:ff:fa:b7:a7:a9:d1:6f:
6c:ce:51:a2:10:c5:90:65:d7:4b:db:7c:62:45:23:8f:8b:df:
e4:32:46:60:4e:5c:ab:f2:14:be:b8:b9:ed:55:a8:91:5e:06:
16:b5:94:e6:1b:c0:81:9d:80:64:0c:c1:6f:1a:7b:69:3b:da:
0b:63:0f:5d:8d:fb:92:04:5e:c3:51:45:61:82:09:50:99:90:
7b:cb:d5:00:89:d7:47:c2:48:a0:69:6a:9a:7f:b5:64:a9:d3:
68:cc:e8:a6:d2:35:6e:8b:c5:c6:9e:b8:a7:84:ee:94:ee:f0:
15:a5:17:34:10:25:2e:f3:f6:f5:7a:15:06:d6:4d:0f:6d:96:
53:e3:af:00:47:5a:db:01:8d:46:b3:34:e4:20:00:d7:bb:a2:
d1:3a:65:4d:b4:90:84:e8:89:5e:74:53:22:13:64:7d:ef:14:
95:4a:f9:44:87:7b:f4:cf:77:c1:2b:b4:42:92:25:74:b9:92:
54:69:40:97:1a:01:44:e5:65:c4:61:73:f0:99:6e:54:9a:ab:
6c:dc:9c:ab:c9:75:92:6c:2b:df:1f:99:4d:4c:d9:d0:91:ff:
5b:62:7f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:22 2026 by rpki-client