
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa
File: 3fa4d696-276f-36ac-9131-15dddd8bc011.roa (raw, json)
Hash identifier: l24HAE2k6H0KaJKAIwLAHyvFZQ2T2En59OmOxLQj8Q0=
Subject key identifier: 68:96:1F:AC:F1:6A:07:73:89:21:D3:B8:8A:7E:18:68:14:14:F4:83
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F4328584CDB0221C07EA96BA8DD629980
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 16509
IP address blocks: 216.224.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:21:c0:7e:a9:6b:a8:dd:62:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=6483e265-1a43-4c90-9621-180c1f2860e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:c6:86:0c:14:96:a0:c5:fb:b9:b6:8a:37:
d5:29:59:10:e8:7e:5a:0a:21:14:e0:67:8b:d0:57:
0a:63:41:2d:ca:62:5e:3d:9a:62:fa:a5:5b:3a:a9:
46:3a:a7:85:3c:db:5e:19:48:71:c5:c8:51:3e:c9:
b0:db:36:f4:1c:3a:26:0d:77:da:a4:44:56:91:2a:
7c:a0:d0:0b:4c:8f:fe:72:cf:f2:0d:95:d3:8a:a7:
82:0b:59:0a:e9:14:0a:cf:70:36:9f:b7:ba:b8:f3:
84:49:24:65:a1:26:ee:91:00:e1:50:e8:11:03:71:
ff:16:ba:7c:55:12:7e:08:6c:aa:14:0f:0b:af:69:
48:70:21:b4:fb:62:c7:39:4a:9a:a9:a8:78:0d:ce:
8e:11:37:20:de:3f:97:74:1e:5b:de:c9:ac:67:07:
e4:6c:36:66:34:a1:f0:37:49:2d:88:ab:b3:c1:43:
0e:ff:56:51:ab:07:dd:98:42:2c:a7:8a:85:c7:22:
0e:09:7c:65:78:61:5f:ed:ca:a7:a9:7b:56:1a:46:
45:a3:96:1c:8e:ce:af:50:a7:c8:2d:77:8d:38:81:
dd:4e:13:c1:29:2a:82:7d:1a:be:4e:42:da:86:2e:
d5:81:5f:cb:fa:b4:f3:8f:11:01:25:87:e9:bf:b8:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:96:1F:AC:F1:6A:07:73:89:21:D3:B8:8A:7E:18:68:14:14:F4:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.224.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:3f:b1:c0:a0:da:ca:0f:9f:f1:37:3b:f2:24:9b:ee:06:0b:
2e:cd:19:f4:3d:0d:9e:d2:3d:79:ec:6c:5c:d7:16:c1:e5:d7:
22:e6:f0:88:6a:a9:2b:84:7a:bd:75:8c:70:55:13:ad:6b:3d:
a5:69:fd:cb:7b:a1:38:eb:ce:43:6d:5b:2c:6f:f1:02:ce:d0:
06:45:cb:d3:66:13:4f:b6:d0:43:5e:bf:12:1b:2e:94:6d:02:
bf:d4:30:5f:18:1b:b2:bb:8e:04:be:f2:b6:ae:e8:92:a5:7d:
21:75:48:9d:3c:10:e2:0a:5d:44:40:6e:5d:36:f8:80:1e:b0:
49:ae:33:81:fb:91:e2:e4:a8:e4:4a:38:d0:15:7a:f2:d0:bf:
46:5d:19:49:21:1a:d8:7a:76:76:50:73:40:cf:33:1a:0e:33:
c2:48:8e:d1:d5:42:fb:92:f1:a5:27:ae:8a:61:a6:18:5c:0e:
c1:35:10:43:76:98:f4:56:58:2e:d7:8a:8a:44:3e:48:ef:1e:
47:56:a7:c0:6c:9f:de:7b:5d:c2:0f:0d:ac:fe:5b:c0:0a:49:
70:d2:70:f4:e7:b9:bf:5c:2e:9f:02:bb:e0:28:b3:c8:0f:2c:
2a:58:fb:50:b2:87:5d:aa:3f:3a:ed:bc:56:ad:20:0e:ea:e8:
22:e1:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:20 2026 by rpki-client