
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa
File: cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa (raw, json)
Hash identifier: KigTrYHFcKrS+AhQyJAwL0AS7LP2dMRh7WRX5crKXBQ=
Subject key identifier: FB:BE:AD:FF:FD:4B:25:8E:9C:79:9E:A7:77:36:31:ED:A4:7A:51:25
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584CD17C7A8540DB1F9A50578D80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa
Signing time: Tue 10 Feb 2026 16:09:23 +0000
ROA not before: Tue 10 Feb 2026 16:09:23 +0000
ROA not after: Mon 11 May 2026 15:09:23 +0000
asID: 63172
IP address blocks: 208.53.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d1:7c:7a:85:40:db:1f:9a:50:57:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Feb 10 16:09:23 2026 GMT
Not After : May 11 15:09:23 2026 GMT
Subject: CN=7829d962-6ab2-459d-8f37-ce5356ee08a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:6f:89:dc:89:3b:dc:82:c7:2e:b7:67:86:
4d:c6:e2:4b:b8:aa:5a:8b:e5:0b:20:f5:eb:aa:08:
34:8e:ec:d5:f4:9a:a1:29:3d:0c:5c:95:22:1c:4c:
82:c3:45:bc:9f:16:06:cc:f3:a7:e2:1b:72:5f:1f:
ec:0b:2a:79:4e:4d:a7:e8:6e:62:58:41:43:c7:b7:
f9:60:77:df:78:d5:5d:c4:59:1c:90:cb:ec:c9:ea:
ed:d2:49:e5:49:52:fc:56:a2:26:eb:7c:0a:36:53:
aa:e5:0b:fd:3e:e3:ed:5a:f3:a1:d7:e5:14:67:01:
f8:77:6e:36:37:ef:7c:bf:dc:94:1b:43:a5:d3:1c:
10:d9:be:92:4b:5a:75:63:eb:49:af:ac:42:de:20:
d0:af:3e:8d:90:a9:93:ff:cd:13:b3:27:9e:88:df:
67:3f:d3:45:f3:c8:dd:75:9b:94:03:bc:5d:f6:e7:
9c:d7:85:65:a2:04:09:ad:f5:54:32:4a:54:2c:06:
4d:41:e1:2a:6c:a0:e9:4a:f1:c1:ae:06:06:b0:9f:
64:4f:0d:c5:5e:07:90:13:68:34:9c:5a:f9:50:94:
99:0b:57:32:80:f1:9d:4e:06:b4:0f:09:2f:ce:33:
00:60:d2:36:a9:e0:93:7c:6a:80:8f:b1:77:f9:75:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:AD:FF:FD:4B:25:8E:9C:79:9E:A7:77:36:31:ED:A4:7A:51:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf214741-bd14-3a43-bc64-8b18b8e4c9dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:41:15:d6:96:f2:54:3a:7c:29:1a:6b:88:5c:0a:ff:c4:26:
c5:ff:49:d7:bf:8e:99:0a:67:61:82:7f:78:f6:ae:9a:8d:71:
eb:18:a9:fe:bc:a5:7e:b9:29:c4:e8:e0:ad:d1:a1:fd:f4:35:
32:6e:06:b4:dc:cf:67:af:a9:a5:a4:fd:17:65:36:f4:15:fc:
35:3a:91:88:79:43:0b:04:35:6a:ca:ff:68:84:1e:d7:78:e4:
6b:42:b0:75:98:07:85:84:d5:e4:17:38:c7:aa:4b:9d:af:6e:
5c:61:b0:8d:31:c3:7b:eb:b2:e1:2f:1c:36:62:8e:a3:b0:48:
15:c5:b9:8a:59:a9:70:1f:46:97:91:83:28:fb:36:54:e0:1c:
89:62:7b:85:45:11:1e:60:fb:27:ff:4f:e9:0f:a1:f0:69:21:
fb:5b:28:39:af:c2:ef:45:e7:61:d5:4c:b4:d7:89:d7:69:7c:
ed:dc:cc:d7:dd:86:b8:4d:a4:a8:6f:9c:e2:db:85:37:c3:25:
23:64:8d:cb:8c:c2:33:59:87:26:5d:ad:06:62:91:4b:05:aa:
41:79:9e:a9:61:81:2a:ba:6e:48:48:80:91:e6:fd:fc:23:a2:
d0:37:0d:ca:b2:d3:0d:8a:34:ad:fc:d8:a8:58:6f:9d:0c:c0:
53:b2:a8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:30 2026 by rpki-client