
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3aaf4ee9-27a3-3d73-8946-35173802de23.roa
File: 3aaf4ee9-27a3-3d73-8946-35173802de23.roa (raw, json)
Hash identifier: /a62jqu6VNiDz4WQfjye7NS0Lb9vD4CCb9gSvzkNzwE=
Subject key identifier: AB:E9:E0:69:94:0E:F5:7E:C9:5E:84:D9:93:64:49:0C:87:BE:5A:5C
Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial: 010D0C9F4328584CC1E1CA05DCE86AC508FD9300
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3aaf4ee9-27a3-3d73-8946-35173802de23.roa
Signing time: Thu 05 Feb 2026 02:00:31 +0000
ROA not before: Thu 05 Feb 2026 02:00:31 +0000
ROA not after: Wed 06 May 2026 01:00:31 +0000
asID: 31898
IP address blocks: 209.59.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c1:e1:ca:05:dc:e8:6a:c5:08:fd:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Validity
Not Before: Feb 5 02:00:31 2026 GMT
Not After : May 6 01:00:31 2026 GMT
Subject: CN=049a32b2-fd1f-400a-9e91-ecc95f043ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bd:24:c8:4c:30:fb:3d:d2:3c:30:18:36:d8:
78:2f:73:b6:c1:15:67:50:af:39:90:2c:65:6c:75:
ee:c6:33:02:ac:dc:b5:1f:31:61:96:94:c9:df:50:
dd:e4:d8:af:ab:65:2a:c6:e4:ae:60:be:60:b4:82:
f1:96:4e:6a:34:b6:09:09:85:61:47:ff:37:33:97:
4a:25:cb:2b:5f:3d:3b:86:6d:c7:7b:f7:d6:23:8f:
9e:3e:2c:4e:9d:1d:46:a5:a9:59:d5:4c:45:b4:ea:
c9:dd:62:0f:ee:ef:93:4b:96:03:df:4a:94:0b:42:
fb:d9:79:dc:e7:50:33:b0:67:41:52:ad:b8:4c:50:
cf:f9:fc:89:39:43:b7:97:a2:fe:e7:02:b5:1f:3f:
23:46:0b:f6:a9:7d:e4:7e:c8:26:b3:b6:4a:74:78:
78:81:7a:78:c6:df:48:09:9d:e5:84:d2:9c:9c:1c:
a2:c3:0f:be:92:14:e3:3a:78:26:52:a8:98:6d:bb:
8c:58:27:d0:9a:e1:08:ee:57:c6:d1:cc:c4:59:23:
20:0c:09:c8:82:66:b8:9f:7e:98:ba:14:07:36:b3:
da:0b:fc:d2:33:51:2a:46:7f:0b:5d:a7:19:1b:c8:
16:53:c7:77:99:e7:b3:b1:cd:5a:56:bb:cd:76:d7:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E9:E0:69:94:0E:F5:7E:C9:5E:84:D9:93:64:49:0C:87:BE:5A:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3aaf4ee9-27a3-3d73-8946-35173802de23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
X509v3 Authority Key Identifier:
keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.59.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:33:9f:9a:30:f1:ef:a7:a5:17:4b:36:71:a6:8c:5a:f3:fa:
12:89:cd:63:ba:d1:0d:bd:41:63:47:e9:8c:f6:c7:27:31:4e:
58:78:fb:1a:93:2a:8f:7a:92:d5:7c:37:90:77:49:16:84:8a:
5d:54:37:fe:aa:00:c2:c7:d8:b2:7d:74:60:31:00:06:3c:60:
76:0d:51:4e:bf:7b:32:cb:78:93:aa:6d:6b:28:da:f2:21:df:
0e:2b:1f:75:3b:3f:21:86:68:0b:86:51:21:ee:33:1c:8a:74:
ab:c8:c2:9f:b6:7b:49:31:05:37:f7:c8:18:c4:d9:ac:a0:6e:
bb:a0:99:2d:9f:63:32:f3:7c:ed:3c:b9:21:93:8b:0b:65:98:
81:b5:92:00:0e:6f:28:89:f5:78:2f:df:eb:bd:b1:6c:8f:13:
f5:28:4a:e1:db:7a:c2:9c:7f:71:32:66:80:1e:6e:4c:40:6a:
3d:59:ed:39:da:de:45:00:de:d1:ba:eb:5e:38:fe:07:c7:ad:
22:7f:a5:45:68:5b:85:63:bd:52:6e:50:e2:34:89:13:22:da:
c7:97:d3:24:d2:7c:0c:f9:ed:e4:27:9f:32:1d:57:fd:71:a6:
ac:53:dc:7e:0f:a8:1f:fb:75:f9:91:d7:ee:e7:24:14:fe:b7:
b0:e8:2b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:44 2026 by rpki-client