
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa
File: ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa (raw, json)
Hash identifier: ZrVYDsDQ+ofkgjJY4KLpaPB/bDJIyxPqMzleoIA/SV0=
Subject key identifier: 37:78:BA:8B:CC:1C:8D:CE:0F:B7:22:F3:B4:D9:22:FA:F6:FB:0C:AD
Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial: 010D0C9F4328584D19B4DDDA8194A763F649F9C0
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 399509
IP address blocks: 199.96.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:dd:da:81:94:a7:63:f6:49:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=385aa5b2-9aaa-4f2d-9483-785d351c1920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:16:68:fe:a8:06:ba:45:1d:d1:98:74:3d:
a2:a8:b4:a0:19:ad:0b:9e:ac:e3:a9:81:5f:f3:58:
ca:73:37:5c:9c:3f:c6:69:ab:a5:1b:42:43:01:c3:
fe:1b:d5:e0:df:2c:95:f4:a4:44:19:9b:51:f1:a3:
b9:36:3d:58:5a:4d:b4:ec:ad:33:16:68:24:06:c7:
2f:2d:01:39:94:08:f1:a7:04:b3:bb:83:b3:6b:29:
28:25:1c:89:98:be:69:e2:0c:6e:ec:3c:6a:93:28:
09:33:2c:15:6e:f5:83:ed:ee:a0:34:bc:de:ca:da:
d0:29:47:50:5f:24:0f:58:09:40:49:36:27:ec:79:
6c:c0:8c:9f:d5:3a:28:a9:96:e5:59:64:80:91:79:
1d:61:fd:8d:9c:0e:e6:81:e7:a4:e8:2b:92:f9:b2:
32:4e:03:d6:26:c7:0c:ff:16:e0:e9:73:49:51:64:
b8:45:de:bb:3f:91:9b:cc:69:af:fa:59:a6:64:f2:
8c:9c:09:a2:19:f3:1c:10:09:e3:d8:b4:41:15:8d:
a8:cc:a9:71:83:ea:32:19:0d:c9:25:5c:10:50:15:
b1:50:4f:3c:8a:a6:df:cf:16:47:ec:43:4a:b6:a4:
d5:a3:93:86:45:d5:a7:2b:4e:ba:b6:9a:84:6d:79:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:78:BA:8B:CC:1C:8D:CE:0F:B7:22:F3:B4:D9:22:FA:F6:FB:0C:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
X509v3 Authority Key Identifier:
keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:d9:d5:0b:80:e3:cc:a3:98:38:19:cb:1e:32:bf:cc:13:5b:
d8:10:fd:7d:9b:32:a7:97:22:4c:38:d4:ce:5f:48:4d:ac:1b:
d9:2a:e3:f4:f1:dc:7f:f5:9f:03:ab:14:74:da:27:0a:bf:41:
df:7f:08:25:ef:b9:19:6d:03:9c:48:67:27:e4:64:5c:c8:ce:
b8:85:46:47:4c:86:8c:a1:12:51:d1:1e:9e:36:fa:4a:0e:04:
23:45:ef:c1:10:b8:91:4e:c1:52:18:48:5c:31:bd:1d:4e:9d:
04:e0:8c:01:ca:ec:79:20:2f:70:0d:92:f8:27:30:d7:43:b9:
11:9e:93:60:56:4a:63:f0:be:f4:a7:02:b6:a0:ce:a3:96:c2:
aa:c3:0b:bd:87:9c:eb:2b:95:bc:eb:62:f2:85:a6:06:7d:b1:
69:03:2f:07:88:cc:37:97:bd:e3:c4:54:ec:08:ee:e2:a5:19:
30:1d:9b:bd:fa:06:2c:51:11:c3:da:26:98:bf:9f:de:0c:20:
9d:e9:31:bf:b8:d6:42:b4:f3:2e:85:64:21:3a:2b:50:f1:c8:
1d:25:7f:f0:de:f1:4a:3f:8a:04:6d:1d:e6:92:09:07:ec:57:
bd:c4:56:21:4b:14:06:94:c7:63:8e:e4:4e:5a:03:2f:a7:94:
57:d0:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:28:33 2026 by rpki-client