
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
File: a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa (raw, json)
Hash identifier: H0Vam6e0Nra+4XzUC0HTqKQ/nBJBcAaA4OO7jUom0v8=
Subject key identifier: D7:83:24:CB:19:89:E5:4E:2E:78:78:B9:31:FB:13:46:29:22:2E:A8
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584CB121C265F98F8840B38CA800
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
Signing time: Fri 30 Jan 2026 02:00:31 +0000
ROA not before: Fri 30 Jan 2026 02:00:31 +0000
ROA not after: Thu 30 Apr 2026 01:00:31 +0000
asID: 9009
IP address blocks: 158.115.232.0/24 maxlen: 24
158.115.233.0/24 maxlen: 24
158.115.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b1:21:c2:65:f9:8f:88:40:b3:8c:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Jan 30 02:00:31 2026 GMT
Not After : Apr 30 01:00:31 2026 GMT
Subject: CN=4ffea9d8-957a-4849-9e7a-727e78e13cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:55:07:6d:d4:6b:d0:cc:94:cb:13:25:49:
49:0f:47:b9:b7:61:bd:14:6f:88:20:6c:67:b4:7b:
27:90:9e:62:76:96:cb:69:86:d9:e4:8f:28:2f:22:
62:78:35:6d:3f:b1:e5:c2:3e:c0:05:49:fa:be:0f:
3d:a0:8e:e0:f0:18:87:49:a2:e8:ff:86:5f:27:c3:
c1:0a:4f:3a:02:38:f5:38:b3:87:6b:09:67:05:e5:
59:c0:8f:af:0f:78:f1:dc:41:28:b3:77:33:6e:4c:
83:65:8b:9a:96:3c:28:ff:ff:7a:9a:07:d3:b5:6d:
ec:dc:8d:91:48:ad:87:be:5a:df:a9:c1:05:33:84:
ab:4f:a6:56:89:d1:64:21:42:9c:d4:b3:6c:51:ba:
7e:ca:df:c0:89:9f:ca:0c:57:0e:72:6b:15:04:d6:
3c:1c:95:96:ed:28:1e:ee:70:a1:74:80:c7:08:c4:
4e:c7:a9:d8:c2:51:da:89:60:b4:48:2c:bf:9f:6f:
28:df:e5:7f:64:69:61:6d:e4:c0:05:40:01:98:5f:
07:19:d2:86:0f:56:19:c0:e8:ae:5a:97:cb:1a:ad:
c9:74:a1:f8:51:2a:ea:94:4c:0d:09:3c:c3:8d:52:
ad:c8:73:8b:a5:22:5f:fb:eb:3a:c4:8f:68:23:2d:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:83:24:CB:19:89:E5:4E:2E:78:78:B9:31:FB:13:46:29:22:2E:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:79:05:f0:41:e5:c7:39:96:bd:ae:08:ab:3b:36:85:79:61:
e3:8c:dc:c1:b2:05:56:68:b2:57:36:6b:91:b4:d1:8a:f9:0d:
4d:13:42:80:31:95:c9:84:6f:61:6f:56:a9:2e:71:97:f7:82:
1c:83:a0:8f:43:90:24:5e:ae:7d:28:9b:77:21:5c:9c:7c:5f:
47:7b:48:89:3d:ff:8a:1b:8e:f1:2e:31:8b:00:41:7b:b7:74:
58:7f:1c:76:6d:81:d6:43:fe:36:24:f7:b4:7f:25:06:49:6b:
d1:a2:32:fe:fe:8f:19:f9:78:fb:b0:0a:f4:96:c2:0f:39:82:
50:4b:8b:3f:7a:08:8b:c1:77:e6:97:c0:73:b6:7b:77:4d:71:
32:d9:e9:c5:ad:48:a6:9e:db:03:1a:70:63:59:e2:25:fd:cf:
62:22:32:00:0d:e7:59:d1:a9:06:a7:31:fc:04:f8:3b:95:0c:
6e:76:58:4e:8c:9f:bc:27:45:e8:57:91:97:b1:ef:fa:65:61:
b5:c6:dc:91:4c:80:0c:7a:ca:53:af:0c:c0:55:0c:f1:6f:e4:
3a:c2:fe:5e:e5:0c:33:b1:78:ac:0e:b0:4b:c9:e0:76:e6:2c:
4e:39:2a:68:85:9d:6c:55:14:e6:d3:a6:54:b8:53:da:b0:3b:
aa:15:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:56 2026 by rpki-client