
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2dcaddd7-5406-3583-af09-5bb2496ce200.roa
File: 2dcaddd7-5406-3583-af09-5bb2496ce200.roa (raw, json)
Hash identifier: s5LVjZWwj8x+NCG3UMxO6nP5RYA+yTysKiObYx6iZd4=
Subject key identifier: 13:E2:C5:22:16:7B:BE:14:0D:A5:18:39:77:61:AB:C1:4A:2B:D9:B9
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F4328584EB2B1BC2B569708147332FB00
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2dcaddd7-5406-3583-af09-5bb2496ce200.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 2559
IP address blocks: 198.241.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:bc:2b:56:97:08:14:73:32:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=c2a9204d-e452-4595-a455-72a82d50bf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:c4:8a:01:fe:fe:1b:0f:8f:e6:35:a0:6e:
31:81:62:a0:40:bb:4a:6f:09:cf:84:18:ca:49:a8:
35:9f:a5:bb:f1:91:c9:dd:b1:3e:37:57:ca:69:6c:
d7:8d:92:b9:b5:3a:c9:9c:ae:63:a7:ea:12:82:9a:
78:dd:d7:33:9a:f0:0c:59:b4:13:45:82:33:67:f8:
04:6e:3d:d9:72:58:1b:50:b4:a9:02:7f:58:18:df:
26:00:31:da:00:29:94:4e:c8:e9:ad:0b:d1:44:78:
68:64:81:55:aa:1e:60:b1:c7:ac:15:13:c3:65:c0:
a7:17:75:d7:3c:89:8b:18:62:73:f3:b0:27:55:76:
6e:de:b8:0a:e4:ae:1b:1b:cf:c4:4b:b5:d9:13:78:
07:f5:94:8a:6f:53:48:a7:62:f4:16:39:3a:57:00:
1b:d4:99:23:f0:99:45:c0:82:9b:af:31:21:4f:4b:
fa:0f:b2:d1:f6:2b:00:00:69:34:67:2d:b4:3b:0f:
bd:71:17:e7:e6:5b:40:09:e5:48:d8:47:a8:46:2c:
0b:c8:d8:b1:fd:14:51:cd:4d:f9:a1:64:ec:1d:e9:
66:d0:59:6e:86:53:bc:2e:bc:9f:87:af:b2:62:ef:
04:8e:59:a8:38:10:d0:84:ed:0c:b4:cb:05:7d:ec:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E2:C5:22:16:7B:BE:14:0D:A5:18:39:77:61:AB:C1:4A:2B:D9:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2dcaddd7-5406-3583-af09-5bb2496ce200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:d6:a5:ea:8d:e0:4d:06:4e:83:ef:47:23:48:da:fe:66:ae:
5e:6d:a3:2e:89:b9:3c:b8:d5:45:58:33:c0:ab:83:02:fb:97:
ac:5e:49:a8:81:b7:95:fe:9e:91:0b:f4:f5:8e:7f:2b:fe:75:
b6:5a:2e:02:d9:2f:35:45:7f:5a:ac:ed:a8:87:99:e2:5f:2a:
41:fd:e9:7d:bb:37:b9:7a:9b:79:7f:92:7a:31:51:de:dc:22:
9a:b3:f6:4a:3f:79:46:61:7f:39:32:f4:05:91:27:1b:60:38:
27:1c:26:6c:a1:d6:56:e9:75:02:7d:c6:36:26:a1:0f:07:51:
c9:2a:b7:19:5c:bb:25:56:a2:0e:55:98:96:f0:35:da:14:db:
af:5e:24:4c:72:dd:3b:99:ab:ed:b1:bd:5a:73:be:85:6d:16:
98:b7:be:48:84:f6:00:b8:66:47:24:2a:0f:32:0b:bf:78:6e:
20:49:78:97:3e:52:5d:2f:8e:40:f8:e6:cc:c6:af:37:df:c2:
98:e0:f4:78:f0:ed:0f:37:7e:8e:36:9f:12:19:fe:46:36:fa:
a8:17:c2:f6:f7:d1:b2:30:5a:d2:da:ee:5b:b0:93:69:d9:a8:
83:ca:87:7f:9d:94:2a:be:27:fb:2e:cf:e2:00:d8:8f:46:29:
d0:34:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:12 2026 by rpki-client