
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/c84357d8-f33f-3c67-b65b-b50d4878537c.roa
File: c84357d8-f33f-3c67-b65b-b50d4878537c.roa (raw, json)
Hash identifier: ThCsHF4EWYeQHcwvUEapTtor2HIeiEwvsppK3C95rs4=
Subject key identifier: 3B:9D:81:26:DE:1D:E8:23:FC:4A:67:66:72:57:53:CF:75:E5:57:53
Certificate issuer: /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial: 010D0C9F4328584D00B296A5AE7D06BE51A42300
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/c84357d8-f33f-3c67-b65b-b50d4878537c.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 16509
IP address blocks: 69.194.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:96:a5:ae:7d:06:be:51:a4:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=cf9b87c7-b1d6-44d8-9b85-9915bc7273fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:9d:f1:00:ad:d3:8a:b5:4b:7c:25:38:7d:
08:80:9c:4f:6a:b4:6e:6c:b2:d9:6a:21:e2:ca:4a:
20:0d:6c:00:27:64:16:fa:3d:90:89:0a:d7:f2:f6:
ed:79:8f:10:b9:a4:88:5c:79:23:20:49:3d:ee:7b:
07:a8:32:07:f0:4d:31:cb:ef:96:e2:a7:f8:46:04:
6f:0c:02:c4:38:bf:8b:f5:b1:83:8e:a2:2e:2a:23:
45:7e:a0:e4:52:99:e0:70:10:46:f7:09:bc:2a:46:
d0:66:9e:87:a0:9b:ca:41:e7:4f:fd:a0:78:28:ce:
c6:53:7d:47:84:9f:ff:2c:72:20:93:74:d3:45:c5:
52:a0:e6:f5:06:02:e7:fa:74:b6:0e:bd:1e:61:eb:
7c:81:1a:e5:66:2c:62:41:ff:c6:66:ad:ed:91:43:
e1:ee:84:33:0d:b2:05:b1:11:38:86:4e:1f:42:2e:
72:a3:21:7f:cf:98:93:06:bd:3b:cc:6e:eb:bb:91:
93:65:6f:97:cf:da:4d:a1:98:19:2a:66:c3:e0:ed:
48:c4:be:6b:1d:26:10:c1:ab:8e:71:90:04:aa:b6:
88:36:c6:93:85:42:fc:ac:e9:55:51:66:4e:6d:d9:
18:cc:f5:1f:66:d4:d3:fd:52:a8:55:71:b6:b4:ff:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:81:26:DE:1D:E8:23:FC:4A:67:66:72:57:53:CF:75:E5:57:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/c84357d8-f33f-3c67-b65b-b50d4878537c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
X509v3 Authority Key Identifier:
keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
sbgp-ipAddrBlock: critical
IPv4:
69.194.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:1b:72:6d:b4:3b:a7:d4:80:6e:ed:e1:d0:2a:d0:2c:68:4d:
71:84:df:48:aa:7b:7d:04:bc:70:15:e2:54:a3:56:8f:13:be:
70:73:17:17:17:00:f5:f6:76:ea:93:0a:5d:06:fb:e5:6b:0a:
97:48:fd:0f:67:e4:ba:c8:04:9d:cd:f2:96:db:9d:e7:8b:88:
6d:04:53:5e:94:5e:99:bd:5b:de:e4:fa:b1:e5:fc:5f:28:dd:
43:9c:ce:b2:19:9d:5d:4a:3e:c8:d5:d6:2b:3c:6c:f4:46:1e:
95:c6:40:15:dc:ab:f3:17:a0:10:39:94:6c:b4:e5:48:30:41:
f7:e2:4e:e5:fa:b8:98:7a:7f:08:c2:4b:ae:bb:aa:88:77:e5:
5f:56:e9:df:0f:3c:9c:fd:87:79:ab:4c:c4:71:30:8f:2d:ab:
71:ba:d2:5a:b7:07:50:d8:41:6c:15:27:ce:01:72:21:49:1c:
19:66:c0:ee:d9:1d:43:b3:d7:0c:02:9f:d9:e3:5a:19:bd:9a:
ad:34:70:8e:e4:46:ca:88:da:33:ee:fc:f2:2e:3d:4c:45:d0:
c2:85:f5:91:3c:bd:ec:8a:38:d5:83:c6:a1:b0:79:45:b5:f7:
65:67:7a:1d:97:a9:c5:f0:b0:10:92:78:e0:a9:51:7d:a8:7a:
b3:31:21:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:28 2026 by rpki-client