
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa
File: 9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa (raw, json)
Hash identifier: tDGrBHgg/SWLtJdneJTTBPIh2hMloQlTOFrWe5ohQFY=
Subject key identifier: 91:13:05:EC:B6:FC:47:76:D2:F3:A1:DC:45:32:77:F3:9F:30:21:AD
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CBDB21014A491B0F74C30DCC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 31898
IP address blocks: 192.33.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b2:10:14:a4:91:b0:f7:4c:30:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=8a82f0c5-50f2-4f55-a5b5-97887f427642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:e2:af:58:cc:25:64:3b:2a:ed:98:b0:54:
13:75:8f:86:ef:11:be:55:d3:bd:9d:b0:43:6a:44:
1f:ef:7b:cc:d3:a1:b2:c2:43:fb:95:3b:7b:00:b5:
e4:bc:6f:79:df:b3:e4:36:b7:e6:f0:e1:c1:97:2e:
cb:0d:2b:64:67:3c:47:34:5b:63:7b:ed:9a:17:7a:
e1:85:d9:40:e7:ff:fb:62:8e:dc:66:bd:4a:e1:62:
fd:e8:ef:5c:bf:e5:3a:f6:11:e7:58:10:66:04:30:
eb:27:be:85:e1:9a:89:0b:e2:6b:2b:51:63:21:96:
84:ec:8d:2d:08:91:cd:f0:ca:bf:24:2b:09:22:d5:
0b:19:d3:43:97:eb:df:e5:47:39:db:f6:d0:c8:30:
84:ce:0d:fd:64:0a:f1:06:e5:d8:42:3e:9c:15:13:
35:c5:c1:01:ba:d5:ee:57:ce:9b:67:9f:b9:ba:c9:
f6:3c:59:df:3c:90:a3:52:2b:5a:a4:3d:47:71:fd:
b2:2f:c0:35:b4:f2:8a:97:be:f3:06:df:e1:0e:12:
eb:ac:52:61:38:2c:d7:3b:a0:dd:53:a2:68:45:a7:
cc:9c:5e:a6:6d:c3:9b:e0:be:0e:d7:25:85:57:13:
4d:46:a5:0d:c4:df:23:cf:59:2f:ea:b1:ec:10:5e:
38:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:13:05:EC:B6:FC:47:76:D2:F3:A1:DC:45:32:77:F3:9F:30:21:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:0f:aa:c7:c0:16:1d:97:42:0e:ed:5c:27:c2:99:cc:df:a9:
c3:77:51:54:6b:54:49:38:63:10:7b:e5:8b:1d:e7:ba:c3:99:
86:0e:3a:87:5c:76:19:38:27:e7:ef:e9:1f:85:4d:8d:df:d4:
04:ec:26:84:7e:2f:c4:02:87:5d:2d:0a:d6:86:73:f8:25:20:
a4:52:fd:84:ce:db:5b:99:03:7c:4f:11:9a:71:b9:76:a8:f4:
0d:9d:1a:7a:90:40:c5:23:96:2c:f4:3d:e3:09:60:11:9d:bc:
e5:dd:35:cd:14:62:eb:f1:2d:39:80:59:72:ab:28:8a:43:bf:
b6:1c:2e:4d:9a:6b:f0:0a:dd:5e:f6:8c:c7:cf:78:32:e0:8f:
a9:6f:9b:a0:28:53:6e:85:f3:88:e0:32:2b:80:de:de:38:86:
88:9f:02:9c:da:c7:6f:8e:88:f0:29:30:cf:4b:2d:bc:33:b4:
13:b1:b7:e7:86:79:10:1c:7f:f5:3a:f4:fd:ce:62:c1:ea:00:
2c:f8:fd:75:dc:79:fa:32:6d:34:00:c4:8c:38:18:93:a7:39:
30:75:54:fb:e7:c5:79:73:93:40:7d:c9:af:4b:55:4b:08:b2:
ef:ec:8f:a4:cb:34:65:8d:c4:8f:bc:4d:f9:0f:c6:fd:b5:91:
fd:76:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:31 2026 by rpki-client