
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
File: b6a532df-da9c-3734-8cc8-975860ee4905.roa (raw, json)
Hash identifier: ky5lFLjQ4DlpyTONvvPpdw7e4DWAvYFKxWp2fWxEHFo=
Subject key identifier: 76:CA:1D:15:7F:6F:75:8A:45:08:76:F0:CF:09:D7:A9:DD:9A:FC:E8
Certificate issuer: /CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Certificate serial: 010D0C9F4328584CDDCCF1166831E0D88CB83E80
Authority key identifier: 8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
Signing time: Sun 15 Feb 2026 02:00:32 +0000
ROA not before: Sun 15 Feb 2026 02:00:32 +0000
ROA not after: Sat 16 May 2026 01:00:32 +0000
asID: 203020
IP address blocks: 142.202.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dd:cc:f1:16:68:31:e0:d8:8c:b8:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Validity
Not Before: Feb 15 02:00:32 2026 GMT
Not After : May 16 01:00:32 2026 GMT
Subject: CN=21488c29-17a5-4f04-bff8-babef2bc9c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:f4:b0:a2:33:a7:3a:64:0a:fe:51:60:b1:
35:02:fa:f7:e2:95:71:93:de:09:b9:1a:2b:51:13:
59:3e:f0:e0:68:91:36:5a:0e:54:27:2b:d6:eb:0d:
12:be:39:a8:12:e5:89:40:77:98:3d:2e:73:70:4d:
10:97:d1:ca:9a:f4:1d:f4:4d:2d:a5:88:9f:02:58:
66:f4:49:23:b3:dc:da:96:b2:4a:7c:a8:eb:b7:cb:
2e:46:e8:1e:f1:a1:03:fe:12:c8:41:6c:59:ac:57:
71:3f:1a:bc:32:a8:f6:61:96:80:7a:61:a9:b7:b1:
7d:cf:3a:80:47:bd:9e:30:f2:ed:96:e5:d8:e2:ba:
91:42:4e:74:8d:0d:4b:f8:ec:6e:3a:be:c4:09:b0:
8d:bf:06:b0:52:fe:75:4c:24:6d:e5:13:01:4f:95:
22:24:c2:89:5b:cc:e1:5e:7a:ff:58:b9:ad:a1:72:
ef:8f:46:0b:52:e0:c2:55:32:d2:07:4b:6b:b6:e3:
9d:a4:f6:a5:36:b5:06:76:a7:cc:06:5c:33:62:e3:
a5:29:4e:1c:f9:d3:e7:d9:75:21:20:80:2f:12:d7:
a8:5a:7d:e9:ad:8d:4b:50:1d:ca:51:b9:51:df:22:
71:74:38:2e:44:fc:1d:83:09:3a:98:74:9c:06:e8:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CA:1D:15:7F:6F:75:8A:45:08:76:F0:CF:09:D7:A9:DD:9A:FC:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl
X509v3 Authority Key Identifier:
keyid:8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:4e:50:67:0f:93:d5:53:c8:8e:ca:33:1b:a3:17:b6:ef:47:
16:cb:2e:4a:3f:6f:16:93:f6:93:22:d2:d0:8e:42:3e:7f:2a:
7c:66:10:3d:e3:86:90:e0:9d:5a:16:58:23:0c:05:af:f3:e0:
0d:dc:2d:9c:66:e5:18:f7:4e:b0:51:2f:86:7e:f9:50:f0:9d:
64:fd:59:81:bc:5f:6b:03:10:d7:d6:05:45:9c:7a:ba:cc:a3:
e3:2e:e3:6b:1f:c8:bf:31:86:f6:d1:fd:e5:d0:30:14:a3:06:
e1:f1:05:fd:19:28:9f:03:2d:ed:7a:cf:ce:e9:2e:5e:80:11:
d6:0f:14:20:1d:ff:3f:6f:92:c1:59:5b:45:8c:f0:41:6c:b9:
17:30:4a:65:ee:87:c7:fe:4c:38:29:37:05:10:fc:46:89:13:
c2:fc:89:70:19:2f:3d:b3:31:11:55:69:a5:7d:f1:42:e8:00:
01:bc:4e:5b:7c:17:da:2b:61:0b:42:f3:ef:1e:ba:e0:2e:80:
23:39:9b:53:57:b6:f9:67:56:b1:fe:47:0a:02:ba:bb:da:4b:
64:c7:a6:81:51:98:73:ae:6b:5d:78:7f:2d:52:e4:54:9b:50:
e1:ca:39:04:9c:de:21:cd:64:e1:46:99:26:eb:0b:f3:d6:a9:
b9:66:c3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:51 2026 by rpki-client