
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa
File: 3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa (raw, json)
Hash identifier: 1HZKcqQBoFZMZCofzPZs93gNIbL14mrppqlhtStHoE8=
Subject key identifier: FA:E7:8D:C3:14:09:21:02:4A:5D:A7:FE:83:D2:D0:50:F4:72:08:A0
Certificate issuer: /CN=e96beed0-0beb-4387-bde4-56aa0782ae2c
Certificate serial: 010D0C9F4328584D8AC54A174F5CDB0B58E82C80
Authority key identifier: 08:E6:A0:B8:AF:1D:0E:39:34:3F:22:B9:3A:12:AD:B4:BF:67:81:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 36326
IP address blocks: 158.51.132.0/23 maxlen: 24
2602:fcd9::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:4a:17:4f:5c:db:0b:58:e8:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96beed0-0beb-4387-bde4-56aa0782ae2c
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=f961a925-d78a-43e4-83bc-6d69166901ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:13:85:95:53:16:0b:91:26:f0:bd:a2:d8:
e4:fa:0a:63:0c:fd:9d:96:00:13:ce:b6:1b:07:0b:
f6:ee:0a:d3:b1:02:c8:56:a2:20:29:6b:a0:08:60:
b3:d4:1d:b2:9d:76:4e:35:4b:48:ee:52:ec:27:87:
71:3f:9b:07:b9:34:70:2b:9d:9f:57:c7:4c:cf:63:
5e:ba:65:fa:6a:65:73:af:be:be:fb:d5:d1:8d:ac:
56:b3:67:0b:c0:0b:c0:c3:19:55:a7:a6:01:dd:c3:
a3:aa:f6:d2:af:96:6d:3e:48:e8:75:e5:1a:41:ff:
4c:55:8e:02:d5:2f:c8:98:8e:a0:08:10:fb:bf:85:
0d:74:7e:4e:b3:f9:b2:07:90:40:06:a0:51:72:80:
c1:d6:0a:bc:cf:60:a4:24:95:5b:02:31:88:bb:cf:
b2:24:49:9d:08:18:a5:7b:7a:f1:89:50:63:c6:dc:
75:8a:c4:d0:91:37:f7:8f:80:10:93:c0:e0:cb:8e:
56:e4:a5:62:40:6c:f0:5c:d0:93:36:42:9c:9a:6c:
18:70:9e:bc:e1:b4:9d:52:28:10:a4:a9:ba:19:5f:
9b:01:b1:d4:28:0c:31:48:9e:5d:c9:cd:13:1e:5a:
d9:98:46:ef:48:ba:cd:77:26:0f:9e:74:52:54:1b:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E7:8D:C3:14:09:21:02:4A:5D:A7:FE:83:D2:D0:50:F4:72:08:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.crl
X509v3 Authority Key Identifier:
keyid:08:E6:A0:B8:AF:1D:0E:39:34:3F:22:B9:3A:12:AD:B4:BF:67:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.132.0/23
IPv6:
2602:fcd9::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:ac:10:04:7e:d1:31:06:81:6f:36:ed:03:1d:d3:07:6f:1d:
96:a9:fa:06:64:c8:b3:30:f9:a3:57:36:5f:53:0c:39:70:7d:
27:78:6e:2d:8d:57:00:15:76:7c:ae:e1:63:64:ea:56:9f:78:
1b:11:c2:db:04:b4:8c:4b:04:ac:6d:bd:74:d2:a2:05:2e:d1:
8c:1f:fe:c0:3a:22:73:d8:7a:59:fc:91:10:2a:79:0c:df:5d:
00:59:16:d0:70:88:2e:7a:5b:2e:38:59:f2:7e:0f:d9:6b:56:
58:9c:b8:ce:7c:ca:6d:1a:2d:21:4d:bf:9d:2c:ae:51:ca:60:
63:47:bf:ce:67:f5:2d:10:71:ba:e6:27:e5:c1:cd:05:28:e0:
e2:6a:4c:74:e6:23:68:88:f5:96:cb:f2:d0:93:48:5d:aa:bb:
32:74:17:55:a1:6d:18:af:24:c8:8e:3b:5b:9c:dd:28:e2:e0:
ab:25:36:fc:52:1c:42:88:c4:ef:27:39:41:95:da:14:d6:25:
cb:25:9a:4c:b5:13:df:01:d1:1f:cb:14:88:8e:07:e7:7e:53:
4d:8e:83:12:b0:6b:ac:8d:f4:a3:6f:3d:97:f3:42:15:ca:a6:
1c:3d:d0:08:35:e1:97:6d:34:fc:dd:fd:8e:47:c4:a4:e7:b5:
e1:b4:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:18 2026 by rpki-client