
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa
File: 8c01b867-e0ea-380c-95a8-417bf084bf0e.roa (raw, json)
Hash identifier: wvPTX3UZ0BGVLkN+v5lbPIEwxn4GYpFm+fTOaCmhQF8=
Subject key identifier: BD:36:6C:6F:AC:15:A3:E2:77:97:E5:D8:12:ED:7C:D3:B6:65:C5:C6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D6C0FD1CD1FDAB30E0A9D55C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa
Signing time: Tue 07 Apr 2026 01:00:23 +0000
ROA not before: Tue 07 Apr 2026 01:00:23 +0000
ROA not after: Mon 06 Jul 2026 01:00:23 +0000
asID: 16625
IP address blocks: 72.247.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6c:0f:d1:cd:1f:da:b3:0e:0a:9d:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 7 01:00:23 2026 GMT
Not After : Jul 6 01:00:23 2026 GMT
Subject: CN=5ccfea95-94d6-4073-aeaa-1ad62c4e3baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:26:11:2b:29:6d:39:d6:1f:7c:01:52:c1:
03:65:e7:62:27:60:92:9f:ce:d3:21:a4:a3:d9:89:
90:a1:7c:50:2a:d0:c9:d7:43:6c:9e:96:74:62:c7:
65:23:af:c3:df:92:ec:1a:a5:bd:2b:7d:86:2e:22:
31:ed:66:a4:ca:9e:e6:f8:aa:25:cd:d8:31:f6:07:
c6:56:d7:68:a4:0f:df:47:d7:b7:ea:73:b3:c1:c2:
53:69:d2:38:4d:e4:63:c0:1e:46:4b:6d:22:9e:60:
92:27:66:77:9b:a4:0a:cb:32:86:ae:51:84:c6:6c:
c8:2d:81:d4:a3:f6:dc:74:81:bc:71:f1:6f:4b:09:
bc:5e:61:df:b4:2a:ba:07:be:9f:ca:27:9d:e0:17:
6a:22:0c:3f:1a:80:5d:5d:0f:fa:46:df:41:78:b5:
7a:00:27:6e:16:d9:f8:e0:c7:d5:ad:84:37:ea:86:
6e:56:1f:ee:82:94:a7:c1:df:fe:59:20:e2:e8:b2:
10:35:e2:93:67:d4:bb:32:b1:9c:63:1e:ba:cb:31:
64:25:a8:db:9b:a6:c5:8b:3e:f4:2a:22:10:e3:9e:
63:f7:b2:8d:38:7c:5c:ff:c5:c7:c3:47:9b:e4:6d:
1b:c6:4c:d3:00:17:b9:c5:fa:63:fb:b4:59:f7:e0:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:6C:6F:AC:15:A3:E2:77:97:E5:D8:12:ED:7C:D3:B6:65:C5:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.247.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:e4:92:93:c4:46:a5:45:64:96:4a:2e:03:8b:a1:7f:24:54:
98:fa:26:3b:e0:4f:e8:f8:ef:a2:ee:84:de:f4:ec:40:db:10:
38:b3:b8:8e:33:04:8b:ad:89:2f:01:e3:67:42:e3:0f:0f:9b:
c0:c6:a8:1f:35:f5:d1:e8:51:74:ac:66:46:d8:8b:26:4e:20:
e3:f6:fa:01:9e:7c:d6:96:7e:98:14:8b:de:f3:61:f9:f5:01:
4d:66:32:0e:32:a6:39:af:3f:80:f8:27:0e:bd:63:55:8d:96:
0d:7e:2d:a5:5b:13:a6:10:63:26:cc:7c:7e:7f:9d:3c:7c:8e:
45:5f:10:2a:af:b6:30:85:8c:82:8d:5c:16:df:58:38:9c:79:
f3:46:2d:8e:8b:1f:5c:fb:73:63:4e:e3:c0:69:96:93:72:60:
57:e4:a8:5c:6c:91:3d:c1:8d:f8:0f:e3:6c:5c:02:f5:95:35:
2b:7f:10:26:1e:39:0a:9e:e6:a8:26:c4:55:28:d1:8d:ab:cf:
bc:3c:0e:74:2a:27:62:02:07:34:4f:3e:7f:7a:7a:97:6e:b2:
d7:7b:4a:78:a5:ec:84:56:36:e1:93:d1:ab:aa:d5:8d:eb:ad:
65:d0:47:fd:3c:86:2e:29:86:fd:5c:1c:27:45:ca:b4:88:03:
72:5e:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:32 2026 by rpki-client