
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa
File: be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa (raw, json)
Hash identifier: RpYKIKixbFU4RzlHbiPT+SKWVpEtc0tZ9GlRVkNouKA=
Subject key identifier: 92:9F:ED:B4:14:15:63:E3:7A:0D:64:2B:76:29:C0:34:41:0C:D0:99
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584EA797EB6D5FD5CDE8524CAF00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 18785
IP address blocks: 216.106.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:eb:6d:5f:d5:cd:e8:52:4c:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9a280cca-c0f5-4928-8d68-1ef9e76ef2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:23:ba:56:a4:a3:48:33:97:33:ff:4a:a6:8c:
28:a7:80:f7:18:7d:71:55:92:39:00:99:d7:3d:2a:
0f:5a:bc:c4:f6:5f:66:05:12:70:6e:48:e1:10:2b:
b6:d6:65:6e:6c:b5:fb:74:0f:e4:9f:ed:6f:f8:2a:
2c:13:1d:29:4c:fe:d7:d0:cb:f7:8b:e8:d3:90:9d:
12:c9:5e:a2:24:c4:35:41:e5:52:fc:e9:aa:5d:33:
e3:b6:38:53:25:8b:64:09:ca:f9:93:a7:86:a9:24:
e0:c4:39:f9:18:9b:eb:06:a9:9d:21:d7:a4:44:06:
85:69:0c:73:fb:94:af:d5:ff:13:ea:3b:f8:59:ae:
16:0d:3c:ff:6e:b8:1d:b0:08:e0:9b:5f:cc:11:a4:
cf:1b:96:b9:c5:3b:1e:6a:cd:78:90:ee:ed:a8:f8:
d4:b4:18:13:85:92:ec:a4:24:87:7b:28:19:b7:8e:
bf:24:40:c9:21:e2:bf:f5:f5:b5:3e:f5:1a:c2:5d:
21:bc:4c:4a:dc:4e:cc:1d:cb:16:bf:c3:b8:1e:ad:
73:a9:fc:de:8f:ea:89:77:29:2f:d5:c3:65:05:5f:
f6:a5:53:50:69:54:5d:31:c7:2f:17:d1:76:a0:b2:
99:94:5c:c8:88:1a:33:f4:44:da:e0:62:88:14:94:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:ED:B4:14:15:63:E3:7A:0D:64:2B:76:29:C0:34:41:0C:D0:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:73:8d:c5:e0:82:77:f0:4c:86:5a:09:5b:70:87:36:03:85:
e3:93:97:e3:d0:69:3f:d6:37:1f:57:b2:01:2c:48:c9:39:ff:
20:7f:a4:4f:ba:40:2f:00:8f:7b:2f:c4:2d:eb:a4:ba:73:9f:
71:43:ad:a8:a4:3a:a9:18:61:b8:52:1c:af:1a:09:e9:e5:f7:
85:fd:3b:d7:9e:c2:e1:bb:f1:72:17:1d:ba:85:5f:c5:8d:49:
62:45:44:1a:60:7c:f2:b2:d2:33:35:3c:f1:d7:20:69:0d:06:
fd:c0:ff:84:33:8b:3b:c1:12:e7:14:f8:9b:77:22:34:7c:ee:
a3:42:6e:0f:22:fd:0b:e2:ac:d8:1b:ae:9a:84:2b:04:a9:bb:
d6:e5:96:47:ca:2b:c5:83:f2:ec:f1:6d:24:9e:73:42:85:ca:
13:e1:1b:ed:38:c2:74:23:40:25:44:72:91:e5:ef:b5:72:35:
dc:c0:4a:93:43:0f:4e:6a:6d:02:9a:c8:db:ce:aa:2a:40:6f:
57:28:12:80:b5:5e:f9:9d:5e:1a:4b:d0:68:c7:ae:6e:11:38:
f5:8c:64:e4:3c:ef:22:c8:f5:80:55:dd:5e:4e:1d:bb:53:01:
7b:72:78:9d:cc:0e:8a:9d:f0:56:69:27:ce:e7:7c:14:f0:49:
42:25:b3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:10 2026 by rpki-client