
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
File: 70a2edab-599b-37b9-90c6-3e15b53af115.roa (raw, json)
Hash identifier: P20MUaqWGriwuI+3TSdfB9bzaZ393afVM/5p5YLsVe4=
Subject key identifier: F5:10:00:B1:AB:81:5C:83:35:47:0B:31:B7:EA:31:70:B6:1E:66:FA
Certificate issuer: /CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
Certificate serial: 010D0C9F4328584D4D5A5E074357D478FC37C140
Authority key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 397701
IP address blocks: 192.64.12.0/24 maxlen: 24
199.193.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:5e:07:43:57:d4:78:fc:37:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=203665dc-bc0c-439e-b8fc-e3146c262fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:cd:34:a6:bb:8c:28:10:da:dc:c5:a8:28:
1c:c0:bd:d7:d6:20:d1:f4:e5:4f:26:c7:41:ee:5c:
f6:63:f5:0c:08:22:5c:62:45:cf:c8:58:b5:28:9c:
b4:70:da:05:06:b9:50:f4:c2:dd:47:53:35:a2:f0:
97:20:c1:e1:3c:ff:67:c4:01:f4:76:fc:3e:8a:57:
83:95:46:d8:4d:77:7b:b3:57:19:da:67:9d:27:06:
89:19:61:9c:40:c7:b1:75:23:dc:4f:4f:31:ad:39:
73:03:bf:d1:b0:34:08:38:1a:8a:3c:6c:77:65:3d:
3b:cd:e1:7e:45:e8:b1:7c:a9:fb:ee:a9:08:d6:83:
54:bc:ef:1b:33:5e:0b:90:3b:6e:6b:0f:1f:1c:d9:
d2:2a:ea:03:55:e1:f9:cc:2c:c8:8a:fb:8d:22:65:
b6:0c:66:35:9d:41:95:e5:78:47:3a:9a:89:89:ab:
b9:25:ef:5b:7e:9b:f0:27:e9:33:19:6c:81:cf:d9:
a3:51:0a:24:f2:d3:9e:c4:0a:dd:66:7b:8f:d3:b8:
57:c9:33:5a:5a:17:a2:67:7c:24:15:f4:a3:c8:0f:
76:60:60:42:93:8d:33:5e:eb:73:35:fe:67:5b:73:
a0:d3:37:a9:56:c3:2a:f5:d5:e7:99:8d:22:79:ff:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:10:00:B1:AB:81:5C:83:35:47:0B:31:B7:EA:31:70:B6:1E:66:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl
X509v3 Authority Key Identifier:
keyid:37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.12.0/24
199.193.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:12:2b:9e:88:df:08:f8:29:78:18:d0:37:98:cd:75:a7:ce:
12:b5:33:6c:93:91:16:11:96:11:55:ff:af:ce:c2:ea:1b:bc:
3b:c0:7c:54:37:a8:7a:e5:23:53:d5:59:14:86:9d:d5:3e:29:
c4:ec:d4:8b:4f:a3:6a:d2:4a:57:78:1c:f8:b6:e0:aa:4c:ef:
b4:7f:2b:59:a8:98:69:90:5d:71:02:5b:7d:97:0d:d7:3a:e6:
4a:41:8d:74:e5:11:01:3b:da:2e:61:33:a4:81:96:8f:f0:e6:
a0:ef:f1:0c:97:6e:28:4d:c7:aa:72:c9:01:0e:a8:c3:e7:5c:
e4:19:9b:2f:e5:fa:98:73:dd:9f:22:bf:b1:20:c0:28:8b:54:
02:cd:24:2d:5c:c2:9d:3c:5c:66:3a:9a:62:a3:b4:21:e2:37:
14:e9:8a:a6:0a:ed:c4:63:48:94:e0:2e:91:91:f1:1a:28:bb:
84:f7:9f:18:07:ed:ba:ed:06:ce:40:12:57:5e:92:cf:40:a1:
f0:b6:6b:bf:d3:e3:25:5f:7f:7f:8f:87:bd:38:2c:7f:60:fd:
ba:a8:77:0b:b7:3e:dd:7e:89:dc:97:69:c1:09:14:8b:25:4d:
60:9f:5e:73:9c:50:49:04:ee:16:12:58:9a:de:2e:fd:20:e7:
fd:f0:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:10 2026 by rpki-client