
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/b233c099-01b4-3727-a701-02cd60f48355.roa
File: b233c099-01b4-3727-a701-02cd60f48355.roa (raw, json)
Hash identifier: 6LDbUJV6ZdvNdTfhaXyKB+QofV7j6+xO9mEQk7V3Vg0=
Subject key identifier: CD:6B:B0:0F:FA:A9:33:EA:3E:13:02:4D:36:96:99:72:78:8C:41:55
Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial: 010D0C9F4328584CFDEAA8DE9DE67AB67373BC00
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/b233c099-01b4-3727-a701-02cd60f48355.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 64199
IP address blocks: 198.178.119.240/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:ea:a8:de:9d:e6:7a:b6:73:73:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=c0fe36ff-7aeb-4266-b451-13330eb30ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:63:31:9a:22:33:f0:ed:51:ae:d4:29:c9:
42:3b:43:8c:3d:7b:ca:1a:cc:18:87:d3:8b:59:23:
46:02:4f:84:65:71:39:60:b2:7a:79:7a:e9:13:62:
95:80:de:c4:7b:c6:20:a2:65:a2:06:1e:a8:c5:00:
29:8e:f5:53:8c:57:c2:c4:8e:11:41:c3:c2:0a:fc:
ae:bc:b0:d9:cb:99:81:2d:d5:41:d0:71:2b:2b:00:
58:3d:1a:8a:20:af:1b:c1:24:dc:fe:26:62:0f:14:
ad:6e:be:4c:22:37:2e:cc:84:02:98:81:09:b3:50:
87:22:23:b3:ed:69:8e:fe:6a:c9:c2:2a:be:60:f2:
8a:d1:8c:14:1f:35:ed:9a:d2:67:d6:4e:52:0c:2e:
12:c3:bc:ca:e1:ec:3d:5a:c0:3e:ef:d6:e7:f4:7a:
7b:ec:27:9a:b8:13:c4:e9:3d:92:26:ee:4d:0c:7e:
bd:7b:d4:4a:23:2f:0b:ff:d5:bf:23:b9:25:50:b5:
1a:82:f3:be:40:ea:82:73:3e:2c:66:77:c3:b9:9b:
d1:f6:54:be:62:40:d9:dc:96:9b:57:e9:9a:c8:67:
2b:50:6d:8d:53:0a:b7:14:fb:c4:e7:c4:ba:96:18:
0b:96:04:dd:42:0e:4d:25:ae:b5:df:75:2e:78:24:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6B:B0:0F:FA:A9:33:EA:3E:13:02:4D:36:96:99:72:78:8C:41:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/b233c099-01b4-3727-a701-02cd60f48355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
X509v3 Authority Key Identifier:
keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.178.119.240/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:3d:6a:ca:92:00:58:10:07:73:40:8b:a2:23:11:d5:d0:06:
84:84:b9:eb:10:5e:e1:9f:68:bd:84:4a:32:ac:04:db:b2:74:
b1:8f:82:27:7a:45:52:6f:97:40:d3:89:40:e4:50:b3:e1:7a:
ed:a4:9f:67:02:05:51:5a:6e:1f:38:b5:4a:e7:ac:2b:56:12:
c1:27:e8:bb:7d:38:f0:b5:f5:11:66:42:d6:f7:d5:1b:e4:fb:
d1:09:32:de:7d:3c:82:fc:66:3f:d0:a3:62:2b:3c:24:e3:5a:
cf:10:63:a9:a0:22:ff:b0:7c:87:d2:a4:c7:7e:7e:3b:33:d8:
ad:55:0a:e9:bf:f5:60:76:31:2a:a6:24:be:c3:14:e1:0b:b3:
88:54:ad:a9:7f:7b:d3:e7:e8:ed:5a:5f:df:ff:7a:53:c8:6d:
be:ac:cc:65:60:7c:1e:9f:0d:eb:76:60:32:60:ff:df:78:62:
81:03:fd:63:75:e1:52:df:63:cb:7f:ca:11:bd:13:6c:aa:7d:
cc:c8:a5:bb:ff:c2:92:ec:47:1f:b1:15:29:62:c0:ff:86:a0:
3f:8a:49:15:0d:c0:71:0b:70:80:ca:58:f5:df:63:ad:19:b1:
8e:1e:d8:47:4b:76:3b:b1:bd:c9:cf:a7:0a:68:39:3d:4d:9c:
49:93:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:50 2026 by rpki-client