
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
File: 286dff2e-c72b-39d5-9019-431053745837.roa (raw, json)
Hash identifier: y1fyXM5X1UvGFmrwnx5RRkoz4dWrMnbvimU8TEEOClI=
Subject key identifier: 1C:72:D4:98:16:85:3C:28:6E:A4:E6:00:8B:67:21:85:A6:48:39:F5
Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial: 010D0C9F4328584DBFD07A6EAC8DE8FE22CBB680
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
Signing time: Thu 07 May 2026 01:00:23 +0000
ROA not before: Thu 07 May 2026 01:00:23 +0000
ROA not after: Wed 05 Aug 2026 01:00:23 +0000
asID: 400727
IP address blocks: 209.35.100.0/22 maxlen: 22
209.35.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bf:d0:7a:6e:ac:8d:e8:fe:22:cb:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Validity
Not Before: May 7 01:00:23 2026 GMT
Not After : Aug 5 01:00:23 2026 GMT
Subject: CN=4ac1daa9-b025-4a54-b121-49ae70e03800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:37:de:e2:ae:3b:3d:4b:fd:83:a9:c1:43:07:
bd:5c:6b:95:51:5e:39:2c:5c:a8:5d:c9:f0:8f:9a:
99:fa:47:00:5a:34:b9:54:85:83:a2:19:13:9d:17:
50:45:3a:22:3e:8b:c2:78:fe:5e:4c:0c:61:91:a1:
50:af:45:26:16:9a:b3:22:2d:d2:62:17:2b:7d:f5:
41:04:46:6d:bd:f2:cc:22:7a:ed:44:4e:f0:d2:a2:
34:3b:a9:3e:c3:13:1f:ca:2f:11:31:bd:58:8a:b9:
84:38:88:f2:d0:b9:72:67:58:f4:c1:bb:63:a6:dd:
b0:91:40:82:bb:cd:16:6c:1e:01:85:d8:2a:53:a4:
29:a4:73:65:79:0b:22:37:e8:2c:6e:ca:b9:b4:d0:
4b:72:30:20:4e:22:93:51:da:65:7d:34:80:c4:3c:
78:28:a1:98:f8:5b:c1:76:b4:76:5e:c3:c1:5b:b6:
73:5e:ca:9e:72:bd:6e:8c:d1:79:94:87:29:f6:84:
40:50:a8:3c:1f:0d:fd:f5:ef:18:d0:fc:4e:05:08:
9e:01:2b:a0:20:c5:a5:73:9f:9f:d4:55:81:1e:6e:
06:42:a7:f8:7e:e0:c7:cc:fd:ba:ad:54:8a:c0:af:
6a:be:a5:be:d7:04:73:5e:48:0a:f0:d0:cf:6d:8f:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:D4:98:16:85:3C:28:6E:A4:E6:00:8B:67:21:85:A6:48:39:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
X509v3 Authority Key Identifier:
keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.100.0/22
209.35.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:c5:66:67:87:a8:06:9c:4b:b5:90:92:bd:2e:5a:f7:ae:d2:
53:4a:f1:0e:52:c4:61:fa:2e:42:d2:c0:bd:1e:78:5b:18:90:
e7:50:a7:a1:5c:5f:39:02:8e:e4:3c:f0:eb:00:1a:3a:48:34:
83:fc:43:94:6c:79:bb:7b:3e:82:ea:d0:96:13:df:c5:3f:2d:
80:21:2f:a6:1b:cb:6e:b8:e8:17:61:47:b8:61:19:b4:33:5c:
50:eb:98:c6:2f:62:63:3f:28:ea:34:b8:c6:0e:ee:63:14:02:
50:11:f7:93:97:97:b1:8b:9e:cc:08:9a:09:77:37:ff:ed:df:
ba:1d:bc:31:c0:8b:02:8f:96:3b:86:ee:85:25:fc:72:68:19:
f3:b2:68:45:da:f4:82:e7:18:2c:7b:bd:a4:09:72:9d:87:5c:
d4:f9:59:a7:7f:65:02:21:af:39:a5:dc:18:4a:88:d7:08:df:
60:65:f2:b3:32:11:ee:53:51:75:a7:0d:09:19:9c:74:db:d3:
b4:1c:58:7b:cf:d4:35:7f:7a:e8:f6:a6:00:9b:d7:04:5f:65:
79:90:e8:49:92:5e:20:9c:c3:e4:d2:f2:18:50:e4:05:a7:71:
30:e2:f4:a1:29:17:90:c9:c9:5a:47:ba:b0:75:91:28:b4:4a:
9a:f3:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:32 2026 by rpki-client