
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6a0607-5470-33bb-a3da-78cd4c521774.roa
File: 2b6a0607-5470-33bb-a3da-78cd4c521774.roa (raw, json)
Hash identifier: e3yGQ9fKJ4QpX4y/qgUqy0cnsAfOHJ/Ni6yULwBU8yk=
Subject key identifier: C1:23:09:C3:B0:B9:2A:C2:05:45:8B:5A:A8:14:D2:6E:99:77:6B:1F
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584E18AEDB356E94AA1E6B5E8520
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6a0607-5470-33bb-a3da-78cd4c521774.roa
Signing time: Sun 07 Jun 2026 21:00:12 +0000
ROA not before: Sun 07 Jun 2026 21:00:12 +0000
ROA not after: Sat 05 Sep 2026 21:00:12 +0000
asID: 54252
IP address blocks: 209.101.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:18:ae:db:35:6e:94:aa:1e:6b:5e:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jun 7 21:00:12 2026 GMT
Not After : Sep 5 21:00:12 2026 GMT
Subject: CN=8afebb09-e7e0-4f75-9dcd-89233ffb9167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:45:a8:ee:2b:7f:81:e7:2b:8a:55:e7:23:
b8:f4:1d:28:b8:c9:11:19:a9:be:48:33:3a:6a:2b:
07:30:98:a8:b8:f6:a0:c3:2c:79:48:5f:26:5e:63:
65:9b:a2:ef:69:75:5c:08:e4:01:4c:50:c9:5d:6b:
41:6f:d1:f6:ca:14:93:44:27:72:ae:0d:dc:d6:0a:
93:91:6f:22:7c:32:fa:31:a8:3c:a2:c3:d3:93:78:
0b:d8:79:6f:c5:c4:44:6c:92:4b:f8:f7:18:5c:59:
36:99:b1:26:4b:6b:a0:5d:dc:c3:92:fb:9d:f1:c1:
b7:4d:f1:22:e3:fd:89:63:e2:54:11:6a:79:47:8a:
6c:5b:04:16:d9:f4:e0:d1:5f:7a:09:ce:86:a3:bc:
79:fb:03:ec:5c:d7:bf:97:45:14:32:2b:b3:78:50:
cc:c4:94:80:68:06:6a:2c:4c:c1:0f:fa:f0:4d:7f:
00:ec:71:db:f3:71:bb:09:50:af:c6:40:79:78:71:
f1:35:b6:68:bd:62:5e:0e:03:43:30:35:ab:4f:15:
e9:e1:f5:b9:f0:ce:c0:fb:39:5f:c1:d5:8a:a1:ff:
10:83:da:68:19:25:1a:43:2f:c1:f9:dc:4a:c9:aa:
ec:72:26:f4:f1:74:e9:98:94:89:08:fb:8d:89:e7:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:09:C3:B0:B9:2A:C2:05:45:8B:5A:A8:14:D2:6E:99:77:6B:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b6a0607-5470-33bb-a3da-78cd4c521774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.101.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:ef:28:52:be:8e:ea:ba:e1:26:9b:da:b5:d1:d2:43:14:f1:
91:fe:be:48:1e:3d:c8:74:82:e2:34:56:6e:84:76:fc:f5:52:
ce:6b:93:3d:03:df:26:d2:ed:ea:62:c6:0f:70:30:45:76:16:
b0:90:df:0e:33:0d:6b:c0:e1:22:1e:3e:65:7d:3e:81:3b:15:
c5:8a:4a:4c:d2:e9:94:90:79:fb:8c:f1:90:50:20:72:9f:6b:
05:de:3a:84:fc:17:4b:74:eb:8e:9a:68:b2:4d:a2:9f:21:03:
0a:8b:eb:5f:3d:9d:4a:20:19:4c:01:cf:f8:8d:dc:74:bb:e0:
ed:5f:28:77:02:96:4d:2f:4b:17:c1:3e:0f:62:1a:50:f9:21:
e3:fb:d3:1a:cb:2b:1f:24:38:00:33:6e:17:20:4d:f7:7d:92:
06:22:ce:5d:19:c6:84:0e:0d:33:15:da:02:a4:15:c8:89:60:
6d:70:c0:d0:8e:34:69:23:55:c0:4e:42:ea:61:25:b3:b4:46:
7d:46:7d:b5:d4:ba:30:5a:47:42:29:f2:92:ed:e1:90:9f:e6:
a9:e0:6a:1d:bb:6f:ff:f6:63:90:1d:06:16:d7:fa:ad:c9:22:
54:97:d8:87:9c:94:1a:0d:e3:ae:92:82:cc:8c:d0:3b:4d:34:
97:a4:c6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:55 2026 by rpki-client