
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa
File: 9f904d6f-04cf-31be-817e-18ee7663b54b.roa (raw, json)
Hash identifier: 02RAVTdARdjG2O2VpYF0iVK98LS40HjusZq4dvShPL4=
Subject key identifier: F6:DA:56:C3:9A:3E:7A:F3:AA:F4:2A:06:09:CB:E4:04:0A:EB:36:5B
Certificate issuer: /CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50
Certificate serial: 010D0C9F4328584D3B34E4BBDD1F3040821EA400
Authority key identifier: 88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa
Signing time: Fri 20 Mar 2026 13:00:40 +0000
ROA not before: Fri 20 Mar 2026 13:00:40 +0000
ROA not after: Thu 18 Jun 2026 13:00:40 +0000
asID: 13552
IP address blocks: 199.202.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3b:34:e4:bb:dd:1f:30:40:82:1e:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50
Validity
Not Before: Mar 20 13:00:40 2026 GMT
Not After : Jun 18 13:00:40 2026 GMT
Subject: CN=dad44372-79cc-44fc-b7ad-9a56bc6d67e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:52:7c:f3:8d:d4:32:2c:f0:1d:0c:8f:8d:
af:71:7b:1b:d4:7f:32:6a:42:39:c7:d2:54:5c:87:
b3:45:5f:0e:e8:2b:9e:bc:cf:a0:05:c5:05:54:ea:
de:1b:ff:c7:c2:37:a2:36:3d:62:21:6e:0c:e2:c6:
f7:82:80:42:f2:14:06:03:ff:86:0e:73:cd:77:d6:
cb:36:78:6f:99:95:ec:bb:31:28:f5:01:b6:f4:9d:
7d:61:59:4e:f7:c1:d1:c0:06:3f:62:63:a8:5a:5b:
4f:e8:5e:55:f2:9a:c5:32:04:dc:0c:70:b4:5c:da:
b2:87:17:eb:47:4e:41:d2:d2:fb:23:b6:e2:b5:1a:
44:29:9d:27:15:86:6c:1d:49:3f:5e:4b:96:d6:65:
bb:88:cd:29:2d:4a:79:80:0c:91:ad:70:27:cf:8e:
9b:e9:6e:df:41:8f:05:e5:57:ca:ff:9b:db:d6:e9:
d7:e6:ab:17:fe:a3:bf:83:f1:db:db:48:86:00:50:
ed:f7:c4:cd:0d:5a:28:d9:03:ed:80:9c:39:69:0f:
4a:c3:bf:82:3e:1e:50:b7:74:58:43:18:ae:ed:88:
ff:82:f3:f2:56:6f:6b:f3:77:cd:cf:4a:cc:fc:d0:
e6:d2:20:58:77:17:5b:06:39:1a:14:59:a5:ab:bc:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DA:56:C3:9A:3E:7A:F3:AA:F4:2A:06:09:CB:E4:04:0A:EB:36:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl
X509v3 Authority Key Identifier:
keyid:88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
199.202.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:c9:36:aa:e6:77:7c:d4:60:4a:d8:91:76:df:c0:e4:c9:e1:
73:34:47:c6:38:08:fd:38:e2:b0:b9:aa:5d:da:fc:94:72:a5:
4e:cc:ce:ae:00:67:1f:e0:01:91:34:ca:3b:a5:18:dd:ac:48:
fb:25:2e:0a:46:8e:36:93:2b:25:f4:e5:82:36:d5:af:34:94:
b6:5a:c9:fd:08:b8:5a:4f:35:57:96:b2:fa:ec:5d:00:34:f9:
89:3e:59:65:f4:4c:77:ac:66:b5:4c:87:f4:22:57:ad:fc:b9:
b0:96:1a:ca:7e:38:83:45:cd:28:8b:f6:2f:b8:74:2e:af:9d:
e7:3a:57:33:26:0b:50:31:fb:03:f6:f3:f9:42:f6:71:f4:30:
47:b1:a4:a3:7e:58:71:25:39:7d:92:3e:e5:69:d3:4d:db:e8:
a6:d2:cc:66:71:88:cf:43:33:c3:54:bc:79:e2:c0:be:89:a1:
f4:5a:93:8c:f8:7a:3a:b3:2a:d9:53:71:1b:fc:ca:d1:6c:4d:
f8:87:0f:8d:63:f0:b6:48:84:33:08:7a:ce:66:a2:4d:5c:36:
c2:0f:15:e9:b7:ff:be:01:98:dd:a3:cf:08:13:0c:b1:f1:38:
c8:3f:82:30:cd:68:83:4b:47:ec:cc:9d:a0:35:0f:69:67:f2:
73:ff:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:16 2026 by rpki-client