
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/a241a47a-993d-39f7-9921-26439d28eafd.roa
File: a241a47a-993d-39f7-9921-26439d28eafd.roa (raw, json)
Hash identifier: xezRKSwtiuHkVLjzqh+siDyOmccCane7LcmLCFm2r4E=
Subject key identifier: 31:C1:B4:56:9A:8B:D4:79:98:A4:30:2B:1E:4D:74:54:C3:4A:F4:C7
Certificate issuer: /CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Certificate serial: 010D0C9F4328584D492A706676EBA9B4216545C0
Authority key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/a241a47a-993d-39f7-9921-26439d28eafd.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 8075
IP address blocks: 198.35.23.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:70:66:76:eb:a9:b4:21:65:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=48d9e0f2-d70f-4e1b-94bb-8aee7e748a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:34:ec:2e:da:c5:da:0b:72:51:fa:cc:a3:
fb:0d:b6:f8:22:40:8a:4c:7b:7b:01:42:07:bc:a1:
c7:47:3a:38:48:b4:33:ce:40:7c:62:a7:2b:e2:89:
f5:5b:59:6b:e6:41:f3:6f:ac:c1:7a:38:82:6d:ec:
b5:26:2a:8b:66:96:0c:8e:13:9f:25:26:a1:19:c7:
77:ff:f8:37:01:d4:3a:4d:90:cf:fb:cb:65:a9:99:
a4:c4:32:50:b1:e6:6d:d9:5d:bf:84:ef:ad:40:32:
55:49:56:d0:ff:e0:70:ed:ed:0d:00:7f:df:f3:bd:
b0:b2:c7:7f:92:2a:af:ff:52:4d:da:a2:a7:41:e5:
e8:d4:ab:52:d9:c5:51:a9:a6:f3:3f:0f:20:0c:78:
04:89:f3:d9:43:82:21:be:b5:2e:12:e9:4a:a9:dd:
2c:86:9c:5c:6e:55:0f:c4:fe:1b:64:f1:6a:90:38:
94:69:6a:eb:9f:61:5e:a0:5f:5e:6e:aa:14:00:04:
ed:f6:63:76:eb:ea:21:ab:6c:04:8e:90:cf:b6:1b:
84:01:5d:45:c0:f4:3d:c1:ee:9a:0f:a8:4f:5d:82:
d3:4f:d8:37:b9:9a:4c:31:18:8a:1e:66:ef:a5:0f:
3b:12:5c:ce:68:e4:4f:94:38:2f:69:81:e1:6b:f4:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C1:B4:56:9A:8B:D4:79:98:A4:30:2B:1E:4D:74:54:C3:4A:F4:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/a241a47a-993d-39f7-9921-26439d28eafd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl
X509v3 Authority Key Identifier:
keyid:9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.35.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:96:84:51:b5:c0:ef:99:71:e3:83:17:ab:5f:b9:90:a5:1a:
a5:46:df:f2:70:9d:9c:bd:1f:8f:f5:77:f7:07:0c:88:3f:4c:
89:47:8a:d8:ba:86:1f:28:44:cc:2e:c1:23:9b:cc:34:f4:16:
7c:6d:38:5e:88:1e:7b:4a:ee:48:ed:38:b9:05:41:b3:e3:1b:
70:c9:f2:37:30:f7:3c:bb:20:b1:d5:8c:a6:a4:04:89:6b:15:
c1:47:dc:3e:41:92:64:1b:74:7b:14:f1:21:72:ca:94:ce:e4:
4d:01:63:15:53:e7:ab:49:8d:19:c6:f9:1c:e1:d3:09:f3:1d:
89:83:70:5e:1b:50:2f:df:24:6e:e5:e5:1d:82:73:9f:82:e0:
43:f6:e5:42:c3:3e:64:61:2b:53:9f:03:3a:4c:1f:40:6e:a3:
ba:af:fc:56:62:95:36:5f:37:cc:dc:2c:57:5b:1f:3a:0f:16:
82:0d:b5:f9:80:36:a2:ad:07:82:4f:37:97:1d:17:14:9a:0c:
d2:b2:aa:0a:4e:3a:ec:12:94:ac:cf:96:94:47:9d:42:4b:43:
a9:02:0e:c5:a2:86:9c:52:44:32:cc:f2:67:68:82:70:73:55:
05:cd:37:73:39:c5:b2:90:bd:78:bc:bc:2c:65:f5:cf:d4:27:
9f:36:18:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:36 2026 by rpki-client