
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4df0bc1b-7ceb-3ebc-9313-6b45b90a3042.roa
File: 4df0bc1b-7ceb-3ebc-9313-6b45b90a3042.roa (raw, json)
Hash identifier: IqCG0xMIhFNwf7yhOFMe759yP42PSQnxzrjohGPloxk=
Subject key identifier: 7F:11:8F:FE:E2:B6:4A:B8:58:D1:F2:7E:27:18:F6:78:45:EA:6C:8C
Certificate issuer: /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial: 010D0C9F4328584EF7F78BFC11F8AA50EE33D1C0
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4df0bc1b-7ceb-3ebc-9313-6b45b90a3042.roa
Signing time: Wed 26 Aug 2026 20:31:57 +0000
ROA not before: Wed 26 Aug 2026 20:31:57 +0000
ROA not after: Tue 24 Nov 2026 21:31:57 +0000
asID: 212374
IP address blocks: 69.168.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f7:f7:8b:fc:11:f8:aa:50:ee:33:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Validity
Not Before: Aug 26 20:31:57 2026 GMT
Not After : Nov 24 21:31:57 2026 GMT
Subject: CN=a5dbd3e5-177f-4f05-aa2c-d14eb2e57adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:b6:53:a6:2e:d1:03:65:1a:12:0b:e7:0a:
ca:b7:ef:e2:2e:e2:10:7a:2e:12:a0:20:f5:10:8b:
a3:2b:dd:fe:0e:c9:8f:c4:ad:68:97:60:e9:21:eb:
17:cd:ee:0e:33:ad:c3:46:20:07:51:64:49:37:20:
29:8b:b5:ed:29:01:ab:6e:ca:9c:4c:25:21:7b:99:
e5:5c:61:70:3d:cd:16:5d:30:a0:5a:f1:0b:15:67:
01:a4:58:c0:76:7e:b5:e8:97:ed:04:14:a1:96:5f:
2b:5e:ef:1b:f2:fa:40:8f:8e:00:11:6c:57:b0:60:
84:ba:a9:37:ec:28:0e:7f:21:59:7a:ab:c2:51:00:
df:00:e7:99:d1:6e:3d:d8:e4:3d:97:aa:27:29:d0:
54:d6:95:a2:50:1f:71:b9:a2:4c:52:dd:e2:b8:8e:
16:23:5b:94:2b:71:af:bb:e0:ce:b6:2b:9e:23:2b:
71:ad:8d:c3:ca:65:7b:16:f9:b4:6e:21:19:81:7b:
f2:b8:3e:db:d6:c9:f2:dc:1e:25:aa:c6:27:ba:c0:
d3:c7:83:61:4b:27:80:25:6d:b5:5d:38:b1:58:79:
06:63:41:53:16:95:8d:83:10:3a:ff:aa:32:77:e7:
07:39:e8:ca:30:b8:d9:38:f7:d6:9b:9f:72:b1:74:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:8F:FE:E2:B6:4A:B8:58:D1:F2:7E:27:18:F6:78:45:EA:6C:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4df0bc1b-7ceb-3ebc-9313-6b45b90a3042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
X509v3 Authority Key Identifier:
keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
sbgp-ipAddrBlock: critical
IPv4:
69.168.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:b7:ed:23:aa:c5:bf:24:16:63:3a:c0:b9:94:94:f8:df:12:
60:fe:99:9b:cb:e8:0b:05:26:18:07:03:e6:a7:93:79:b0:c9:
0d:b1:26:49:22:90:6e:bd:48:2a:ab:66:4e:30:88:69:4d:95:
47:71:c3:b6:62:50:5a:24:3c:bf:7a:03:fe:af:55:ae:9a:91:
c6:50:84:3a:e4:02:09:22:38:e2:31:1c:6c:63:b7:e6:b8:20:
d3:bf:44:32:46:95:c4:fa:26:19:4d:38:0a:e0:bb:9d:0a:3f:
f8:42:57:eb:71:50:73:7a:dc:ae:33:46:9d:35:e0:11:8b:e8:
2c:ff:7f:fb:04:d3:4e:dd:d4:76:27:82:c2:af:72:c3:1b:69:
35:8e:9c:37:da:b2:4b:e1:c1:12:84:76:3a:6b:ad:bd:49:dd:
92:04:be:b7:1d:78:46:60:f4:24:fb:63:a9:28:db:7f:44:3f:
24:5e:45:36:f8:7d:7a:a3:3d:c9:1f:3b:ac:d4:50:a5:3e:93:
c7:fa:1d:65:59:fa:bd:13:10:c9:ae:d0:68:32:78:92:da:47:
04:46:0b:71:4d:20:73:28:98:d1:c9:73:91:b3:b1:17:35:27:
dc:e8:67:6f:4b:95:86:b7:00:7d:2b:12:05:36:64:f0:05:7e:
94:82:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:26:11 2026 by rpki-client