
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa
File: a869d388-8367-3ca6-b27c-a77b7ecce0da.roa (raw, json)
Hash identifier: B3hKRv9S8/y9iOJXl2ZL8yft7lNDGsqKQrSU9X/exKc=
Subject key identifier: DF:36:BE:24:16:C1:45:38:B1:E0:E0:A7:F1:44:06:76:28:F3:39:91
Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial: 010D0C9F4328584D3F64E5A5932697212346CB80
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 20177
IP address blocks: 198.248.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:e5:a5:93:26:97:21:23:46:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=96ca666a-662b-49c5-b298-d56a2a69f73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:9e:fd:38:2e:80:02:19:00:2f:33:5a:a2:
4e:bc:fa:20:fa:35:bc:5c:d4:52:6e:e0:02:3a:ae:
9e:1e:10:61:d3:75:22:04:43:fa:65:b7:d9:9a:98:
21:13:c6:99:7e:bf:ef:80:97:d4:43:c0:a7:d8:5e:
13:6b:8d:da:2b:f4:a3:06:2f:48:7d:06:03:20:dd:
0f:d1:e1:93:85:85:33:53:ac:98:c3:77:f3:4d:07:
1b:0a:6d:fc:d3:e2:2b:08:ec:85:ed:52:d5:98:dd:
63:a5:a1:f3:08:cc:70:b9:fa:b6:22:db:4e:1c:f9:
7a:49:7a:22:90:1b:bc:ce:0e:78:ab:27:16:f1:e9:
45:a2:5a:2b:f4:c3:52:df:0c:4a:18:d7:c1:e0:c6:
c9:2b:36:b6:7e:ab:c5:3c:61:15:d2:82:42:4c:72:
63:28:bd:41:c1:3a:d3:70:6b:78:f2:2b:f0:39:fe:
7f:4d:56:cc:6e:13:ee:16:98:3d:d8:35:ce:eb:53:
ad:47:41:a8:45:64:f1:dd:96:72:ee:e0:7c:24:fa:
3c:4e:7d:7e:88:96:35:74:58:c0:81:65:f6:fe:81:
fc:41:82:76:37:dc:57:f7:19:54:18:ef:15:72:7f:
86:47:34:51:46:97:78:ef:58:9e:8a:39:08:01:de:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:BE:24:16:C1:45:38:B1:E0:E0:A7:F1:44:06:76:28:F3:39:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
X509v3 Authority Key Identifier:
keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.248.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d7:5b:3d:d6:79:4a:fd:71:86:a2:48:89:71:31:4f:ff:a3:
49:41:15:e2:a8:8b:9b:76:81:b0:b5:d5:9d:01:2c:96:39:5d:
6b:66:80:f4:3c:3d:47:16:b5:36:c8:9a:c9:11:7c:26:d6:86:
8e:3c:22:01:ea:83:5f:6d:36:46:00:c1:8b:ec:a5:8a:ac:0f:
34:26:f5:71:08:2c:f7:63:95:a0:b5:50:01:2f:1d:b0:d7:e2:
29:26:3d:b8:03:64:7e:13:0d:66:1e:6c:78:fd:06:f2:89:db:
7a:e8:f3:1e:70:3b:cf:fa:87:7b:9a:68:bb:08:06:a5:28:85:
96:e7:be:85:b3:fb:3f:aa:3c:dc:a5:2e:99:68:ac:86:dd:c7:
ab:12:ca:db:59:de:ee:86:09:62:98:22:26:7c:ae:24:63:43:
83:5a:f8:b9:21:67:10:7d:fc:d6:13:30:31:f1:05:76:87:49:
32:42:2a:b6:95:54:50:6b:04:84:78:ae:18:db:c8:19:85:96:
a1:6d:5f:a1:36:9f:9c:b8:dd:66:9e:ed:ec:4d:49:70:e5:e9:
d8:56:67:31:e5:fa:b2:86:93:f3:de:95:74:bf:d0:01:35:12:
62:a4:94:c8:0f:a9:5a:43:b0:6f:5a:9b:a6:a5:db:95:68:b9:
e7:4d:5f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:25:57 2026 by rpki-client