
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1b24694c-8938-37ac-ab90-c586ce5cabd7.roa
File: 1b24694c-8938-37ac-ab90-c586ce5cabd7.roa (raw, json)
Hash identifier: NmRvEIsT8QJUYxNLZu2LXCmBShzHfJ1lZtCHmj6wWO4=
Subject key identifier: 4F:D4:70:62:80:0A:FE:8E:F1:F9:BF:21:4A:BC:07:66:82:0A:9B:BB
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C8046F41CAF6C0586DC2D09C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1b24694c-8938-37ac-ab90-c586ce5cabd7.roa
Signing time: Mon 12 Jan 2026 14:00:40 +0000
ROA not before: Mon 12 Jan 2026 14:00:40 +0000
ROA not after: Sun 12 Apr 2026 13:00:40 +0000
asID: 30036
IP address blocks: 192.119.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:80:46:f4:1c:af:6c:05:86:dc:2d:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 12 14:00:40 2026 GMT
Not After : Apr 12 13:00:40 2026 GMT
Subject: CN=990f6627-6185-4ef9-9e66-80f1f04b8cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:47:59:c9:cd:6d:78:12:bc:59:1d:ce:08:
c2:a3:ff:85:39:c5:d4:c0:8f:80:9b:03:c7:ed:66:
08:db:53:59:99:6a:dc:d5:ed:07:f1:35:6e:3f:bd:
17:a9:66:6b:fd:e8:5b:b4:51:85:dc:30:64:bf:62:
ef:7b:74:a2:80:55:88:d5:9a:d9:c2:50:08:a1:1b:
ae:e2:c9:4f:2e:47:aa:5b:41:c0:d6:22:64:8e:53:
9e:08:31:63:15:fa:51:77:f3:99:ee:5a:a5:1c:08:
bd:6d:e1:06:3e:87:4d:4d:ba:25:70:2b:74:28:d3:
5d:03:4a:9a:55:6a:17:dc:a0:58:45:fe:49:0e:92:
fa:f1:b2:b6:2f:24:b8:e2:db:3c:cd:37:53:e2:8b:
98:88:d4:2a:5a:78:bc:0b:4b:1b:c1:af:d9:af:8a:
ba:64:5c:21:57:3a:e9:9c:c2:31:95:41:49:2f:da:
03:6a:dd:ba:2b:d2:7d:d3:cd:7b:ee:69:55:c2:5d:
6d:55:f8:f0:9c:45:1b:5e:cb:2c:8b:1a:4f:82:bb:
53:59:c6:7c:f0:30:86:84:d2:8a:27:17:64:da:f8:
70:ea:69:ac:59:ac:65:8e:00:a3:93:56:ba:87:eb:
aa:29:bc:49:d5:3f:64:f0:05:2f:cb:45:9d:5f:b8:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D4:70:62:80:0A:FE:8E:F1:F9:BF:21:4A:BC:07:66:82:0A:9B:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1b24694c-8938-37ac-ab90-c586ce5cabd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:3a:7f:2f:e4:5b:b4:e7:91:6f:a0:91:a2:31:af:82:49:8e:
0a:b5:c1:b0:27:3e:e4:5c:44:03:d3:4c:18:d8:18:ca:f4:33:
3c:33:8f:25:bd:49:c4:25:5f:06:d9:30:62:a3:7e:8c:4c:04:
38:ff:69:17:f6:6b:0b:3a:e6:a7:3a:8b:3d:20:6a:01:7c:63:
25:00:e4:30:f6:a6:bb:e7:60:bd:8e:7a:8c:cc:07:e5:d4:2c:
72:96:5a:37:47:f5:6f:c4:c3:dc:f9:c7:80:e5:30:b3:a6:11:
6a:41:5e:b5:4c:19:45:09:d5:f3:d7:49:ed:b3:f4:21:26:97:
f0:10:8c:a5:42:03:64:4a:fb:40:d9:a2:67:47:60:72:4a:46:
47:01:b5:be:75:ea:12:1b:9e:45:39:8b:29:0e:ce:79:e2:36:
f5:c5:9a:46:98:93:3f:ee:64:ef:c2:4c:06:2a:a1:ff:5a:15:
c9:f8:53:88:84:5e:aa:5c:c9:d8:39:31:f0:7a:d9:21:b5:79:
42:17:b7:39:f8:af:1e:a6:30:0e:3b:aa:4c:12:88:85:96:0c:
00:ea:07:11:34:93:55:4e:cf:66:76:9d:e9:1f:41:c5:b1:86:
5c:0e:bb:63:0a:63:12:6f:14:3f:c9:be:27:6f:65:22:cf:df:
26:42:58:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvQcr2wFhtwtCcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk
OTkwZjY2MjctNjE4NS00ZWY5LTllNjYtODBmMWYwNGI4Y2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm35HWcnNbXgSvFkdzgjCo/+FOcXUwI+AmwPH
7WYI21NZmWrc1e0H8TVuP70XqWZr/ehbtFGF3DBkv2Lve3SigFWI1ZrZwlAIoRuu
4slPLkeqW0HA1iJkjlOeCDFjFfpRd/OZ7lqlHAi9beEGPodNTbolcCt0KNNdA0qa
VWoX3KBYRf5JDpL68bK2LyS44ts8zTdT4ouYiNQqWni8C0sbwa/Zr4q6ZFwhVzrp
nMIxlUFJL9oDat26K9J908177mlVwl1tVfjwnEUbXsssixpPgrtTWcZ88DCGhNKK
Jxdk2vhw6mmsWaxljgCjk1a6h+uqKbxJ1T9k8AUvy0WdX7irDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/UcGKACv6O8fm/IUq8B2aCCpu7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWIyNDY5NGMtODkzOC0z
N2FjLWFiOTAtYzU4NmNlNWNhYmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ06fy/kW7TnkW+gkaIxr4JJjgq1wbAnPuRcRAPTTBjYGMr0MzwzjyW9
ScQlXwbZMGKjfoxMBDj/aRf2aws65qc6iz0gagF8YyUA5DD2prvnYL2OeozMB+XU
LHKWWjdH9W/Ew9z5x4DlMLOmEWpBXrVMGUUJ1fPXSe2z9CEml/AQjKVCA2RK+0DZ
omdHYHJKRkcBtb516hIbnkU5iykOznniNvXFmkaYkz/uZO/CTAYqof9aFcn4U4iE
Xqpcydg5MfB62SG1eUIXtzn4rx6mMA47qkwSiIWWDADqBxE0k1VOz2Z2nekfQcWx
hlwOu2MKYxJvFD/JvidvZSLP3yZCWH0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:23 2026 by rpki-client