
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa
File: db6c28c7-3310-3a30-a759-80e2eb7282e0.roa (raw, json)
Hash identifier: fviiMBQ7o+eT/dy4XEfdDN7hH2k7QifKXqsTY1HhL2U=
Subject key identifier: D0:67:5B:71:39:EC:F7:C5:9C:5A:E6:95:36:71:9A:89:2E:58:7A:87
Certificate issuer: /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial: 010D0C9F4328584D037D05F6010ABA54D9A8D700
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 22926
IP address blocks: 67.43.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:05:f6:01:0a:ba:54:d9:a8:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=206cadf8-0805-4bce-8dd1-d1155bb6bae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:d6:1c:39:91:f8:74:a2:4c:7e:84:f9:cc:
3a:39:2c:28:b1:7d:a6:c6:c9:71:0c:51:bc:5b:40:
87:a7:bd:00:94:e1:42:5a:3c:f4:35:bd:88:84:71:
eb:87:78:11:fc:b2:d3:e2:14:06:b4:3b:13:e1:7e:
c9:35:60:7a:71:9c:ae:5c:c1:0b:06:80:7e:f5:1b:
c1:b5:ed:0f:0a:ca:f0:5d:2e:62:02:05:c4:cb:4d:
43:7f:71:04:81:ef:ac:d0:33:f5:1f:81:60:6e:7c:
88:b8:8a:4a:57:9b:8d:7c:16:b2:d8:00:a6:b0:cb:
2d:ac:eb:ec:5b:15:ee:98:fd:a5:0c:42:54:18:d8:
51:6d:1d:84:82:2a:13:e3:a8:2d:a1:32:7d:d1:ed:
2a:07:fa:e3:4b:49:f3:ca:41:76:9e:aa:19:53:d5:
40:1e:61:b8:6f:0e:96:ee:eb:64:7b:97:7d:a2:19:
85:b3:2e:a6:54:42:5f:a1:d9:ae:72:59:91:af:82:
df:2b:fc:b8:a2:5f:df:4a:23:09:87:63:e4:6b:cd:
58:03:3f:17:bc:6b:94:17:75:43:c1:bd:47:36:4b:
3a:ec:3d:9b:0f:1a:f2:4a:6c:db:18:7c:ed:37:36:
98:a9:d5:c8:fe:3d:79:9a:fd:34:b6:51:d0:10:12:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:67:5B:71:39:EC:F7:C5:9C:5A:E6:95:36:71:9A:89:2E:58:7A:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
X509v3 Authority Key Identifier:
keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:95:77:f7:ad:1e:40:b3:a4:2f:da:36:d6:3e:5f:2b:c8:15:
13:b8:df:70:ef:64:43:7d:05:bb:bd:3a:19:0c:20:44:fb:89:
40:2e:24:44:37:3b:48:7d:98:dd:15:0f:64:16:f7:67:95:ff:
b4:20:05:6b:0d:99:cd:16:1c:05:a1:06:fe:c3:b0:1f:a1:e2:
c9:97:16:08:19:74:b2:d4:11:a3:11:8c:d0:c8:1b:0a:89:b7:
20:d6:eb:b2:3d:97:05:84:66:ae:69:2b:8c:5d:62:67:06:78:
60:a6:40:98:2d:34:45:57:38:16:2f:53:cb:7b:c0:68:dc:0d:
b0:a4:4d:cf:a9:b5:3e:54:10:db:97:22:f9:4f:29:9e:07:70:
2f:92:ac:f5:e8:e6:18:95:96:db:95:ce:57:2c:c3:ba:23:b4:
35:d2:7c:57:92:ee:a3:53:73:1d:4d:ef:ad:e8:36:fe:17:07:
e6:6c:3f:cc:0c:b1:a9:95:17:59:12:70:0e:09:a7:7e:cf:f7:
37:77:bb:aa:fd:2f:68:85:8e:6b:36:7c:c5:48:95:f8:98:34:
32:a1:95:87:96:30:1f:2e:d3:62:59:ab:39:42:db:f8:d8:2e:
63:77:dd:5f:d7:9e:90:53:a9:b7:b7:b3:73:60:64:44:3a:e9:
77:f1:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:35 2026 by rpki-client