
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
File: 2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa (raw, json)
Hash identifier: Q58qiy59ra9RSi1XbsCJDHfpdRClttHtn1RcfV0TpWU=
Subject key identifier: 61:A1:7A:AE:32:47:35:6B:28:6B:97:77:53:1E:A9:47:F2:48:43:94
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F4328584D3B34E25FF825957DD9505680
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
Signing time: Fri 20 Mar 2026 13:00:40 +0000
ROA not before: Fri 20 Mar 2026 13:00:40 +0000
ROA not after: Thu 18 Jun 2026 13:00:40 +0000
asID: 2559
IP address blocks: 198.241.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3b:34:e2:5f:f8:25:95:7d:d9:50:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Mar 20 13:00:40 2026 GMT
Not After : Jun 18 13:00:40 2026 GMT
Subject: CN=917f0674-785e-4534-953d-7b0c82ae3b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:6c:49:f0:10:7c:62:68:79:d3:4c:08:2e:
1f:c4:99:61:cf:66:15:fa:5b:c8:76:75:04:d9:06:
af:40:72:6e:64:60:18:bc:35:14:64:99:d3:e4:be:
11:c7:59:13:3d:51:0a:57:90:3f:6b:4a:b4:93:cd:
fe:17:fd:fb:76:9d:cd:cb:85:6a:00:1e:67:69:4c:
82:a2:d4:b5:a1:ff:d1:ae:00:7c:43:ce:82:77:51:
c8:45:f6:97:4e:bc:d3:61:63:ce:6a:a2:7e:b5:ff:
3c:ec:41:a5:b0:5e:e0:ca:e8:f4:20:7a:02:c1:61:
16:c5:0c:98:d7:6f:06:d3:46:5e:bd:a2:0b:fa:2e:
de:7b:9e:15:6d:34:19:ae:33:98:c2:1b:0a:3e:83:
ba:02:92:eb:ff:c0:4e:e7:3b:d8:03:28:73:59:cd:
a6:55:c2:8c:4a:70:b0:ca:df:b2:da:7f:82:90:f1:
68:59:f8:93:47:18:1b:49:5b:7e:bb:34:5d:9c:29:
78:8a:0b:49:ca:fc:8e:06:5b:34:c1:59:90:33:c2:
64:3e:d1:72:f5:ed:40:15:77:62:44:06:8d:b3:27:
b3:ea:3c:65:dd:2d:68:eb:9a:25:b4:1f:dd:f3:44:
38:15:ec:df:de:de:42:47:fd:91:8c:27:50:97:ae:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:7A:AE:32:47:35:6B:28:6B:97:77:53:1E:A9:47:F2:48:43:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:d6:17:60:4b:a1:fa:9c:b9:5a:34:83:a4:2e:1a:56:f8:4f:
e3:5a:3c:9a:83:0a:98:5e:04:9f:6e:02:33:5c:41:70:00:2f:
78:ca:d5:d5:ce:e3:b7:23:d8:fa:8f:88:e6:1e:4f:89:ec:91:
e2:cd:bf:aa:0b:9f:b9:33:66:a4:23:ac:b3:bd:20:d5:2b:09:
6f:ac:20:98:61:bf:dd:99:6f:ec:98:92:b7:3f:69:ca:83:c7:
50:02:9f:c0:3a:7d:78:24:b5:8a:e1:7a:2f:17:67:21:3e:f4:
5d:9e:82:8b:77:18:8e:61:d9:92:ef:26:e7:98:98:03:d6:5e:
29:1d:ea:12:ae:5b:08:9a:18:c7:80:5c:1f:7c:34:6d:9b:94:
64:a6:9c:12:da:76:e5:78:34:19:8f:e9:3e:0a:fc:94:86:c5:
ee:fb:b5:31:9c:62:fe:0e:41:ef:29:d0:4e:94:6b:33:96:5d:
1d:43:61:3d:5d:92:8f:72:18:a1:37:30:2a:19:d5:09:aa:59:
02:0b:80:1f:53:25:2d:d4:7c:b4:78:c6:b9:c6:27:b7:88:43:
55:0a:6a:48:66:9a:43:c1:12:36:9d:94:18:8e:af:97:7f:c3:
d8:b2:13:c6:f0:a0:99:01:13:ef:d8:60:09:44:80:b1:df:ac:
e7:68:ca:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:11 2026 by rpki-client