
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/20e20db7-456d-36f3-9e2a-cc28d8158aa3.roa
File: 20e20db7-456d-36f3-9e2a-cc28d8158aa3.roa (raw, json)
Hash identifier: jt8Lg5v34Pc3VMfD4W3sbCE3YJdq/LtjqHpOktFMAf8=
Subject key identifier: F6:CA:AE:7B:EE:3B:19:9E:CE:EB:FC:32:7D:B9:1D:9C:C6:08:01:AA
Certificate issuer: /CN=605ef18e-eb43-492e-a589-20f12375c0ce
Certificate serial: 010D0C9F4328584CC347412C66992F273048D080
Authority key identifier: E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/20e20db7-456d-36f3-9e2a-cc28d8158aa3.roa
Signing time: Thu 05 Feb 2026 14:00:40 +0000
ROA not before: Thu 05 Feb 2026 14:00:40 +0000
ROA not after: Wed 06 May 2026 13:00:40 +0000
asID: 40785
IP address blocks: 163.165.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c3:47:41:2c:66:99:2f:27:30:48:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605ef18e-eb43-492e-a589-20f12375c0ce
Validity
Not Before: Feb 5 14:00:40 2026 GMT
Not After : May 6 13:00:40 2026 GMT
Subject: CN=7d8dbce9-9f16-41b5-b5c2-c41adc8496de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:0d:94:c8:e8:70:a5:64:31:d2:b8:50:e5:
f4:97:f9:14:a6:11:97:65:10:4a:b7:bf:e4:ac:09:
8c:5b:cb:8f:aa:39:1d:24:83:66:de:82:fd:fc:c1:
97:0c:21:95:b4:14:fb:2c:8f:8f:aa:2a:b2:51:5b:
8d:d9:0e:6c:77:4f:6a:df:84:69:50:0d:21:cb:76:
ec:49:d7:a6:63:11:6a:fe:7c:50:82:0a:7f:56:eb:
9d:31:3d:97:5c:39:c0:dd:fc:ee:30:b8:45:46:80:
88:f6:80:9f:ef:23:41:c5:30:f4:d4:ff:0e:0b:20:
ff:ab:6f:e6:71:27:c9:31:ca:35:99:57:48:cc:7a:
4e:fd:08:32:14:92:73:bb:4f:0e:a4:5c:51:15:cf:
37:f2:85:40:8b:12:fa:00:fd:8d:24:dd:60:e3:4a:
53:a5:7b:a4:55:44:8e:bc:35:85:3f:60:32:a0:f1:
e4:fe:f7:78:8d:51:e0:83:87:63:b9:a3:c1:36:41:
6d:b8:03:a9:a6:06:d7:b2:b1:c2:95:ae:58:6a:ec:
a8:d7:e2:58:94:7e:27:3d:d2:76:e5:1a:10:6f:e2:
f2:3d:93:29:21:2d:12:35:f9:82:5a:bd:d1:5a:da:
94:88:e6:df:49:dc:74:8e:76:6c:c5:b1:9b:4b:5d:
ce:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:AE:7B:EE:3B:19:9E:CE:EB:FC:32:7D:B9:1D:9C:C6:08:01:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/20e20db7-456d-36f3-9e2a-cc28d8158aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.crl
X509v3 Authority Key Identifier:
keyid:E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer
sbgp-ipAddrBlock: critical
IPv4:
163.165.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:b8:ce:b3:23:5a:d9:2c:45:e1:18:eb:2f:75:c1:e7:92:bb:
ed:d7:d2:12:ce:fc:64:f7:52:ca:63:b9:6d:db:f4:8b:52:0b:
0a:70:a2:9e:06:40:8f:16:15:8e:06:14:ba:45:40:dc:4f:53:
16:8a:8d:9d:0a:b4:a8:fb:46:91:bf:49:88:96:f5:a2:e6:50:
2b:c8:dd:4b:b2:21:a1:0b:0b:cf:02:78:26:6f:5f:d2:18:b5:
ab:7f:72:96:dd:3b:3d:50:60:31:44:d0:af:67:52:11:ed:ce:
c4:2c:4f:da:8f:01:a5:ea:94:12:95:e8:dc:72:36:e7:b5:a1:
cc:db:fc:1e:8b:09:ef:16:d3:a5:18:ea:a6:e6:92:4a:1c:f4:
16:18:f0:bf:7b:dc:c5:1d:5e:ea:f6:ca:b6:36:76:3f:e6:8b:
7a:d7:a2:3b:d8:3e:c7:41:37:c1:da:01:46:aa:e4:49:f9:fd:
3e:34:f8:1a:55:8e:e3:ae:ba:0f:1b:eb:e7:de:62:cd:6e:d7:
5d:b1:9b:81:c4:e0:42:df:b2:5d:e3:62:23:35:28:5e:68:32:
dd:33:26:bb:7d:f0:21:57:93:19:0e:0c:76:97:31:84:e5:67:
30:2a:5e:6d:4f:1b:74:51:4d:23:0e:60:cd:64:a1:e9:f9:f1:
f8:b0:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:15 2026 by rpki-client