
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/b59fea86-933e-3dc8-ba62-a29d68c06448.roa
File: b59fea86-933e-3dc8-ba62-a29d68c06448.roa (raw, json)
Hash identifier: kkdPriqo27VvZNPsnmqEO7D+Vny0Avp7U2xfKjut1iU=
Subject key identifier: 0F:BA:A5:B3:99:D4:F2:43:96:81:62:88:80:9B:04:C7:D1:15:7E:92
Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial: 010D0C9F4328584D895FEBF9833C4E9878DEB880
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/b59fea86-933e-3dc8-ba62-a29d68c06448.roa
Signing time: Fri 17 Apr 2026 13:00:31 +0000
ROA not before: Fri 17 Apr 2026 13:00:31 +0000
ROA not after: Thu 16 Jul 2026 13:00:31 +0000
asID: 834
IP address blocks: 199.7.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:89:5f:eb:f9:83:3c:4e:98:78:de:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Validity
Not Before: Apr 17 13:00:31 2026 GMT
Not After : Jul 16 13:00:31 2026 GMT
Subject: CN=ca15b197-726b-4908-afa3-5aa30919ef29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:d2:84:66:67:55:41:aa:07:3f:7e:2e:6f:
4a:95:5e:f8:57:44:8b:48:72:10:1f:a0:3c:51:49:
26:16:10:72:bb:37:ab:7b:79:ab:72:1b:8c:06:37:
72:8b:f2:31:d8:96:f1:99:6b:81:55:86:da:5b:ee:
8c:3c:be:8c:c0:bf:30:88:95:4d:55:96:4a:b7:6e:
72:fa:cb:42:b5:05:94:a2:ce:fa:d1:31:63:02:97:
8b:82:31:1f:0c:c1:d1:b8:ae:f2:a5:19:8f:d0:e1:
21:61:eb:a6:e2:54:99:17:c9:12:9f:84:c2:1a:34:
32:82:a1:a0:0d:7c:82:3d:32:ee:5c:82:d1:b0:82:
1a:a4:16:cc:4d:65:c9:a4:8b:47:65:f0:ce:df:ee:
05:d1:a0:97:73:3b:72:e5:75:38:77:2c:b8:ca:17:
ec:85:8e:69:da:e9:cd:ca:5f:96:f0:9e:08:e1:26:
aa:ce:0a:98:71:74:e4:35:e0:b5:dd:53:26:ce:ea:
1c:d8:c6:63:ba:98:df:95:e7:f0:c5:d1:ac:f4:dd:
ba:a4:21:c5:f0:2f:44:bd:43:cb:32:b7:8c:b8:ae:
8e:58:91:4c:99:55:8a:72:fa:e5:4a:6b:86:41:f3:
56:1a:3a:07:d9:86:63:7b:73:d8:b1:50:f2:ce:4d:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:A5:B3:99:D4:F2:43:96:81:62:88:80:9B:04:C7:D1:15:7E:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/b59fea86-933e-3dc8-ba62-a29d68c06448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
X509v3 Authority Key Identifier:
keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:a4:0a:64:ff:37:91:26:98:9f:4d:bb:47:2c:64:8e:9a:ed:
c6:84:be:98:2e:0b:46:38:5f:77:f4:48:2b:7c:9d:4c:cc:3f:
10:82:05:81:67:61:b4:3e:8d:02:54:09:66:e0:55:4d:21:ba:
1d:72:05:3f:c9:81:70:e6:fd:de:e9:5a:30:e5:38:49:ed:6c:
05:8a:40:28:14:45:f0:97:1e:18:14:7f:bc:5a:fe:1a:eb:a3:
87:f8:ad:b3:bf:cb:ff:24:ca:e8:c1:5f:a8:1c:22:50:4e:57:
1d:36:3a:b8:c4:e3:e0:a5:f3:b0:86:a5:b6:37:5e:df:a2:45:
28:71:5f:06:d9:f4:ff:a6:7e:49:9f:74:0c:9c:1d:6a:cc:41:
fd:45:0d:0b:bb:90:56:13:d7:4b:47:7d:00:3c:e6:e0:32:8b:
ed:95:4d:14:df:dd:e2:53:f4:d6:82:45:0e:95:4f:da:b2:0a:
6c:2b:98:11:5f:4b:51:2c:b9:b9:72:0f:4d:e7:c3:2e:6f:69:
1b:2d:74:b9:50:64:4d:7a:b2:5f:83:f3:78:2e:d7:06:ea:89:
bc:a8:89:99:22:b4:3a:7a:cc:29:0f:31:7b:07:13:07:96:c5:
47:e0:bb:25:be:a3:7c:07:d4:3d:36:6b:9f:6c:b9:6b:44:81:
7f:08:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:24 2026 by rpki-client