
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
File: 4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa (raw, json)
Hash identifier: C2xVO/qqGttjPc8U0QUx3eMuBMn99wZbPI4A5+mwQNQ=
Subject key identifier: 96:16:CE:18:C0:32:C8:62:18:4D:41:34:C9:E1:FF:05:6F:1A:C5:7F
Certificate issuer: /CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b
Certificate serial: 010D0C9F4328584C8476E959C626F2CA9161A428
Authority key identifier: 86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 394875
IP address blocks: 52.144.25.0/24 maxlen: 24
2620:f9:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:76:e9:59:c6:26:f2:ca:91:61:a4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=827103b4-dcd3-4c1b-aa6a-01537e7a1540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:22:26:ca:9c:10:03:db:3d:1c:81:b9:c3:
e7:aa:a2:39:dd:a1:6e:26:b7:52:4c:e9:1b:2f:24:
ae:b5:49:90:c8:f0:ba:28:5d:46:c3:c0:db:8f:2d:
b9:00:7b:f8:b4:70:be:85:d7:66:74:f0:13:ec:a6:
ad:ac:be:cd:9c:db:e7:42:a5:76:25:0f:36:98:3f:
b6:38:e1:8d:9d:d8:f2:80:cb:63:52:d4:55:87:f0:
59:04:82:f9:df:a4:94:2b:ba:c3:b0:16:6e:46:5e:
3f:c5:fb:92:6c:53:2a:16:31:91:63:9f:26:a6:f4:
a2:05:8b:52:da:82:07:6a:7d:68:b6:59:41:0e:84:
1c:80:59:36:fb:ee:5d:53:3f:9b:ca:51:e6:56:53:
41:10:41:60:31:ae:5c:6d:b9:a9:3d:ea:d3:fc:27:
02:e3:f8:df:f0:21:52:e2:3f:01:e6:de:da:58:b8:
1e:46:cc:db:da:79:9e:b9:1f:f8:26:ed:8b:51:66:
6c:46:20:be:53:52:a3:65:99:65:31:cc:11:ac:f5:
3d:e2:7e:38:71:c7:49:41:6b:75:78:ea:ba:eb:a0:
89:7e:cc:07:4c:24:b7:a4:c3:0f:35:89:19:62:b5:
cd:f5:22:8a:ed:ac:53:03:a3:cb:36:cb:00:33:67:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:16:CE:18:C0:32:C8:62:18:4D:41:34:C9:E1:FF:05:6F:1A:C5:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl
X509v3 Authority Key Identifier:
keyid:86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.25.0/24
IPv6:
2620:f9:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:78:35:80:f4:52:7a:60:32:ff:d5:37:d3:3d:31:ab:ed:f9:
c9:16:c7:a1:b0:1b:8f:dd:fd:b4:ef:51:da:93:a0:aa:17:a6:
b1:6f:08:0c:36:b4:96:3d:e3:cb:75:ea:c1:7d:d3:bd:12:62:
55:76:2c:2c:f0:bc:56:e6:1e:62:8b:15:fb:c5:8e:c5:84:9e:
ba:c6:fa:bd:16:8f:0f:1a:8e:a9:01:cf:ee:c6:c6:ff:63:3a:
fa:f7:db:89:92:83:ea:39:16:31:de:6f:79:80:c2:5a:fb:67:
a9:f4:2f:ad:e1:41:d7:fc:b1:bf:f3:1a:96:ef:ee:74:4a:d9:
4c:56:a2:26:90:c3:3b:c9:e2:dc:52:47:05:5d:65:bf:c0:0c:
80:cf:0e:0c:01:e9:2b:1b:ed:9f:0c:9f:bd:d9:9d:5e:66:22:
18:41:3e:41:53:e7:c3:7d:72:74:88:b1:d3:66:a3:94:1c:08:
ae:4f:8e:c7:35:1f:2e:28:f4:97:74:1d:e7:c4:4a:6b:d6:f2:
7e:2c:cd:ae:d2:43:ba:96:1e:ce:f1:6a:c5:63:d8:43:08:1f:
b4:f9:63:5c:8f:26:9e:d2:60:66:15:88:9a:ce:19:26:15:72:
73:16:bb:3d:6f:fd:8c:92:13:ec:dd:aa:dd:12:7c:78:33:1a:
8f:5e:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:49 2026 by rpki-client