
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa
File: 8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa (raw, json)
Hash identifier: v74WUINv2hWoHRgZEkAm2Ujv1bH3yhgdi/poWOhum6w=
Subject key identifier: AD:4D:64:D4:0B:3B:AB:33:EB:51:73:4F:75:7D:42:A6:75:C1:8C:77
Certificate issuer: /CN=5e580e37-3db1-41d1-ae09-7e84348caffd
Certificate serial: 010D0C9F4328584C9C31B097A1B6F76B0CCFA640
Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa
Signing time: Thu 22 Jan 2026 14:00:37 +0000
ROA not before: Thu 22 Jan 2026 14:00:37 +0000
ROA not after: Wed 22 Apr 2026 13:00:37 +0000
asID: 17207
IP address blocks: 198.59.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:9c:31:b0:97:a1:b6:f7:6b:0c:cf:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd
Validity
Not Before: Jan 22 14:00:37 2026 GMT
Not After : Apr 22 13:00:37 2026 GMT
Subject: CN=ad959ec3-32ba-4e95-8147-2c58846dfc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:37:6f:95:7d:97:ed:29:8f:d6:a1:38:e0:
36:d0:70:e8:8f:e1:7f:e1:7e:e7:77:a5:2b:30:ea:
f8:75:54:c7:b3:ea:d7:a2:cc:97:96:9f:4a:44:2f:
30:43:15:fa:f4:56:f0:be:4b:84:05:61:fb:9c:2a:
d0:cc:a5:95:67:41:00:97:83:51:76:df:46:8b:67:
3d:fb:50:6f:64:1c:50:ed:ab:63:15:59:e3:49:df:
02:58:e0:ba:4a:8a:8b:fd:c4:eb:48:fb:5d:5e:07:
47:a7:7d:d0:f7:1c:62:87:b4:78:f6:a4:b8:e8:68:
4e:3a:af:74:d2:52:4c:28:86:45:32:c3:48:da:1e:
c1:d2:c7:a7:32:fd:d6:e7:2d:c1:da:59:be:33:a7:
0b:0e:0a:13:21:50:fd:df:b4:1b:8f:30:23:dd:70:
d5:58:a0:2e:f9:cc:aa:65:ef:91:67:68:9b:cf:b9:
1d:fe:b3:d9:20:33:ef:c7:d6:bf:80:f2:4c:e0:c6:
bd:db:74:f5:90:ab:da:ae:5c:49:0d:6f:e7:e3:d0:
7c:58:62:73:c5:fb:18:84:06:12:2b:ea:fe:41:92:
b9:a8:41:c1:20:5c:a0:0b:97:33:be:bb:bb:4f:16:
87:26:01:67:db:94:27:e9:12:be:c8:d1:6e:f8:da:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4D:64:D4:0B:3B:AB:33:EB:51:73:4F:75:7D:42:A6:75:C1:8C:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl
X509v3 Authority Key Identifier:
keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
sbgp-ipAddrBlock: critical
IPv4:
198.59.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:c1:f9:85:c5:3c:42:bc:ec:1e:3f:06:1d:2e:a8:70:37:18:
23:89:6c:bd:37:f7:81:ff:67:fe:75:af:c9:38:92:40:49:0c:
68:c8:0e:d9:5c:df:9d:c6:59:88:ca:a9:5c:f3:c2:48:c0:1e:
82:44:6d:da:3a:a4:43:61:3d:2e:c5:88:5c:8a:3e:91:9b:ac:
85:6d:48:01:39:e4:55:13:88:5d:9e:d9:38:7a:cd:85:4f:68:
62:0b:59:74:9b:aa:5a:99:ef:9e:da:86:63:9a:ce:8c:50:ce:
c1:f6:0b:d6:6e:9a:67:15:33:59:f8:02:38:f2:f7:63:66:3b:
7e:a7:7b:03:a2:21:ee:67:e8:58:5f:e6:d9:67:60:d3:ad:33:
02:25:46:7c:96:b1:73:21:63:cb:e3:0d:da:5c:ba:78:d7:65:
92:8c:b3:93:f9:39:38:59:b8:5f:be:15:b7:15:2c:22:8e:da:
2a:14:cc:f7:a0:c6:80:73:d8:5c:47:d3:11:32:6a:5a:8c:7c:
be:ca:5c:db:75:25:99:6a:10:5b:b7:9f:73:24:11:0e:4e:70:
f4:2d:bb:00:18:68:c9:fb:eb:bb:75:2d:b7:57:06:0b:36:e6:
91:fb:bf:0e:27:a4:db:e6:70:af:17:ff:38:f9:7a:a6:56:b1:
29:6c:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:00 2026 by rpki-client