
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a9ff331-5183-36df-ab6d-01ae046643d7.roa
File: 2a9ff331-5183-36df-ab6d-01ae046643d7.roa (raw, json)
Hash identifier: HmXBlfdbh8YW/17M2IL3UIUKfT45fuDCIs7WHx/0kwQ=
Subject key identifier: 91:A6:29:4F:B1:9D:45:08:D1:B9:27:FD:96:36:CD:E3:C9:27:30:63
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C9D96E53B4DFE07021A2BE9A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a9ff331-5183-36df-ab6d-01ae046643d7.roa
Signing time: Fri 23 Jan 2026 02:00:30 +0000
ROA not before: Fri 23 Jan 2026 02:00:30 +0000
ROA not after: Thu 23 Apr 2026 01:00:30 +0000
asID: 30036
IP address blocks: 64.237.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:9d:96:e5:3b:4d:fe:07:02:1a:2b:e9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 23 02:00:30 2026 GMT
Not After : Apr 23 01:00:30 2026 GMT
Subject: CN=caddce4c-b00f-40c5-b073-f591d47bb3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:7c:b3:f2:fd:91:46:f1:ea:9f:da:18:8a:
e3:13:97:20:05:9a:99:50:51:3c:1b:71:14:7f:15:
a3:f6:1f:cd:f8:7c:fe:92:6a:73:b1:e1:04:b4:aa:
f4:1a:65:88:b9:6f:b7:32:4f:7b:c5:b3:fa:ad:7b:
0a:f7:8b:b8:a2:15:ff:25:2f:1b:d4:e4:53:f1:63:
8c:49:43:6b:33:93:f1:cd:bd:b2:7e:9c:3e:61:4e:
2e:d8:8d:2d:53:a6:13:a6:8c:64:45:bc:45:ac:2e:
74:7f:0d:33:07:8a:cd:4b:53:62:77:a2:fe:c5:e9:
96:1f:6b:47:65:f7:cc:9b:76:f8:74:a5:55:5c:f7:
83:29:23:93:f4:3c:f5:c3:18:67:82:0f:ab:1f:17:
4c:6c:2d:da:2c:66:34:78:f1:16:65:7a:82:2c:61:
2a:4e:d0:96:20:05:ab:80:c9:7f:17:14:ec:80:c4:
c7:24:d9:9a:35:0f:48:83:87:79:fa:43:83:e9:14:
11:a5:15:af:c0:e7:b0:86:e6:0c:db:29:0c:0e:eb:
c8:7c:97:05:0e:fe:7d:6d:fc:75:f1:c0:9b:8f:00:
c6:90:34:bb:0a:b0:07:16:b4:45:f0:8d:ff:df:6c:
e6:a3:92:12:08:f2:bc:48:62:9c:f4:46:5e:1e:bb:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A6:29:4F:B1:9D:45:08:D1:B9:27:FD:96:36:CD:E3:C9:27:30:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a9ff331-5183-36df-ab6d-01ae046643d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
64.237.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:93:ec:5f:b8:56:ed:79:10:a7:58:a6:e3:d2:de:cc:08:3a:
69:94:2d:a0:3a:00:2c:67:e6:53:11:63:23:df:c3:35:cf:b9:
a9:59:a3:f9:89:55:35:4c:9e:95:80:73:86:6e:bc:f0:28:62:
99:1f:9c:a8:8a:9c:c3:c3:11:d9:ba:b8:f5:b0:e0:34:79:2f:
5f:e4:98:fb:f3:ef:b8:c4:06:82:32:7b:6e:d1:c4:59:ad:4f:
a7:d7:22:92:84:cc:06:04:63:de:fa:64:02:6d:dd:ca:25:6d:
73:01:93:bb:45:31:19:cf:29:06:39:66:7f:f8:72:9c:8c:e6:
ca:8a:ff:a4:ee:bc:39:56:cf:55:5c:9e:2c:dd:38:ca:b8:99:
a7:93:5f:b6:d5:dc:93:80:59:5e:29:02:c7:8f:01:01:bc:35:
57:5a:50:9b:75:17:0a:73:8e:bf:22:b2:51:9d:89:13:be:58:
c4:ec:22:04:86:97:4e:b8:4f:fe:f5:c9:00:8c:b0:57:c4:d6:
27:e4:4c:13:11:9a:c1:14:df:05:1b:c7:43:2e:1a:3f:0e:96:
be:25:31:f0:95:b6:63:c5:c9:5a:74:00:00:1e:3d:d2:08:b7:
5d:e4:89:3e:f5:e7:ab:2a:50:57:63:d7:37:47:e3:e1:71:80:
8e:e7:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:12 2026 by rpki-client