
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2073a295-27a8-3312-8d73-4f4a3cc70f90.roa
File: 2073a295-27a8-3312-8d73-4f4a3cc70f90.roa (raw, json)
Hash identifier: EpuS2J/GQLZkg8JpOcsfTXfpu2WJiwrdr9FITYrpZ4Y=
Subject key identifier: 6D:D3:87:3B:CC:3B:87:F7:5C:36:6D:6F:E0:49:35:06:47:EE:E0:E0
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584EA79437186E06619106E3E020
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2073a295-27a8-3312-8d73-4f4a3cc70f90.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 401415
IP address blocks: 216.106.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:94:37:18:6e:06:61:91:06:e3:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=533d5981-df64-4287-814a-5614a5b06854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:cc:f2:d7:4f:b5:48:f9:1e:58:4d:66:59:
91:30:58:4a:7f:61:82:e1:05:25:30:ab:83:5f:ab:
45:6b:02:78:4e:38:75:a4:4e:fb:24:a4:48:65:dd:
56:7a:d5:cf:8e:ca:4c:1d:7a:d5:63:c2:27:98:b6:
94:bc:a7:52:cb:5e:66:2a:ed:7a:78:47:58:cd:b0:
dc:d2:52:c0:9b:c0:ca:75:b7:7a:fb:24:b8:5a:04:
ca:1b:c2:e7:56:9e:8d:ee:bc:97:6b:d9:13:c5:b0:
e3:ac:36:e4:26:03:f5:74:83:31:a6:f8:22:a7:39:
f0:ce:0e:78:c4:54:bc:3e:53:66:15:70:8d:38:58:
ad:c9:3d:53:a4:6c:76:a0:02:c9:a6:5a:45:03:5c:
2e:ae:fc:00:ea:9d:b4:6a:14:7b:96:c6:67:ae:2c:
0a:16:69:c4:87:e0:c8:ee:0b:25:42:02:5b:2e:8c:
c5:ab:0b:74:e8:27:e4:2f:ab:6a:da:89:0f:ae:ae:
be:60:8c:b2:87:d1:ff:1f:54:e4:9e:97:f7:41:9c:
c3:ef:1c:e7:db:e1:66:ff:99:3b:c5:13:bd:bb:a3:
87:3b:7f:26:f4:65:4e:67:d9:df:59:0d:85:28:c4:
c8:2d:2a:cb:e8:6d:1a:71:2e:3f:7c:b3:32:e1:e0:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D3:87:3B:CC:3B:87:F7:5C:36:6D:6F:E0:49:35:06:47:EE:E0:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2073a295-27a8-3312-8d73-4f4a3cc70f90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:36:0b:29:af:b1:68:3a:c1:c8:bf:39:68:45:c0:0d:db:30:
cc:4e:c1:52:bb:f2:71:1c:05:b0:d9:ed:73:3f:9b:11:dc:4d:
27:09:c8:f4:31:7d:5c:24:13:c0:24:e4:53:d8:54:ea:7c:f0:
2d:42:cc:3b:fd:2f:7f:2b:49:f9:e7:3b:40:23:be:42:06:c6:
c0:67:b3:af:2e:6f:f2:05:31:14:16:53:99:b5:4e:aa:50:38:
ca:cc:74:02:6a:8b:4e:7f:32:37:b5:f6:26:da:f5:d2:25:70:
7d:a9:84:48:ac:ac:f6:77:46:0d:e6:72:5e:44:bf:65:0a:e0:
d8:f3:57:d3:23:9f:ee:50:f9:80:53:88:c0:82:2d:ef:79:94:
c4:ad:20:0f:1e:6e:53:83:67:bb:f3:44:b5:98:52:20:77:b7:
3a:46:ec:b0:5a:45:09:1d:02:75:9e:9e:50:6b:65:12:a1:b8:
a1:e7:ca:e1:c1:ad:d8:3d:28:9c:a3:fe:b4:cc:e8:c5:bf:0e:
46:89:34:ea:79:59:27:a4:fe:10:66:42:bf:9a:ae:f5:6a:27:
a2:2c:b6:fb:30:9f:81:eb:4e:ae:c2:9a:35:20:eb:11:b8:7a:
5b:5f:e8:4f:69:9b:f9:51:40:70:a9:c0:d7:31:cd:a0:b5:18:
5a:a9:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:42 2026 by rpki-client