
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7ed06f05-dd82-3a43-84f7-0175ed2b5c35.roa
File: 7ed06f05-dd82-3a43-84f7-0175ed2b5c35.roa (raw, json)
Hash identifier: hqd1eUPM4ixw6sz90f03LwzfaZsp/5c+rOrnmqeIJUg=
Subject key identifier: 3E:A1:32:5A:82:28:73:2E:99:4A:B7:9B:71:AE:48:BA:FC:BD:88:81
Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial: 010D0C9F4328584D40CB9FACFC0AD883AF25EC80
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7ed06f05-dd82-3a43-84f7-0175ed2b5c35.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 398395
IP address blocks: 199.253.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:9f:ac:fc:0a:d8:83:af:25:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=4c29a4b8-51c9-4959-a0de-3694cec737c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:33:e7:ce:53:46:b8:db:f7:74:9b:33:ca:
82:06:22:61:4f:20:a9:f9:58:d6:8e:9d:43:c6:09:
83:b0:d9:16:70:64:6a:90:97:01:6f:34:43:73:3b:
d7:5d:0d:be:49:da:db:08:7d:83:e0:3b:a8:26:72:
e4:d5:b2:be:9a:63:6f:72:a4:f2:e2:8b:5f:0e:22:
b0:d3:3c:a2:f9:47:3d:3e:8d:ff:ab:d8:c6:e8:b0:
b3:c2:4f:9b:9f:ce:1e:49:bd:d7:e9:43:0d:33:a2:
59:e7:c6:2b:d5:f5:4a:bc:6f:cb:0c:a6:60:57:90:
e3:40:78:b0:49:82:ad:94:ba:25:5f:93:ca:b5:d0:
ec:87:32:d1:f5:10:53:cb:b9:e0:a5:92:c2:73:7b:
d9:c8:1f:94:63:8c:e9:2d:3e:21:be:26:c9:71:4f:
c8:c0:79:91:05:25:f2:08:e1:b2:0c:3d:79:27:1b:
a3:8e:f8:d6:e0:5f:58:aa:f1:f1:9c:0f:d0:54:fc:
35:c3:62:59:e4:01:69:66:2f:c3:df:71:de:7a:09:
32:cd:d9:6e:64:1c:c4:51:45:4f:ad:ab:64:88:29:
5a:f5:04:b2:62:49:29:79:3c:af:91:f8:08:93:fa:
f2:dd:93:43:eb:ad:54:20:6d:62:d9:00:0b:08:19:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:32:5A:82:28:73:2E:99:4A:B7:9B:71:AE:48:BA:FC:BD:88:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7ed06f05-dd82-3a43-84f7-0175ed2b5c35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
X509v3 Authority Key Identifier:
keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.253.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:37:56:da:64:41:44:87:03:c2:6b:c6:22:f3:59:a5:1e:e0:
df:f6:35:fe:c8:72:34:bf:02:a2:e0:79:fb:cd:aa:ac:58:0b:
44:38:78:b3:ce:63:fa:3a:0d:8e:b3:ae:88:8c:3f:90:58:d4:
ed:c0:7a:1b:0f:27:2d:e4:f4:68:1b:8e:12:0d:80:f5:42:64:
b1:1f:30:a7:55:b4:9a:57:32:df:dd:4c:48:a3:95:24:8c:6e:
c2:24:74:84:e2:b7:32:9f:7b:0d:56:d4:74:68:85:27:7b:93:
83:c8:2b:b1:c4:5c:c6:87:c8:f7:d4:e8:d6:af:65:4c:1e:22:
95:97:71:42:74:6e:81:aa:2e:93:9f:3d:e3:db:cc:d2:de:cb:
2f:fd:42:02:8c:77:12:97:8b:a0:d4:97:bc:5f:47:12:78:f9:
20:f0:fb:1d:78:dc:cd:5b:84:8d:ba:c9:9f:cf:28:54:91:35:
13:9a:84:ca:bb:a1:53:b2:5d:b6:2c:23:78:85:7d:05:66:3f:
16:8f:6e:19:17:e9:f8:5c:9d:ca:76:d3:56:c0:f4:7a:94:01:
4a:5f:80:71:a7:30:3d:39:b0:58:0f:33:d8:11:a3:e1:5c:3a:
42:7b:96:28:04:74:01:cb:d6:7d:a1:f8:a1:85:57:76:d6:42:
1f:65:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:13 2026 by rpki-client