
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa
File: d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa (raw, json)
Hash identifier: TR0PdL7dOqfLE7xwo46URm4PY26yE44C1DHz1otSEl8=
Subject key identifier: F0:94:0A:93:78:05:B5:97:C5:CF:5F:18:64:DE:10:F3:0B:CA:02:1D
Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Certificate serial: 010D0C9F4328584E8C8A44F76922EB53851BF180
Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa
Signing time: Sun 19 Jul 2026 09:00:11 +0000
ROA not before: Sun 19 Jul 2026 09:00:11 +0000
ROA not after: Sat 17 Oct 2026 09:00:11 +0000
asID: 43685
IP address blocks: 199.91.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8c:8a:44:f7:69:22:eb:53:85:1b:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Validity
Not Before: Jul 19 09:00:11 2026 GMT
Not After : Oct 17 09:00:11 2026 GMT
Subject: CN=8401ecd3-3c28-40e7-bb8f-299944a50186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:c4:10:0c:58:1f:41:a0:49:fe:1c:8f:2e:
98:7b:20:da:9e:f7:9a:b0:ae:5e:ae:9b:09:eb:8d:
58:c1:26:b6:9e:a2:47:aa:51:03:89:ac:0b:47:e7:
2f:27:8c:6c:36:a5:f5:43:79:6e:cf:2e:80:a3:ff:
4b:9c:6e:c2:b2:5f:04:fc:13:86:de:f7:88:1e:a5:
1f:36:11:d8:37:1b:31:a0:e1:78:b6:a5:8b:b8:cc:
bf:ee:2c:5d:ba:7d:4f:f6:1f:b0:78:5f:06:71:f6:
f7:84:05:8c:24:52:09:50:71:24:bb:70:ac:db:3d:
d0:6c:02:6f:f5:d9:21:7c:ef:0b:0b:49:0f:0b:05:
7b:5f:e5:16:d0:cc:99:30:84:19:b3:6a:54:26:8d:
b3:9e:f4:a8:da:66:4d:20:6f:4b:e7:0f:a6:de:26:
6c:87:fe:9a:d9:be:3e:4b:90:2e:7a:be:1d:e5:b1:
f2:53:40:fa:64:a2:07:93:2e:fa:19:48:59:bb:40:
62:9e:0d:01:ba:5a:a8:91:ed:8e:6a:c4:c7:af:39:
29:c3:e2:0e:75:dc:39:d9:2b:20:85:4e:68:d0:d4:
35:59:80:5e:ce:39:c5:37:c9:a1:16:60:f2:96:57:
3a:b3:9e:ae:bd:7d:8c:1d:7c:0e:06:e8:fa:0d:5b:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:94:0A:93:78:05:B5:97:C5:CF:5F:18:64:DE:10:F3:0B:CA:02:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl
X509v3 Authority Key Identifier:
keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:58:68:87:26:be:a0:9a:1d:96:bd:66:b3:0f:13:9f:4c:dd:
8c:86:c1:2b:d9:5c:44:b9:d6:e6:22:49:a6:2f:0a:c4:8a:1a:
56:16:01:5d:c9:62:00:f6:b7:00:30:d8:86:cb:d9:5c:6b:11:
fd:0e:81:af:11:3d:86:82:75:bb:8d:95:a3:9e:f3:9f:00:03:
5b:a3:e5:cc:6b:e2:d8:13:d1:2f:60:a0:56:ef:aa:59:d1:c7:
e0:60:53:ef:58:fa:43:4f:2a:08:7b:88:6a:11:32:37:28:c8:
80:8c:4f:98:40:0a:1c:b5:f5:15:f1:6c:92:fa:84:22:69:94:
d8:de:ec:80:fd:d0:fc:ae:b9:1e:dc:a1:91:da:1a:4f:a9:cd:
be:13:56:26:d0:87:d0:5d:a1:0b:c3:b4:60:e1:39:e9:24:e6:
84:a3:64:ab:be:7e:91:8c:64:ff:49:4c:03:04:d3:9b:93:5e:
53:40:21:f0:a5:e6:3f:26:1d:17:33:6c:5f:4d:1f:d9:56:23:
56:ef:11:aa:4f:e1:5e:a4:12:ec:c5:e4:6a:9e:d9:b8:43:ff:
dc:03:90:7c:3f:f1:b7:6c:03:8e:b0:92:db:f6:7d:71:b5:50:
59:ac:0f:bc:a3:2c:0d:0a:64:db:ba:f4:20:bc:8e:9e:b8:79:
75:ff:32:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:30:12 2026 by rpki-client