
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/9618773d-a867-3653-ac63-302f226db7a9.roa
File: 9618773d-a867-3653-ac63-302f226db7a9.roa (raw, json)
Hash identifier: TqrromWegR5EMlpq/AC8ivPyyIZRdcm0w6/FGbKL3xM=
Subject key identifier: 2D:51:57:F6:00:19:4E:6C:70:C0:0D:6E:02:B3:73:A4:3F:9F:55:3C
Certificate issuer: /CN=23e8b687-5694-47a8-8a0b-d3828a99b77a
Certificate serial: 010D0C9F4328584EA78710E910544A31578BBF00
Authority key identifier: ED:73:21:DD:47:64:1D:F3:7C:BF:2E:0A:28:35:8E:5C:32:FD:D8:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/9618773d-a867-3653-ac63-302f226db7a9.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 1046
IP address blocks: 206.168.244.0/22 maxlen: 24
2607:9340::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:10:e9:10:54:4a:31:57:8b:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e8b687-5694-47a8-8a0b-d3828a99b77a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=54cb75e2-badc-47ab-b0ab-71091c519fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:eb:92:12:a1:38:26:1e:60:d6:b3:fe:02:
29:0e:90:7b:c5:77:de:4b:18:7c:c9:20:5f:25:25:
21:95:e7:cb:27:46:06:b6:1f:41:70:a3:ca:4a:cc:
e3:60:9e:19:15:f2:5e:87:e6:ba:b7:9d:83:48:7d:
75:e2:0f:25:ba:b7:b2:31:57:c2:75:a4:ae:96:39:
3c:ee:4a:52:1c:bc:db:42:40:d2:18:08:0a:22:92:
2a:bb:a9:84:02:75:03:13:b1:da:d5:46:22:3e:9e:
b3:d2:7c:35:74:2b:5a:a9:b6:c5:fe:bf:cd:72:4a:
cd:a1:b4:e1:fd:40:f8:5a:b1:10:b5:91:97:1f:6a:
53:d3:b8:c7:62:11:e1:a8:9c:a3:d1:21:9e:21:52:
9c:58:78:fb:e4:a3:1c:2c:8c:31:51:7e:fa:d3:4d:
e3:1f:e9:94:e1:6b:ab:2d:5d:e4:f9:69:9b:f2:f5:
55:cf:78:83:d2:e3:e8:45:d5:2b:f7:5d:35:fd:bf:
5e:cf:b7:c3:13:77:3f:a7:9f:20:ae:5b:ef:97:e4:
5f:bc:b7:c4:e9:45:63:c8:48:a1:75:78:15:6f:bb:
98:73:1a:b1:30:4d:82:8b:31:c6:54:99:c3:56:61:
09:7f:b8:7a:ee:96:3b:c5:1c:7c:82:74:c8:4f:da:
a8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:51:57:F6:00:19:4E:6C:70:C0:0D:6E:02:B3:73:A4:3F:9F:55:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/9618773d-a867-3653-ac63-302f226db7a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.crl
X509v3 Authority Key Identifier:
keyid:ED:73:21:DD:47:64:1D:F3:7C:BF:2E:0A:28:35:8E:5C:32:FD:D8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.244.0/22
IPv6:
2607:9340::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:01:4a:0d:40:46:57:3b:12:68:4e:b8:8f:fe:0d:32:7e:58:
99:54:47:da:3d:75:2f:e0:6f:b5:39:c5:41:79:61:5d:fc:bc:
a8:fa:a3:39:72:b7:cf:69:73:33:e1:97:0c:1b:c9:e7:4d:05:
67:75:96:9b:17:5f:25:c1:8f:35:3b:5c:6a:fc:5b:0f:1c:08:
be:2a:dc:59:88:fb:a5:f6:5e:f9:e7:75:7d:c9:63:8b:54:c7:
13:7f:db:81:c7:06:14:02:70:99:50:3b:f0:ac:2c:85:f6:73:
26:9e:97:c3:9d:62:6f:01:6a:e1:d9:fc:de:82:06:5e:7c:61:
c2:82:60:29:55:31:92:a4:42:5e:8d:0c:bd:9b:14:52:95:22:
1e:30:e1:5a:eb:57:8e:5f:b0:3e:90:af:b8:68:ee:6c:0e:10:
0c:60:2e:30:bc:84:bc:98:ca:91:73:e7:e9:5c:26:6f:a8:ed:
f2:91:7b:a6:6d:f5:a1:89:32:cb:06:b7:d0:59:09:39:70:90:
5a:2a:66:25:54:17:1e:14:77:75:25:40:02:c9:30:47:61:91:
b1:fc:dd:f7:55:02:f0:22:a0:3d:c9:d6:20:46:24:ba:26:19:
b6:cf:fd:a4:94:eb:bc:bf:36:b4:78:1e:81:dc:63:c2:16:d4:
25:4f:2f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:45 2026 by rpki-client