
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa
File: 2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa (raw, json)
Hash identifier: nEPS+gIfghlTAwOwcmnavhx7txORWOQowOYMPjQpBoo=
Subject key identifier: EE:9A:6A:C9:10:53:F7:5F:B2:13:EA:7F:E8:D6:36:0B:35:76:2D:C1
Certificate issuer: /CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
Certificate serial: 010D0C9F4328584CB121CC4886E4FBAF0092F680
Authority key identifier: 24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa
Signing time: Fri 30 Jan 2026 02:00:31 +0000
ROA not before: Fri 30 Jan 2026 02:00:31 +0000
ROA not after: Thu 30 Apr 2026 01:00:31 +0000
asID: 399519
IP address blocks: 172.82.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b1:21:cc:48:86:e4:fb:af:00:92:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
Validity
Not Before: Jan 30 02:00:31 2026 GMT
Not After : Apr 30 01:00:31 2026 GMT
Subject: CN=4ca3ac69-0603-400f-9f59-fa435c79ef36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:fe:4a:8c:08:95:3f:f1:4e:be:21:ca:48:
ed:e3:a9:cd:b7:9b:26:77:4d:0a:37:2a:50:33:50:
bc:f4:ac:26:e2:25:3f:b8:1d:ac:73:64:4d:1b:5d:
49:d2:25:26:42:55:cd:ae:1d:88:23:ac:c4:67:05:
e4:a9:18:dc:2c:e9:5a:4e:58:a6:9c:c4:60:bc:fc:
d2:9d:b7:a4:84:40:2b:6c:c1:74:3a:e5:d7:63:bd:
9b:d4:a7:11:82:1f:0a:05:7c:66:ae:71:d9:fe:70:
0e:6e:62:d7:4b:2a:36:52:63:22:c1:7c:e9:7a:f2:
d6:48:5b:5f:66:bd:6a:a5:5b:fb:f8:19:d3:b2:e1:
74:9b:48:25:3a:e5:34:44:c9:b6:37:7a:fa:c9:15:
e2:18:71:8d:ee:ae:ce:7d:57:f7:94:bf:c1:be:d3:
a1:71:b8:95:2d:f8:43:74:16:25:b0:2c:30:07:9e:
71:6e:48:91:df:f5:b6:d5:c3:7d:05:10:03:46:aa:
7b:15:7a:75:a5:b1:0b:d6:c8:52:e0:2e:46:4d:53:
7d:af:db:eb:c8:8a:da:3e:60:70:65:fd:7f:ea:62:
34:a4:64:fc:1d:d8:68:06:d1:04:89:99:04:0c:dc:
88:72:b7:9d:c7:12:c4:91:d3:ae:82:90:fd:b4:65:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9A:6A:C9:10:53:F7:5F:B2:13:EA:7F:E8:D6:36:0B:35:76:2D:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl
X509v3 Authority Key Identifier:
keyid:24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:05:36:c7:3d:9c:9b:a8:cd:6a:6e:bc:58:b9:d7:11:a8:18:
83:6a:18:d6:a8:2a:11:61:11:a6:25:bc:ce:df:f0:67:18:7e:
b0:d2:b1:82:c1:90:db:25:c1:43:b4:4a:44:e0:83:0f:34:97:
59:ec:e9:0b:6d:e3:22:8d:b4:b3:e5:a8:46:36:7b:fe:5c:da:
7d:18:3c:02:5b:3f:f8:c5:3a:7d:99:b8:d8:3c:10:07:ab:b6:
a3:00:45:32:7f:64:f8:43:8c:98:e8:36:79:ad:2e:9f:d2:89:
c7:c9:eb:1a:8c:52:f3:93:e3:dc:16:27:9b:39:b2:c5:82:7e:
39:56:c3:d1:f6:26:8e:1a:7b:0a:6e:71:16:6a:32:cb:de:b1:
6b:0b:2e:50:32:05:07:7d:03:9b:24:fd:09:c0:86:79:4d:25:
39:ba:4f:58:40:e3:c6:4e:78:a0:57:10:9f:6c:63:2c:92:06:
84:9e:f7:7d:ff:26:1a:66:e2:7b:b9:05:bd:5b:56:1a:d9:03:
35:d7:52:1c:3c:ba:41:87:79:2f:48:59:53:4f:e2:71:36:93:
45:a2:de:ea:6f:32:2f:2b:af:6d:ee:25:e5:7b:c7:27:d0:0e:
96:57:cc:0a:78:a9:70:c6:62:78:e7:54:50:2e:0f:42:23:03:
1c:02:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:26 2026 by rpki-client