
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/c3bf8a02-dba8-3fe4-a51e-24887b455d98.roa
File: c3bf8a02-dba8-3fe4-a51e-24887b455d98.roa (raw, json)
Hash identifier: +6vyOneaZ6f8YAScMjMHeVtgG1fyB2E+FPTwOjpuYxE=
Subject key identifier: 4A:03:7E:00:D3:BB:2D:B8:17:68:FB:04:6D:6D:25:5F:91:42:57:E1
Certificate issuer: /CN=7019d1c7-b32a-4a65-a135-234cde3c7680
Certificate serial: 010D0C9F4328584D3E00186AD808B9C34728E2C0
Authority key identifier: 22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/c3bf8a02-dba8-3fe4-a51e-24887b455d98.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 18656
IP address blocks: 199.27.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3e:00:18:6a:d8:08:b9:c3:47:28:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7019d1c7-b32a-4a65-a135-234cde3c7680
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=20806a28-b348-45d9-8655-ce59da84594a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:e3:e0:af:59:6c:3f:f7:9b:eb:df:dc:ce:
8e:7d:63:0e:96:1e:69:bb:13:1a:0f:95:e1:73:9b:
b8:5b:cb:f9:2f:76:15:bf:b2:8a:2b:af:a7:9c:53:
88:0e:35:90:ba:0c:e1:f4:10:6c:7a:41:55:60:3d:
1d:f2:9a:f5:f0:48:70:1d:1e:17:36:71:cf:f6:23:
1c:a2:91:64:eb:df:3f:84:cd:8a:67:de:ec:c3:83:
9e:13:a7:ea:6b:a0:f6:78:03:73:be:5f:fc:b4:b7:
1d:1d:c2:c5:a3:0d:f9:74:3a:35:8e:62:76:b7:db:
a0:71:f1:09:33:a3:c5:3e:de:ca:23:c0:e8:9e:da:
12:95:16:4a:a4:76:bf:f2:06:54:1c:13:00:05:60:
0d:90:2c:ed:10:c1:de:6a:21:b8:42:26:f1:84:98:
64:d2:3e:ef:0e:0d:5f:96:bd:ef:c5:2e:a5:b8:de:
50:18:65:3a:f6:54:0d:8a:68:32:12:12:ed:46:1e:
b7:8e:52:19:54:2b:04:7e:a2:6c:a1:10:ee:84:12:
0c:5c:a1:db:aa:60:5c:aa:00:a7:14:62:01:d6:b2:
98:b4:f5:77:7d:49:9d:eb:19:99:fe:1d:87:8e:68:
9d:d1:b9:db:e3:e9:69:51:95:43:b5:bb:92:50:d0:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:03:7E:00:D3:BB:2D:B8:17:68:FB:04:6D:6D:25:5F:91:42:57:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/c3bf8a02-dba8-3fe4-a51e-24887b455d98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl
X509v3 Authority Key Identifier:
keyid:22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
sbgp-ipAddrBlock: critical
IPv4:
199.27.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:e1:de:e3:d6:f0:97:ae:b3:0a:75:f7:fb:2f:41:50:ea:6e:
90:ce:b7:e5:cc:2b:4a:e0:3e:b1:24:95:74:94:93:cd:ce:b2:
20:c0:d4:96:20:f0:cc:6f:e5:b5:00:ca:86:3e:45:25:a1:fc:
28:4e:75:81:a5:98:51:50:27:6a:51:88:42:aa:64:5b:dd:f5:
f4:3e:e1:d2:2d:4d:1d:50:7f:87:58:36:58:e8:2f:ee:13:bc:
45:44:41:9d:61:2b:89:97:e2:3f:df:c9:e2:65:c2:6e:79:46:
80:09:1f:38:5e:fb:4d:27:ea:77:ad:97:0a:8e:14:80:62:de:
81:1e:93:42:fd:1e:a3:07:e4:d2:36:62:ae:51:7f:a6:04:c1:
90:b0:70:0b:9a:8f:d9:d6:97:ca:fe:02:c9:cb:8e:52:bd:bc:
99:31:be:b6:c4:4a:bc:7b:d8:92:d2:db:6c:19:b6:b3:1f:2e:
3f:82:7d:88:0e:23:40:6e:44:03:97:2f:78:c6:2a:ec:9c:c9:
50:d2:c2:24:27:d2:6c:00:33:4c:97:d5:1b:ab:98:37:ee:b0:
dc:73:2f:33:c6:75:cf:d5:b9:6c:ec:8e:99:93:32:79:24:df:
f4:e3:8c:c0:83:e0:bd:19:23:66:b3:80:51:ea:09:a8:06:2c:
d2:e3:a8:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABhq2Ai5w0co4sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAxOWQxYzctYjMyYS00YTY1LWExMzUtMjM0Y2RlM2M3
NjgwMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MjA4MDZhMjgtYjM0OC00NWQ5LTg2NTUtY2U1OWRhODQ1OTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+vj4K9ZbD/3m+vf3M6OfWMOlh5puxMaD5Xh
c5u4W8v5L3YVv7KKK6+nnFOIDjWQugzh9BBsekFVYD0d8pr18EhwHR4XNnHP9iMc
opFk698/hM2KZ97sw4OeE6fqa6D2eANzvl/8tLcdHcLFow35dDo1jmJ2t9ugcfEJ
M6PFPt7KI8DontoSlRZKpHa/8gZUHBMABWANkCztEMHeaiG4QibxhJhk0j7vDg1f
lr3vxS6luN5QGGU69lQNimgyEhLtRh63jlIZVCsEfqJsoRDuhBIMXKHbqmBcqgCn
FGIB1rKYtPV3fUmd6xmZ/h2Hjmid0bnb4+lpUZVDtbuSUNBIMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEoDfgDTuy24F2j7BG1tJV+RQlfhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MDE5
ZDFjNy1iMzJhLTRhNjUtYTEzNS0yMzRjZGUzYzc2ODAvYzNiZjhhMDItZGJhOC0z
ZmU0LWE1MWUtMjQ4ODdiNDU1ZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzAxOWQxYzctYjMyYS00YTY1LWEx
MzUtMjM0Y2RlM2M3NjgwLzcwMTlkMWM3LWIzMmEtNGE2NS1hMTM1LTIzNGNkZTNj
NzY4MC5jcmwwHwYDVR0jBBgwFoAUIg3xbZnjAw8pgoinQ5WJawDMTZMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MDE5ZDFjNy1iMzJhLTRhNjUtYTEzNS0yMzRj
ZGUzYzc2ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxvkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnh3uPW8Jeuswp19/svQVDqbpDOt+XMK0rgPrEklXSUk83OsiDA1JYg
8Mxv5bUAyoY+RSWh/ChOdYGlmFFQJ2pRiEKqZFvd9fQ+4dItTR1Qf4dYNljoL+4T
vEVEQZ1hK4mX4j/fyeJlwm55RoAJHzhe+00n6netlwqOFIBi3oEek0L9HqMH5NI2
Yq5Rf6YEwZCwcAuaj9nWl8r+AsnLjlK9vJkxvrbESrx72JLS22wZtrMfLj+CfYgO
I0BuRAOXL3jGKuycyVDSwiQn0mwAM0yX1RurmDfusNxzLzPGdc/VuWzsjpmTMnkk
3/TjjMCD4L0ZI2azgFHqCagGLNLjqDc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:54 2026 by rpki-client