
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2649ead5-2330-3ec5-a70e-0603b6659232.roa
File: 2649ead5-2330-3ec5-a70e-0603b6659232.roa (raw, json)
Hash identifier: mRkcBFynvmKlWfg4uRc3Y9CtTaM1jEmVcMZRbdI7Rv8=
Subject key identifier: 3B:A1:09:EB:19:B1:EF:65:74:24:48:4C:27:32:EA:2E:2B:96:76:5E
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C8046C5762BE69DCB30234638
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2649ead5-2330-3ec5-a70e-0603b6659232.roa
Signing time: Mon 12 Jan 2026 14:00:40 +0000
ROA not before: Mon 12 Jan 2026 14:00:40 +0000
ROA not after: Sun 12 Apr 2026 13:00:40 +0000
asID: 30036
IP address blocks: 192.119.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:80:46:c5:76:2b:e6:9d:cb:30:23:46:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 12 14:00:40 2026 GMT
Not After : Apr 12 13:00:40 2026 GMT
Subject: CN=987d69ee-eaa1-4ec1-aac6-c4ac55f08e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:74:9d:fd:3d:4a:e4:03:7a:21:00:0f:91:
59:e1:97:4f:97:93:d8:67:9c:c1:de:85:21:ab:55:
10:0e:b9:45:78:6f:6f:e7:10:a7:d1:df:95:07:d7:
0e:48:2c:2c:0e:1a:e3:2b:04:a7:ef:88:35:2a:15:
0f:3d:3e:ee:bc:59:0d:03:b5:3b:c5:39:97:a4:6a:
0e:8d:7f:4c:e8:6c:b6:27:f6:f8:04:9f:77:38:6f:
4d:9a:d4:85:c8:8a:8a:4e:f8:be:b0:67:ee:21:ad:
b7:89:9c:0a:22:c5:5e:6a:b0:39:d7:60:50:5a:01:
52:85:ff:71:16:a4:ac:3b:be:9f:72:cf:5e:d8:95:
46:fe:7d:5d:76:8a:e1:5e:d3:c3:09:59:e6:47:8a:
1b:8e:40:2b:70:ea:46:6f:d1:07:21:8e:a2:61:5b:
e0:ea:0c:c4:a9:70:9d:29:bc:64:12:eb:99:fa:05:
06:46:5a:47:81:45:25:c2:96:1f:f7:96:58:2a:b6:
1e:97:61:76:40:77:9c:e7:9f:ea:4c:1d:65:85:15:
fd:34:0a:79:eb:eb:63:43:2e:f9:54:d2:42:e5:47:
58:3a:ba:c7:df:25:64:44:1b:bc:7c:eb:b3:a4:48:
a2:15:15:1e:94:57:44:85:a4:45:4b:79:f3:76:9d:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A1:09:EB:19:B1:EF:65:74:24:48:4C:27:32:EA:2E:2B:96:76:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2649ead5-2330-3ec5-a70e-0603b6659232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:8a:39:0f:1a:ca:66:01:52:3b:e6:e5:7f:ac:e9:85:c4:c2:
4c:30:89:db:39:36:52:67:73:80:0d:9b:cd:1c:8e:be:74:84:
1c:2f:44:2b:ff:92:5c:c3:f8:d8:60:6c:f6:86:a6:e4:1e:81:
0d:41:96:73:22:4e:d7:57:24:fc:d6:bd:ce:15:0f:a9:92:94:
70:4c:72:3a:78:e6:e1:6e:7a:1e:e2:88:32:f0:56:8c:f1:6a:
25:f9:93:a2:24:fc:af:53:a2:12:8c:c5:5f:2c:ca:b8:f1:3a:
1e:19:18:51:97:ae:b5:fb:80:11:9a:c6:70:f2:0d:aa:9c:67:
f5:ba:57:14:44:aa:70:2d:0f:e7:2d:32:59:35:9d:a6:15:f7:
2f:1b:90:ec:63:85:34:de:34:95:65:01:4f:0e:7c:e8:23:d2:
18:89:c1:4c:2b:e7:bb:4a:9a:3e:b0:cd:2b:1a:e1:19:4b:df:
4d:7a:86:7d:f2:cf:b2:4c:5a:7c:ab:fa:b3:d7:17:82:1e:a8:
65:e7:48:52:56:e8:07:26:88:4d:77:68:50:b7:f3:22:cb:ad:
7c:6a:ac:8e:16:20:bf:bb:75:de:fd:5c:84:7f:34:f0:9a:86:
47:0d:47:45:7f:31:eb:5c:82:6d:c0:f0:81:82:d4:96:ff:9c:
de:9f:09:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:35 2026 by rpki-client