
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa
File: db6195fd-1939-3b6e-ad36-d0a8359d831e.roa (raw, json)
Hash identifier: OtF0tG+goPsz/T8mkoUIT9NmuPgPT+A6k6A957YikkQ=
Subject key identifier: 22:95:5D:11:75:DC:17:39:2B:74:10:62:A8:D3:04:A9:00:73:31:3E
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DEDE09E9F7CDA485A95677A80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa
Signing time: Sat 23 May 2026 13:00:31 +0000
ROA not before: Sat 23 May 2026 13:00:31 +0000
ROA not after: Fri 21 Aug 2026 13:00:31 +0000
asID: 203
IP address blocks: 192.25.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 10 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ed:e0:9e:9f:7c:da:48:5a:95:67:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: May 23 13:00:31 2026 GMT
Not After : Aug 21 13:00:31 2026 GMT
Subject: CN=8dfa914a-1b4c-4a29-9d57-5e5f2a229fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:01:81:46:5d:88:86:eb:8a:d7:04:9f:3d:
b6:ba:70:16:bb:16:6d:6f:f0:64:12:45:aa:6e:02:
90:12:03:d2:4a:8e:24:9e:21:17:d1:ab:91:75:53:
4f:92:a4:52:d5:45:cd:d1:6f:81:92:f4:41:9d:d7:
f7:a6:6e:97:4b:ca:97:28:a1:1b:14:e1:03:a5:42:
6b:a0:6c:5b:dd:3c:0d:49:2a:b6:5c:76:e5:84:2d:
4f:6b:bd:f3:f1:2f:a9:73:5d:c9:a6:82:36:18:1f:
0d:cd:a6:5a:02:06:2b:24:93:c8:10:f2:e4:40:be:
93:7e:db:c9:4d:ac:0a:bf:38:20:75:e2:af:73:c8:
27:47:f6:f0:41:8b:d2:00:c5:e3:1b:36:a4:1e:70:
7e:f9:c8:84:27:ad:b9:32:67:57:8e:f5:f9:12:a5:
cb:dd:54:32:82:2f:96:00:3b:8c:da:8a:6c:bd:a9:
1b:30:3d:14:c4:dc:cb:fc:b0:a7:31:42:99:61:84:
2f:a2:21:7d:52:41:85:96:c2:33:32:c8:b8:55:73:
2c:25:5a:74:a1:4b:5f:48:dd:02:3a:e1:e3:f5:24:
6b:26:27:14:cb:23:b0:f2:38:38:b2:97:37:43:f3:
96:36:67:11:2f:7b:43:78:2f:98:13:d3:6f:a9:30:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:95:5D:11:75:DC:17:39:2B:74:10:62:A8:D3:04:A9:00:73:31:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
192.25.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:8f:0d:c0:fa:ce:ac:98:ba:f2:0d:b1:bf:2f:0e:49:17:25:
84:d4:4d:34:05:af:61:33:2a:31:51:7f:cf:f6:30:79:2e:65:
ee:43:f8:fd:17:d1:4d:22:58:56:96:4f:42:a6:f4:11:cf:74:
da:29:5c:d8:a6:93:dc:a4:7e:58:47:3b:a8:f0:91:7b:72:47:
f6:8c:91:6b:cc:bd:83:12:a4:e2:be:0a:d1:5a:be:03:f9:fa:
83:85:74:09:d7:9a:47:fe:35:9d:b4:0b:be:32:52:17:d7:1f:
ca:14:a6:9b:62:f1:a9:9d:a0:97:65:53:47:3e:22:f3:79:73:
8d:e5:db:c6:7d:9b:8f:09:85:6d:2a:9f:ab:66:55:91:a9:cb:
fc:34:bd:55:17:a8:cc:0a:1c:e5:6c:d8:9c:63:ac:52:b1:de:
13:66:15:ae:4a:23:ef:f6:f0:89:cc:9e:2b:fd:fe:83:cc:ba:
68:d5:5c:6b:fb:d0:23:ae:7c:d7:77:f5:c5:cc:4d:ec:16:dc:
48:02:4f:8a:d4:96:77:5a:2f:c4:73:6a:03:55:fc:05:ab:48:
cc:7a:e5:35:01:2f:35:f4:9d:ca:7f:41:7e:b7:c1:eb:45:3c:
d9:63:4f:a9:30:53:58:dd:4b:f9:8e:42:f7:19:9d:3c:50:8b:
c3:ce:03:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 17:57:26 2026 by rpki-client