
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/ebdc78d2-5f2b-3c4b-b688-64b8b5d72399.roa
File: ebdc78d2-5f2b-3c4b-b688-64b8b5d72399.roa (raw, json)
Hash identifier: MGZaB1cN6sJgbmlkTC+2LtflyNzYF4zJqoLu5cMhrr0=
Subject key identifier: 71:74:6F:72:8E:85:29:D1:EA:14:94:A3:07:93:55:37:9B:AC:8A:26
Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial: 010D0C9F4328584E3E5F36B5361249B03C903000
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/ebdc78d2-5f2b-3c4b-b688-64b8b5d72399.roa
Signing time: Sun 21 Jun 2026 09:00:12 +0000
ROA not before: Sun 21 Jun 2026 09:00:12 +0000
ROA not after: Sat 19 Sep 2026 09:00:12 +0000
asID: 200069
IP address blocks: 143.55.236.0/22 maxlen: 24
198.244.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3e:5f:36:b5:36:12:49:b0:3c:90:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
Validity
Not Before: Jun 21 09:00:12 2026 GMT
Not After : Sep 19 09:00:12 2026 GMT
Subject: CN=d5337e95-f711-4ca1-8e52-e5697d63f355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:94:99:26:f1:f7:13:3e:12:c6:f0:97:9e:dd:
25:63:2c:63:83:ab:6d:ce:7b:3a:7e:f3:7b:7f:f3:
49:14:7d:42:df:49:5a:1e:ca:c2:e1:d3:a5:77:ce:
5e:62:30:b8:85:c5:0b:d3:54:1f:43:25:2f:39:98:
9a:b7:df:24:68:ad:51:a5:fe:6d:29:03:d0:e7:37:
69:88:31:ad:fa:b3:e3:27:00:0d:e7:47:a7:c9:47:
87:72:ee:42:f0:f1:b4:1b:df:33:50:c6:7a:87:2e:
92:00:09:88:a1:d2:af:53:32:61:78:c2:ab:d2:94:
51:f2:bf:c6:24:21:0f:ae:e6:65:02:ba:8b:9d:4a:
6f:e4:f6:3f:f7:e2:c9:a8:de:97:c3:f5:77:3e:63:
b5:ff:28:f4:7f:02:90:3c:d2:93:a3:50:69:ba:90:
ae:bb:49:87:6f:a0:5d:11:90:e4:1a:3b:51:1f:d7:
d6:d9:ac:75:6c:18:78:4e:ff:30:2c:50:f0:81:08:
ff:a1:3f:c9:83:c4:79:76:bf:e0:81:12:18:e0:85:
48:a6:a3:b7:63:c3:34:92:0a:e1:b8:9d:07:03:33:
a6:24:7a:75:89:ca:3b:b5:dc:25:15:fc:27:8b:c1:
f4:ee:74:f1:1e:c9:cc:63:7b:2e:db:ec:53:b5:5e:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:74:6F:72:8E:85:29:D1:EA:14:94:A3:07:93:55:37:9B:AC:8A:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/ebdc78d2-5f2b-3c4b-b688-64b8b5d72399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
X509v3 Authority Key Identifier:
keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
sbgp-ipAddrBlock: critical
IPv4:
143.55.236.0/22
198.244.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:2e:a1:bb:96:f6:b1:29:c8:9d:34:bf:b4:8f:22:08:7a:d4:
e8:fb:4c:03:dc:22:46:ab:51:03:d3:91:b5:5d:94:6b:2c:70:
9f:b8:14:b3:cb:71:13:84:21:aa:1d:2d:59:95:b0:29:e9:06:
f0:fb:fc:57:a3:e2:64:28:17:d2:47:4f:bd:ba:4c:f9:de:8d:
a3:bb:db:39:e1:d8:f0:b3:d1:29:b4:72:9c:42:4f:b9:df:49:
8d:8b:ed:f3:5a:e1:fe:41:77:76:a5:67:52:68:24:8b:ca:a6:
d7:b1:f5:42:88:4a:e2:5c:cf:b8:1d:aa:07:6b:6f:08:16:10:
7c:26:62:fd:3e:62:bd:08:6e:51:ef:b0:7c:cc:d2:e0:4a:19:
f8:4a:43:ba:ec:47:5d:43:1c:18:3b:1d:d2:1c:2e:91:41:7a:
0e:90:2d:f1:15:41:b0:a3:7e:22:27:b2:00:9b:81:f1:21:6b:
19:cf:8c:4a:bf:7f:37:89:35:98:ab:67:e4:9d:0a:07:ba:38:
28:c7:8c:79:8b:ee:d7:c0:f8:12:ad:f9:5a:41:b0:ff:ce:9d:
f5:ef:02:a8:57:96:f6:5c:d4:ce:e8:3b:6d:00:8c:bd:07:a0:
73:11:15:cf:72:30:f7:9f:1f:e3:22:89:2d:b4:3d:99:ab:f4:
8e:05:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 20:05:56 2026 by rpki-client