
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa
File: da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa (raw, json)
Hash identifier: Xh6HaryvdU6ICkAY01AFFeBVckTuy3btA8vzc1LFKz0=
Subject key identifier: E0:DD:28:DB:33:F6:51:10:7D:AE:E4:5E:AC:D8:C5:15:24:C0:EB:82
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D60E5122CE4F41D14AAA6FA18
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 30036
IP address blocks: 192.119.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:12:2c:e4:f4:1d:14:aa:a6:fa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=807e472c-5aaf-416e-add9-1eff08ecf7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:5a:3a:29:95:dd:a4:33:46:2f:8c:2e:76:
46:f5:e6:3f:4e:ce:1c:b8:05:aa:61:29:60:d5:af:
50:c5:24:6e:99:07:6a:64:5a:fc:e0:41:c4:94:9a:
17:b3:92:75:b3:91:8e:a4:4b:77:e1:1e:49:5c:bb:
13:24:22:55:48:2c:72:bb:1b:39:a2:70:93:a7:64:
bf:35:95:29:96:15:9b:2d:3a:68:5b:43:ba:e4:df:
e7:4a:a8:b6:29:b6:c4:61:6f:e1:fc:03:7a:7b:95:
7b:e6:f1:ab:ac:53:e6:f7:0d:f4:9d:c8:ec:21:8a:
53:14:46:38:7d:c5:0e:1a:01:b1:3c:bb:20:a8:47:
bd:fe:2a:c1:f0:c3:e6:42:53:e6:d5:09:94:01:97:
fc:68:5b:14:a8:14:eb:78:d5:f3:c0:5c:58:0c:a8:
6b:dd:9c:cc:0d:59:04:6c:00:09:86:08:a2:44:72:
9a:e2:7f:63:73:95:58:bf:a6:18:81:28:9c:48:ea:
ae:e8:00:df:cf:ba:16:3c:d6:fc:a7:82:ea:06:0f:
1f:21:d7:ad:c1:9c:bf:2c:16:99:e5:12:d1:dd:3a:
09:8f:a4:d5:f1:ce:e6:16:5b:e8:fc:dd:4b:81:65:
35:2e:73:3f:d9:ae:6e:43:aa:c7:1d:dd:b4:e3:33:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DD:28:DB:33:F6:51:10:7D:AE:E4:5E:AC:D8:C5:15:24:C0:EB:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:38:88:ec:ab:d2:a5:9d:5c:37:4e:77:cb:4d:90:44:77:70:
70:d0:80:65:07:0a:15:bb:d8:be:bb:91:82:b7:2d:72:57:99:
bf:0f:8d:8f:c2:0b:e0:5a:eb:5a:df:e2:32:07:97:0a:50:8b:
05:b9:7e:29:b2:7f:29:20:4a:05:1c:69:9b:0d:32:b2:c1:b0:
6d:47:34:37:7b:ac:13:6c:8a:53:7c:cd:30:7f:00:99:5a:7d:
30:db:45:fc:bc:c5:e9:21:99:85:0f:0f:bf:b8:3f:9e:b9:41:
3f:43:e8:a2:79:b4:01:05:4a:27:0b:51:33:ae:85:a2:13:23:
72:14:a5:4e:34:ee:1a:cd:73:9a:2e:8b:e0:77:e3:83:8e:3d:
8a:87:be:b1:32:4b:b7:f8:36:28:20:ec:32:0c:69:2b:eb:0a:
18:c6:cf:ca:ae:68:7b:68:d7:ee:73:ed:ca:af:1e:11:a3:7a:
04:93:13:db:86:c9:c5:1a:53:c4:35:fb:9d:22:17:a5:1b:20:
fc:c0:79:08:90:32:b0:a9:65:c8:2e:16:91:45:01:21:97:2e:
aa:0c:f6:4a:68:0a:b5:00:cb:84:f1:3c:2e:85:5d:29:44:64:
39:47:af:b1:cd:42:b5:14:74:a8:5c:a9:e9:02:e4:1e:fd:c0:
e8:be:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:04 2026 by rpki-client