
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa
File: 0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa (raw, json)
Hash identifier: oqWN776ObTeJQlv3lQ2634aggisdsoGb6EYRdmscF0E=
Subject key identifier: FD:E9:CD:F8:13:19:FB:AC:17:B5:1F:9F:4D:25:AC:4C:05:62:AD:F5
Certificate issuer: /CN=afb3511b-f1b6-44ad-9c36-f6576a5400df
Certificate serial: 010D0C9F4328584D237A687E28567B9582D0DE80
Authority key identifier: 9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 395839
IP address blocks: 199.5.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 18 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:68:7e:28:56:7b:95:82:d0:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb3511b-f1b6-44ad-9c36-f6576a5400df
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=a65d1405-fc2d-47e7-87a8-f60a9f60b834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:ac:51:75:73:8b:e2:3b:29:0c:d9:88:10:
97:e6:41:4e:57:60:1b:14:fa:61:e3:15:9b:27:fa:
36:79:d9:95:3f:2c:52:1f:43:db:27:ff:b6:4f:3c:
17:8a:b2:03:a7:c3:18:56:d6:a0:41:ed:94:58:9a:
9f:74:3e:65:2d:a5:9f:8e:27:e6:63:12:fd:2a:7d:
47:cf:2b:fa:ee:68:de:27:a3:c1:be:31:f0:cc:92:
07:e2:df:46:5b:d6:e1:66:8d:1d:da:8b:68:d4:2e:
74:b6:d5:da:b1:e1:3b:af:df:c0:99:00:d5:23:4b:
87:cc:7e:4f:d4:21:b7:e7:d8:f8:d9:bb:2c:e8:cb:
d5:46:d5:ba:c1:79:66:29:a0:11:21:14:d1:cf:e1:
65:2d:75:6d:1a:d5:6f:c4:b8:85:b5:bb:8c:fd:41:
62:58:65:a5:7a:ad:f6:e9:8a:0d:42:37:84:81:d7:
8a:b2:7b:13:4a:38:2f:38:4e:b2:e4:35:0e:49:73:
a2:35:5f:37:e8:db:35:65:c1:e0:1f:53:2a:5b:2b:
e0:5f:f2:ff:5c:f9:a8:a4:28:5b:f9:8f:29:85:26:
83:7c:7a:bf:91:a9:d8:6f:18:1b:c1:2e:c9:cd:10:
b5:92:68:09:8c:03:51:ba:6c:b8:39:87:6a:ab:55:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:CD:F8:13:19:FB:AC:17:B5:1F:9F:4D:25:AC:4C:05:62:AD:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl
X509v3 Authority Key Identifier:
keyid:9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer
sbgp-ipAddrBlock: critical
IPv4:
199.5.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:50:2b:d2:ae:80:e5:76:2b:e0:7f:f1:85:69:26:65:b0:06:
1b:d4:f6:1b:fe:c9:57:03:7b:3e:ce:e9:63:1c:20:a2:c1:f7:
05:e6:30:e6:40:3c:55:ce:3d:83:7d:46:b3:e5:08:f5:82:4f:
ee:30:2d:58:52:77:e7:f5:e0:ac:70:0d:85:75:ec:dc:50:c3:
cd:a1:c0:03:43:13:82:f4:7f:d7:9b:e0:04:80:fb:7a:fc:0c:
1e:6d:d4:5f:89:94:d5:5c:f5:f6:fe:f9:32:ab:68:9b:eb:0b:
08:fe:a0:55:01:c4:92:8e:52:54:55:93:31:c2:61:71:9c:a4:
7c:f6:95:c9:d1:70:f7:44:08:52:31:4e:5d:b7:31:39:01:be:
c1:6c:2c:c5:b7:19:14:ee:52:9e:57:ac:87:99:81:15:35:29:
ab:c0:e6:59:81:cc:94:52:ae:95:57:1d:b9:35:fc:56:e9:52:
51:37:92:5e:89:63:68:86:e0:22:f7:c3:bf:b3:e7:47:f0:aa:
b4:a2:7e:61:85:dc:2e:51:d7:7c:82:f7:40:54:ff:41:99:6c:
96:94:9c:78:3e:91:93:f6:b2:49:cb:f5:e4:6e:28:13:cc:0f:
df:a6:52:64:5b:1d:f7:0a:b9:f8:48:97:a2:2e:71:e2:e2:1c:
48:d4:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 01:42:48 2026 by rpki-client