
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa
File: bc90a123-68b1-322a-9457-bc94097ef1ea.roa (raw, json)
Hash identifier: sO1JOEAbRDBy8gctbyHBqfl4pUCqs7QbQbwzO91scd0=
Subject key identifier: 4B:6C:F8:2E:E9:CB:03:DC:D5:AD:4A:C5:8B:5F:07:2E:82:AF:BD:07
Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial: 010D0C9F4328584D6BD9A3FB63EA9E1017381C80
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa
Signing time: Mon 06 Apr 2026 23:11:35 +0000
ROA not before: Mon 06 Apr 2026 23:11:35 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 14618
IP address blocks: 198.29.16.0/22 maxlen: 24
198.29.22.0/24 maxlen: 24
198.29.23.0/24 maxlen: 24
198.29.24.0/24 maxlen: 24
198.29.25.0/24 maxlen: 24
198.29.26.0/24 maxlen: 24
2602:f9e7:20::/45 maxlen: 48
2602:f9e7:28::/46 maxlen: 48
2602:f9e7:2c::/46 maxlen: 48
2602:f9e7:40::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6b:d9:a3:fb:63:ea:9e:10:17:38:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Validity
Not Before: Apr 6 23:11:35 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=baf34fae-10c0-4b33-9290-197ab0f9697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:82:29:1a:de:ed:e2:71:cc:83:ed:29:27:
ba:88:38:fd:e4:4d:80:80:15:24:fd:81:95:1d:d2:
bf:b3:04:e3:93:24:98:ac:56:e5:a6:ae:1a:42:ef:
0c:cc:2b:c3:41:d0:88:a9:9f:a3:d7:a4:57:f7:a4:
a3:3c:cf:50:19:c2:09:a0:e3:b5:c1:cc:01:ce:d5:
53:18:ac:4e:1c:79:f6:40:93:03:db:60:94:c9:2e:
8a:87:aa:c5:a8:7a:62:2f:cc:7d:ae:b4:68:9b:a0:
e0:e3:ac:11:d2:fd:1a:f3:00:3b:35:3f:0b:94:cf:
85:f0:20:2d:38:b6:21:d8:fa:07:e8:1f:11:4a:2c:
ad:e3:f5:24:f5:58:01:09:b9:b9:69:56:f1:a6:1a:
bb:79:12:9d:fe:a6:67:0f:51:b1:a7:cd:dc:28:15:
7b:7a:0f:b2:7a:ea:72:b2:64:dd:0c:f1:c2:4c:48:
6e:21:75:ee:86:db:ab:72:3b:20:1a:6e:4a:41:1c:
78:9c:09:df:07:72:24:59:72:98:9e:9a:05:51:85:
df:86:bc:90:fb:bf:69:03:0e:4c:21:65:67:f7:f7:
8c:f5:28:25:d9:3d:58:c7:03:46:67:1c:8f:ed:19:
ac:e1:0b:ea:32:e6:18:9e:f2:3b:9d:9c:b9:17:5f:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6C:F8:2E:E9:CB:03:DC:D5:AD:4A:C5:8B:5F:07:2E:82:AF:BD:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
X509v3 Authority Key Identifier:
keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.29.16.0/22
198.29.22.0-198.29.26.255
IPv6:
2602:f9e7:20::/44
2602:f9e7:40::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ae:e5:79:a8:07:fa:58:29:76:74:51:60:22:da:47:a0:fb:
50:ba:e4:a2:a8:5a:14:a1:f1:7f:79:85:48:d5:3d:ca:45:a4:
3b:81:a9:6c:9e:8d:ae:0b:c4:83:c8:cf:05:e7:98:2b:4b:bb:
a3:8e:b0:d9:b4:b6:a0:3c:4e:3e:42:f3:f4:0b:d8:b1:c8:1b:
2e:be:68:85:5b:97:9a:58:7d:a4:91:0e:56:1b:3d:ba:2c:6d:
62:59:db:b3:10:e7:3e:cf:e7:5e:a5:a4:55:85:c5:a2:96:eb:
9e:ca:7d:b9:93:c5:be:7a:0d:c1:c7:c7:0f:e1:80:00:90:73:
f6:52:89:9a:57:12:fb:04:8e:9b:d4:79:1f:73:b6:ca:f0:0c:
12:dd:e5:46:ef:b6:bc:69:c6:3b:f4:fc:1e:29:26:b1:eb:09:
da:24:6d:6f:e2:ac:af:79:11:90:b2:70:fe:d5:d0:a9:fb:72:
c2:c6:55:b3:6f:95:34:05:fc:ef:ff:49:ea:72:5c:75:e4:f7:
55:a6:11:77:3d:18:65:80:19:d5:f4:27:62:82:ec:3d:7e:a3:
d3:a5:8a:b1:58:72:bb:13:e0:67:a4:6f:0e:26:d5:c7:d5:74:
9c:89:70:51:52:77:3a:2c:b3:f6:a3:0d:d3:3a:d8:53:7a:2e:
7a:36:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:36:07 2026 by rpki-client