
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa
File: 83e6a022-36ec-38c3-8f95-349b73ff935a.roa (raw, json)
Hash identifier: nb3p+jv6ljRfvUBgIgRT6pUe9u4nX4BXdjRrvDT5nZg=
Subject key identifier: CC:2A:A0:48:BD:FB:5C:72:37:E3:1A:D4:44:39:8B:94:4F:DD:F2:07
Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial: 010D0C9F4328584D6C0FAC22C697420F31D90C00
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa
Signing time: Tue 07 Apr 2026 01:00:23 +0000
ROA not before: Tue 07 Apr 2026 01:00:23 +0000
ROA not after: Mon 06 Jul 2026 01:00:23 +0000
asID: 14618
IP address blocks: 155.63.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6c:0f:ac:22:c6:97:42:0f:31:d9:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Validity
Not Before: Apr 7 01:00:23 2026 GMT
Not After : Jul 6 01:00:23 2026 GMT
Subject: CN=42788fbc-502b-41b9-baa0-1a39142284dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:95:53:a5:f5:6c:fd:5a:7b:25:6f:3c:30:60:
af:cd:b4:9e:67:be:b9:04:b3:b4:c4:c0:29:f5:8b:
87:de:91:b8:8f:8b:e4:9b:c7:48:5d:f1:37:28:9a:
4d:05:b1:b0:7b:18:e7:cb:76:92:7e:d4:8c:35:70:
b7:9c:f0:3b:4c:d3:64:1b:89:e7:ac:9b:e6:d2:fa:
c5:80:0f:52:b6:b0:66:03:ae:85:09:09:19:68:0a:
4c:1f:09:7e:5d:1c:93:0d:5b:38:09:c0:79:ed:8a:
a6:50:eb:10:47:a0:4d:62:61:4a:ff:8f:3b:65:19:
28:eb:c5:18:5d:27:fe:14:8d:6b:3a:30:6f:5b:b3:
80:1b:f6:f0:be:92:3e:a8:44:cb:64:01:fa:2a:6a:
3b:14:f3:9f:da:f4:cf:39:6b:ea:2a:e6:42:9c:3f:
89:54:90:34:63:cd:78:d9:31:01:1d:a6:4a:be:96:
0e:2b:89:74:2e:f9:31:0d:19:d4:99:b1:62:9b:13:
e5:69:df:70:08:03:a6:11:80:3a:9b:dc:7f:eb:51:
e2:3f:e7:26:20:e1:a2:81:a0:b0:83:37:6f:3c:09:
6a:e8:4b:cf:44:87:28:97:12:7b:a0:81:45:b3:0d:
40:c8:de:3d:7e:26:1a:88:5e:47:22:31:e4:b4:a4:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2A:A0:48:BD:FB:5C:72:37:E3:1A:D4:44:39:8B:94:4F:DD:F2:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
X509v3 Authority Key Identifier:
keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
sbgp-ipAddrBlock: critical
IPv4:
155.63.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:50:58:79:cd:90:12:a9:2e:7e:c0:ca:cb:60:8c:93:3d:f6:
97:6a:a3:81:34:4d:81:3a:01:bb:1a:88:a5:6e:89:6c:7a:fc:
f5:72:67:a7:e2:39:44:bd:3a:f4:81:82:bd:e7:33:9b:3c:b7:
b8:aa:c7:da:89:21:42:f5:51:3b:86:06:55:63:3a:75:e3:7e:
b3:0e:85:55:ed:58:0f:35:37:31:6f:13:58:10:c7:80:a6:b6:
46:ca:e8:9f:47:77:b1:bb:ce:7b:35:00:3f:37:14:a1:dc:02:
ab:2c:ac:53:33:a4:a6:30:84:7b:dd:ed:0d:6f:07:cc:74:d1:
f1:e7:01:92:fe:04:31:77:c4:17:90:07:7e:6c:6c:65:04:d3:
0e:dc:41:cd:b3:77:2d:80:2d:9d:65:34:8a:22:c9:f3:e0:49:
5c:63:a8:96:d6:c9:10:88:88:c6:35:28:71:69:d6:4a:27:c7:
23:a7:33:08:9a:0b:3d:64:af:d8:89:66:9f:0e:42:7d:a0:45:
e9:13:5b:67:06:39:a4:07:32:35:ec:50:00:76:97:3b:2f:85:
de:8b:d7:34:2e:cf:f8:3f:53:8d:5a:cd:f5:88:93:32:01:bc:
75:40:f1:7e:2e:03:39:e4:cb:94:5d:31:96:50:6d:8b:c4:4b:
4d:50:e0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:41 2026 by rpki-client