
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c33897-e305-33fe-b338-248e0ebe23a5.roa
File: 58c33897-e305-33fe-b338-248e0ebe23a5.roa (raw, json)
Hash identifier: s+gYBANCMQ/fTeIi0jMPAbcR+1NC8m/IkAVavYdruO4=
Subject key identifier: 88:46:ED:ED:00:12:D9:BE:D4:CB:BD:96:E8:B9:66:00:A2:24:86:E3
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C8046F4536D5D696309485DC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c33897-e305-33fe-b338-248e0ebe23a5.roa
Signing time: Mon 12 Jan 2026 14:00:40 +0000
ROA not before: Mon 12 Jan 2026 14:00:40 +0000
ROA not after: Sun 12 Apr 2026 13:00:40 +0000
asID: 30036
IP address blocks: 192.119.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:80:46:f4:53:6d:5d:69:63:09:48:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 12 14:00:40 2026 GMT
Not After : Apr 12 13:00:40 2026 GMT
Subject: CN=df87532c-91bb-4506-b266-5d2d857fa212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:e8:df:c2:c2:2e:80:aa:7d:a1:0c:04:f4:
a3:87:63:54:95:3b:00:e4:5f:53:37:af:05:fb:a0:
3e:53:83:4e:12:ba:1c:87:f1:af:68:75:2d:ae:d5:
9d:57:1e:ee:f4:76:b1:80:d2:3c:48:a7:eb:e9:ec:
06:c8:68:4a:93:cd:86:4a:a9:d2:f3:21:ff:f1:2d:
52:29:e1:17:ba:91:bf:39:7c:b8:c2:73:81:39:24:
df:dd:a2:58:05:a1:3d:55:05:48:78:cb:a8:81:7c:
34:7d:1f:6e:21:c7:09:9f:a4:7b:36:38:62:9a:a5:
00:98:73:62:aa:f3:f2:34:d0:e1:78:f6:a4:7e:b9:
56:c9:2e:34:6a:7c:f4:dc:bc:1d:4a:fa:3d:27:49:
e8:d4:3e:51:63:50:8e:3a:8b:c6:72:e2:de:f5:42:
bc:0a:c8:bb:b2:72:c0:7c:8d:25:fd:80:f9:0f:40:
65:16:a9:2a:5c:1b:51:3d:73:22:1b:d4:95:05:cd:
e7:58:63:8b:19:93:8d:83:43:8d:af:98:93:83:c4:
36:d9:1f:d0:9d:d2:38:15:60:b6:28:70:da:33:c3:
2c:85:f7:30:82:b5:14:08:4e:3b:0a:88:62:ae:eb:
c0:4b:fc:c5:70:9b:19:b5:4b:a7:7a:1d:e6:ab:e1:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:46:ED:ED:00:12:D9:BE:D4:CB:BD:96:E8:B9:66:00:A2:24:86:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c33897-e305-33fe-b338-248e0ebe23a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:2d:9d:90:e3:ed:ef:8c:d9:d5:de:16:fe:8e:b3:9e:42:c0:
69:9a:39:c9:74:c8:65:77:94:4f:a6:c7:ec:e5:12:df:23:9d:
e0:43:4d:90:ad:98:95:79:ef:72:35:e6:5c:db:5f:52:53:7a:
97:f7:23:f4:ed:9a:56:ad:fe:e0:61:f6:af:3a:5b:68:21:34:
00:a9:9e:97:87:5b:41:16:a2:0f:86:6c:db:cb:e5:4e:b9:97:
ef:4a:9d:f5:07:be:0a:ef:64:d3:74:37:6c:a9:7e:09:49:e0:
2e:e1:27:e5:9b:64:ad:fe:8f:51:82:1f:22:01:13:81:73:ff:
04:63:84:50:c3:9f:fa:20:26:ab:36:30:96:1e:93:83:8f:60:
11:3f:bc:b2:ad:8e:cd:79:74:30:a4:a4:ec:83:8c:1d:fa:d7:
cd:b2:db:45:fa:22:41:d7:e8:fa:e9:66:8c:56:19:ea:ad:45:
d5:a8:0c:3f:68:10:e6:01:53:46:29:c4:aa:ca:77:93:82:38:
d9:33:e7:55:e0:2d:85:64:5b:96:b0:33:1b:7a:f5:a9:8d:b7:
fe:85:3b:ce:5a:20:a2:16:ec:0f:47:62:98:61:dd:f9:31:d5:
ac:1f:d7:d0:bf:71:29:65:dd:f5:bb:3a:97:9b:5a:fe:6c:fe:
e6:40:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:15:07 2026 by rpki-client