
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0353e6-2501-4ae5-a891-413569da72c9/19aaa215-0a31-3061-a486-9055bb20be5c.roa
File: 19aaa215-0a31-3061-a486-9055bb20be5c.roa (raw, json)
Hash identifier: r7QHz+8WfsVBIgMKyyLySAHBoFu+4AfUf6RMABaKI+c=
Subject key identifier: 9A:17:E9:21:FE:D4:D0:62:EA:4E:DE:B1:D1:71:1F:45:A1:3A:7F:23
Certificate issuer: /CN=1b0353e6-2501-4ae5-a891-413569da72c9
Certificate serial: 010D0C9F4328584D5CB4F83C20A03D6D048B8A00
Authority key identifier: 9A:BB:C9:92:4F:6B:3E:53:F2:AF:5D:80:2C:CD:77:26:DE:C0:75:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0353e6-2501-4ae5-a891-413569da72c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0353e6-2501-4ae5-a891-413569da72c9/19aaa215-0a31-3061-a486-9055bb20be5c.roa
Signing time: Wed 01 Apr 2026 13:00:30 +0000
ROA not before: Wed 01 Apr 2026 13:00:30 +0000
ROA not after: Tue 30 Jun 2026 13:00:30 +0000
asID: 33426
IP address blocks: 198.186.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0353e6-2501-4ae5-a891-413569da72c9/1b0353e6-2501-4ae5-a891-413569da72c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0353e6-2501-4ae5-a891-413569da72c9/1b0353e6-2501-4ae5-a891-413569da72c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0353e6-2501-4ae5-a891-413569da72c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5c:b4:f8:3c:20:a0:3d:6d:04:8b:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0353e6-2501-4ae5-a891-413569da72c9
Validity
Not Before: Apr 1 13:00:30 2026 GMT
Not After : Jun 30 13:00:30 2026 GMT
Subject: CN=42233f99-9316-40f1-a3ea-4ab8f91f995b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:52:8d:e7:3a:69:08:04:58:99:af:82:98:
01:cc:2a:f3:85:3d:ae:af:7e:48:f4:2c:d6:3b:e3:
ff:67:89:98:ec:12:60:53:25:18:36:66:e2:e0:c1:
4b:4b:ca:95:07:f9:52:8c:a8:a0:90:ab:4c:1d:64:
35:ad:7b:1d:1a:c3:4a:99:43:34:c1:79:42:b2:c5:
f9:42:89:b3:1d:42:2f:f1:d4:fa:19:fb:80:67:cf:
8f:0a:1f:54:fe:67:b5:d5:d3:e0:77:f0:58:e1:f9:
8f:ea:4d:5b:c9:01:9d:e4:1e:da:10:61:b4:bd:18:
56:8b:4f:67:d6:a5:3e:6c:59:24:09:e9:78:90:26:
b9:07:78:98:3c:e2:f2:42:79:0a:72:ea:66:60:f5:
f7:01:fe:09:db:e1:0e:8b:95:6f:a4:3a:cc:0a:cc:
7a:60:88:2d:c8:94:0f:08:9b:cc:3a:89:f1:68:33:
1f:43:4b:11:2f:3e:dd:d4:f1:fe:b4:95:48:1f:26:
14:1c:4c:3e:36:48:1c:b6:4a:ec:91:dd:4c:63:88:
ab:7b:38:f9:3e:6a:f6:2a:02:53:36:84:62:a2:4e:
22:8d:cf:e1:05:99:a1:e3:af:d0:6b:c6:c1:e5:92:
c6:10:b1:c8:9c:91:28:8e:b4:f0:d1:7a:cc:09:20:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:17:E9:21:FE:D4:D0:62:EA:4E:DE:B1:D1:71:1F:45:A1:3A:7F:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0353e6-2501-4ae5-a891-413569da72c9/19aaa215-0a31-3061-a486-9055bb20be5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0353e6-2501-4ae5-a891-413569da72c9/1b0353e6-2501-4ae5-a891-413569da72c9.crl
X509v3 Authority Key Identifier:
keyid:9A:BB:C9:92:4F:6B:3E:53:F2:AF:5D:80:2C:CD:77:26:DE:C0:75:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0353e6-2501-4ae5-a891-413569da72c9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.186.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:04:e3:08:e7:4b:34:23:ac:f6:8f:a4:94:42:5c:92:54:d1:
16:65:4f:6c:55:72:24:f4:38:cf:c7:6e:28:36:37:4f:08:12:
78:b8:53:ad:8f:3a:49:06:bf:eb:78:66:68:f7:74:ff:45:38:
9a:26:19:18:93:6c:fa:1c:c1:a7:15:73:b0:cb:f6:66:8b:18:
8a:60:ac:ac:d1:80:b8:d3:8f:a7:2a:fa:c9:06:13:45:32:8f:
0c:0e:70:cd:13:4e:62:81:ef:c3:ce:94:fa:5f:54:ae:93:8c:
d4:46:b2:cc:d4:a5:43:f3:b3:6e:1a:ca:22:a0:c2:7b:e2:11:
f4:51:ff:ee:c4:60:57:0b:c6:f4:a8:64:ee:15:ff:af:08:c1:
6f:4e:4a:10:ad:cd:80:02:43:16:8f:0f:23:42:33:e7:9f:1b:
8b:62:ad:34:47:6e:35:d7:6c:9b:5e:be:3e:32:66:d0:94:00:
8b:f1:86:25:08:c6:65:80:86:29:34:35:49:af:79:e0:36:3b:
78:c8:b2:27:7a:98:7a:bb:55:9f:fd:ff:9e:e9:4b:10:99:45:
57:aa:0f:fa:a1:be:c4:3b:f7:19:da:53:ee:56:17:e6:5e:f7:
7e:35:fc:69:2c:28:6e:ac:7d:60:95:eb:59:96:cd:86:7b:64:
04:3c:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:11:58 2026 by rpki-client