
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/425bc425-ab56-3ed6-90a7-fa902292f916.roa
File: 425bc425-ab56-3ed6-90a7-fa902292f916.roa (raw, json)
Hash identifier: wmape57hbBzA5flh2s2vOqEunW9Tz+T9GC2BNBYEspM=
Subject key identifier: 37:DB:E3:E8:68:49:07:2A:81:E6:3C:51:9B:A0:40:95:B8:50:D2:96
Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial: 010D0C9F4328584CB00ECF856AE35DD0E306ADC0
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/425bc425-ab56-3ed6-90a7-fa902292f916.roa
Signing time: Thu 29 Jan 2026 16:46:45 +0000
ROA not before: Thu 29 Jan 2026 16:46:45 +0000
ROA not after: Wed 29 Apr 2026 15:46:45 +0000
asID: 13213
IP address blocks: 206.130.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b0:0e:cf:85:6a:e3:5d:d0:e3:06:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Validity
Not Before: Jan 29 16:46:45 2026 GMT
Not After : Apr 29 15:46:45 2026 GMT
Subject: CN=69b9c86f-6f41-4f94-9182-505d8ca96949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:d5:3e:66:a9:17:53:02:d9:89:22:6c:86:
f2:c5:6f:78:60:26:22:fd:23:b1:c3:28:af:a4:9f:
2f:f6:77:f5:2d:fd:f0:9d:0d:76:26:ce:3e:71:f3:
79:9f:03:34:98:06:25:cd:56:00:d2:e9:04:1a:f2:
26:3e:73:5e:7b:f4:9b:71:03:f1:e5:b2:1c:f2:33:
4d:b2:7e:ff:de:cc:07:69:ea:09:65:a4:48:3c:13:
62:5a:82:2a:c6:c4:0a:0a:ff:4a:79:5b:0e:16:00:
95:a7:9c:6c:c3:fd:71:6a:22:ba:fb:6d:81:e9:14:
8a:e9:ff:3b:1a:24:11:d7:8c:93:26:9b:79:fe:ee:
9d:bb:91:ab:b2:63:58:6f:92:b7:37:36:a9:d0:95:
d8:66:a2:7a:d2:84:46:f7:3b:5a:8b:77:04:7e:43:
cd:dc:32:c9:09:35:d2:1d:3d:4d:01:d0:81:7d:f1:
54:8a:89:ba:d1:02:83:2f:77:96:63:ee:a8:11:e0:
36:0e:f3:01:8d:e9:93:61:7e:a9:9d:fb:8d:b2:5f:
a4:45:56:be:51:94:1b:19:74:0e:f4:f9:4d:19:58:
0f:ac:58:ad:52:31:f1:a2:98:ce:61:6e:7c:cc:70:
87:09:3b:c4:23:5c:63:ca:28:1a:fd:62:fd:98:15:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:E3:E8:68:49:07:2A:81:E6:3C:51:9B:A0:40:95:B8:50:D2:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/425bc425-ab56-3ed6-90a7-fa902292f916.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
X509v3 Authority Key Identifier:
keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
sbgp-ipAddrBlock: critical
IPv4:
206.130.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:55:45:32:f2:e4:db:56:3d:03:ec:4f:4b:88:c4:11:39:f9:
6e:67:d8:94:98:f8:86:eb:93:fe:ea:4c:5d:e5:8b:e9:23:27:
cb:df:87:4a:46:2f:17:4a:49:e2:3e:9a:a2:33:e1:25:5e:e7:
0c:18:d7:26:ff:88:e7:3b:c0:1e:48:45:74:39:5f:86:ca:e9:
d9:41:dc:ce:5b:e1:6f:13:90:eb:87:a7:5f:f0:a1:0a:15:cd:
21:cb:b4:cc:90:5f:37:52:fa:e4:dc:58:f2:59:47:0f:ee:bc:
6e:6b:00:92:d0:a0:e6:b4:01:4b:c1:a2:81:74:72:c5:d3:39:
f7:c5:74:b7:f8:a2:e9:52:83:b9:89:99:1a:1e:94:98:42:3e:
b3:68:b7:11:f9:2b:57:3b:9f:2a:da:d0:58:02:4a:f0:bc:14:
e0:74:b1:ba:dd:48:5e:41:1f:f2:e0:8a:85:82:16:71:82:1d:
65:7f:a3:f2:03:4e:b2:16:00:4c:cc:18:a5:e2:49:6c:6b:22:
50:3b:08:35:62:ea:91:5f:ec:5f:be:f8:98:73:f3:07:6b:db:
8b:96:5a:2f:58:e7:a4:8c:52:10:01:00:85:50:ad:4e:ba:8c:
a8:a3:81:4e:ce:4b:ad:9c:10:2b:94:da:69:63:ea:7d:99:5d:
ab:b0:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:07:02 2026 by rpki-client