
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa
File: dc68370b-afda-3ce5-a4bd-88cf782945a5.roa (raw, json)
Hash identifier: Fw/IOpy0TIaBHf/6TeTFF23//RYD9JwrVG/Rk0kcPQI=
Subject key identifier: 53:F2:07:20:E0:F4:68:11:A2:67:32:02:A4:B0:3A:CD:42:CB:BE:52
Certificate issuer: /CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0
Certificate serial: 010D0C9F4328584E08665D0006E00C85E6067000
Authority key identifier: FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 19366
IP address blocks: 209.189.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:5d:00:06:e0:0c:85:e6:06:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=3ac98912-2393-4612-b705-785bf4b6be11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6f:b4:9e:29:d7:79:d2:54:53:81:bf:52:e7:
f3:22:a8:ab:0e:8f:4c:a3:54:fc:0c:36:c8:e8:51:
a2:cd:ad:54:f9:bb:c2:ef:8d:d9:78:43:09:67:f5:
a3:af:22:0d:58:2f:8e:ca:bf:5f:8c:0f:c1:36:1a:
f7:15:b3:ac:dd:89:83:04:6c:56:d5:a1:b4:09:3a:
69:1e:a3:7c:56:14:cd:4a:89:e2:3a:3b:3c:ca:94:
94:0a:42:55:58:ca:9a:31:f7:13:8e:f3:8e:a4:09:
2e:51:c8:ba:a5:77:90:71:94:8f:aa:c5:25:ed:bd:
14:35:79:ba:49:b7:c9:4a:62:8f:e3:62:b3:66:35:
a6:d4:b4:ef:fa:db:13:7b:66:7a:e0:fd:37:49:a1:
7c:d5:af:cc:0c:44:73:7d:f8:74:c3:7e:df:94:36:
73:64:87:1c:ee:a6:92:f5:6d:3f:85:ce:85:8b:74:
bc:9e:a2:9a:b9:89:e0:fd:96:f9:31:76:cd:ad:00:
0b:50:af:87:67:28:26:f1:43:d5:ee:b7:18:99:64:
f9:03:38:64:38:4c:ba:19:ac:df:fd:15:55:91:33:
3e:36:0f:b5:e2:e4:20:eb:ea:e8:5a:ed:32:11:49:
3d:94:81:22:cf:c7:64:bb:7b:71:52:90:1f:39:bf:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F2:07:20:E0:F4:68:11:A2:67:32:02:A4:B0:3A:CD:42:CB:BE:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl
X509v3 Authority Key Identifier:
keyid:FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
sbgp-ipAddrBlock: critical
IPv4:
209.189.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:8c:d7:2f:46:32:a9:b9:71:ab:fa:9d:0f:ce:db:b2:7f:00:
7d:27:d8:68:b4:7f:32:3c:f5:92:76:68:11:2e:cf:12:01:5c:
0d:90:18:8f:32:49:20:58:e3:90:1f:16:4b:11:35:2d:fe:02:
0f:5b:79:89:51:fd:7c:a8:0f:55:aa:fe:9e:89:a4:9b:51:a0:
54:71:6a:54:e4:8d:bd:15:9d:aa:ad:9c:f2:da:11:f1:28:b5:
4a:2c:0c:ea:9b:98:32:34:a9:fe:fc:10:33:39:fb:45:76:33:
a6:ae:71:63:66:58:60:bf:1a:a4:ec:22:9d:d5:8a:25:09:c1:
d1:3c:29:4d:c4:8c:32:5f:e4:fd:6b:99:f7:08:dd:21:e7:2c:
d7:b0:ca:ac:5a:9d:f3:b6:69:93:a0:09:2f:f7:61:24:1f:7c:
45:06:3e:85:d4:54:3a:f7:a6:09:eb:e2:39:c8:07:cd:46:6c:
1f:1f:e6:8d:fc:42:23:e6:39:65:e6:b7:39:d5:20:24:d4:07:
9e:1c:08:ce:62:ed:0e:49:b4:87:37:38:f8:00:2e:8a:63:a2:
55:91:b9:00:1a:03:df:9a:13:cb:84:f1:87:61:b7:1c:b3:d5:
55:55:00:71:0b:50:8f:72:8d:dc:89:b0:2d:07:95:34:d2:89:
e1:4d:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:43:36 2026 by rpki-client