
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa
File: d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa (raw, json)
Hash identifier: Xbt7G1rGuNYtE7n61+QSaSRnTmfCtPg7LPisCsqyqB8=
Subject key identifier: A6:ED:26:21:7F:A5:92:0B:0C:BD:AB:D8:9C:BA:8E:78:B4:5F:55:96
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D59EA83411AA5D4D865D5BD80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 397659
IP address blocks: 216.66.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:83:41:1a:a5:d4:d8:65:d5:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=03e57b23-5c71-4d3c-ab74-44ca34eae73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:31:3d:b2:37:58:eb:e2:d5:7b:ec:e1:ef:
43:7b:bc:a1:6c:7e:11:6c:54:13:42:0a:87:2a:1d:
24:79:b0:bc:9e:f2:ee:25:bf:d2:84:64:d9:04:7e:
0d:50:b2:32:bf:39:b9:e5:c7:58:35:7f:52:6b:74:
02:be:90:bb:18:8f:69:b9:bd:eb:1f:fd:58:ac:ad:
c5:9c:b4:28:a2:0f:95:01:ef:56:cf:ae:e4:89:72:
c0:fd:fd:0c:81:4b:56:d4:9a:5f:98:c4:a1:fb:9f:
5b:aa:6f:46:15:ea:50:ea:92:ea:98:8d:88:53:a5:
01:52:b7:87:7e:9c:ef:bf:05:43:01:43:fd:fe:16:
93:04:7c:b2:1c:14:a8:f1:22:d1:9d:96:d4:1c:a6:
70:47:5e:b3:ac:4b:4e:78:d9:9f:55:e0:b2:a0:79:
65:de:14:d0:8e:ab:08:14:03:c8:7e:8c:9b:90:8f:
16:ab:bd:a4:14:8e:32:09:7d:e5:3d:6b:fb:72:a5:
6e:5c:34:46:71:5d:3e:d8:f4:cc:fe:60:ce:07:9a:
b7:27:5e:e4:43:3e:b6:94:8f:79:d3:95:83:8d:70:
09:4c:bb:ea:12:4f:c8:25:d0:be:cb:11:63:90:c2:
fc:22:7d:d9:cc:98:28:60:f8:83:48:eb:21:53:70:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:26:21:7F:A5:92:0B:0C:BD:AB:D8:9C:BA:8E:78:B4:5F:55:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:b1:56:e8:d2:df:67:c1:ba:ee:7d:f6:52:75:37:98:af:9b:
1a:d2:da:01:4f:65:32:ff:f1:62:da:46:fe:cd:df:e4:d0:03:
d9:55:66:9b:75:35:02:36:3d:eb:ef:61:ab:fd:1f:a6:0c:2b:
5d:76:73:c0:e9:73:de:eb:be:27:9e:8e:e9:34:6e:f0:18:24:
2d:ec:ab:73:c0:8c:97:cb:10:9c:c6:39:dd:cd:9c:4a:99:4b:
17:20:a4:ab:73:61:d9:3e:1b:a8:a9:e8:eb:fb:41:33:87:f9:
b0:21:14:3a:ae:da:ba:87:1d:52:ad:21:c1:d7:1b:94:15:01:
58:41:10:03:f1:8c:76:43:7e:36:46:a9:2f:91:7b:49:05:30:
c6:f5:7e:ca:0e:a6:83:54:e4:5b:08:cb:2e:a4:0e:ca:05:27:
48:80:89:8c:05:a4:10:f4:06:6c:52:68:b1:32:bf:e7:fb:59:
ce:a8:63:6b:f1:72:69:c0:13:8f:a2:63:af:3c:ea:48:04:40:
77:03:c9:80:8e:4e:71:32:6f:cf:5f:71:2a:ff:da:8d:66:58:
52:c4:11:f6:a7:1b:bf:4f:e0:9a:f8:14:3e:e1:ec:cc:66:37:
38:9c:bb:cb:aa:ff:b5:18:53:38:ea:33:04:d5:80:ac:9e:ee:
21:7d:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:21 2026 by rpki-client