
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab86da4b-6cad-3670-b540-1336eb14127f.roa
File: ab86da4b-6cad-3670-b540-1336eb14127f.roa (raw, json)
Hash identifier: 9vZTEODeNkCCNcSB4GZ2xL6TsthT5/OgniEmwXYQjz8=
Subject key identifier: 6A:05:F4:FC:BC:67:16:39:1F:23:99:36:E5:A5:2D:42:A7:35:2A:B5
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D60E5041C4BF3FF2AA16B0580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab86da4b-6cad-3670-b540-1336eb14127f.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 30036
IP address blocks: 198.40.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:04:1c:4b:f3:ff:2a:a1:6b:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=dd5c988f-b41d-41da-9c29-c56ad0356588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:6a:a4:e1:57:14:e3:fd:77:88:25:ac:ef:
4d:93:42:ad:85:4f:84:94:22:cd:18:e2:d2:26:04:
85:1c:6a:a1:40:00:85:71:d5:70:56:fe:97:4f:76:
b6:8c:73:18:1a:7a:e2:ff:eb:59:ce:ef:66:8d:61:
26:3b:a6:64:c0:a3:fb:14:1d:f6:dd:cf:99:e7:91:
04:c1:b1:4d:e2:80:e1:35:6e:c0:44:fb:d1:68:21:
38:ae:5c:a4:91:80:40:05:46:22:38:27:80:9c:fd:
3a:49:25:d8:16:08:e2:38:93:25:61:5b:23:e9:3c:
33:45:1e:0f:ea:85:c8:ac:34:52:7b:54:51:9b:f3:
53:e3:40:57:69:63:57:f3:34:17:7d:2f:8c:b7:9a:
74:52:cc:63:19:f2:09:28:93:68:74:a0:b8:a5:4f:
f4:3f:14:44:3c:3b:21:6f:b8:28:db:95:d4:c2:a8:
f6:ee:fa:41:39:ab:09:fb:69:7b:98:77:0d:30:db:
b5:c9:2b:b1:9a:19:4a:3e:f5:7f:9c:3f:77:e1:02:
cd:f5:63:ca:c8:7c:73:f0:24:cf:fd:83:8f:cf:ce:
9e:29:0e:00:5e:ab:1b:7e:ec:96:62:58:56:d1:35:
60:f7:11:f3:76:7e:00:75:2d:3b:48:cc:34:31:3c:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:F4:FC:BC:67:16:39:1F:23:99:36:E5:A5:2D:42:A7:35:2A:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab86da4b-6cad-3670-b540-1336eb14127f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
198.40.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:ba:b6:b6:96:73:9e:d5:d2:62:1a:20:66:bd:e0:79:21:56:
b9:d2:f5:ba:2c:56:07:03:4e:42:73:42:27:a8:a1:e0:94:a1:
8f:d8:a5:c5:bd:a1:15:30:d1:e2:c9:7a:87:ac:4d:22:03:ce:
ac:5c:27:ac:78:59:1f:d3:a3:96:7d:9a:16:39:f4:5c:6b:89:
27:25:f9:6f:74:b5:c5:5b:b2:90:51:2d:fd:bf:28:fd:be:20:
c4:e8:d6:c6:13:31:e0:68:3a:25:05:78:61:98:5e:aa:7c:ae:
11:7e:86:56:36:04:45:37:6f:45:a9:0e:df:58:ab:cf:65:16:
84:53:9f:23:4f:62:ba:49:0c:1f:5d:39:59:7f:6a:bb:aa:91:
fd:92:7b:0b:72:23:12:28:ae:8e:64:33:7f:34:28:91:d2:3c:
60:df:d0:e5:62:71:a3:32:4c:b5:82:57:7d:02:21:9e:b7:5f:
58:d7:b1:1f:6e:44:02:66:04:4b:8e:a5:78:be:b5:1d:9c:b4:
6a:be:43:e7:c9:54:f6:e4:d6:74:f2:a4:ff:54:00:09:ae:0e:
8e:4e:ee:26:cc:5c:6c:22:3e:2b:f1:c8:84:b3:3e:bc:f5:f9:
0d:cb:4a:93:54:87:7e:9a:13:a0:f1:2a:e3:fc:38:e7:b0:97:
5d:52:e9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:56:45 2026 by rpki-client