
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/290cf5fd-1adb-3368-ac39-260194c932ba.roa
File: 290cf5fd-1adb-3368-ac39-260194c932ba.roa (raw, json)
Hash identifier: LxLDPnjHGY+eAmKIIAxxwn+tFXGy3+ltZK5Io3VhrQc=
Subject key identifier: 0D:BC:BB:23:25:76:7C:CD:48:99:14:CF:EC:23:0E:67:D3:62:8A:96
Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Certificate serial: 010D0C9F4328584CD2A1E9DCA8EB80E591583400
Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/290cf5fd-1adb-3368-ac39-260194c932ba.roa
Signing time: Wed 11 Feb 2026 02:00:32 +0000
ROA not before: Wed 11 Feb 2026 02:00:32 +0000
ROA not after: Tue 12 May 2026 01:00:32 +0000
asID: 14639
IP address blocks: 199.230.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d2:a1:e9:dc:a8:eb:80:e5:91:58:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Validity
Not Before: Feb 11 02:00:32 2026 GMT
Not After : May 12 01:00:32 2026 GMT
Subject: CN=fd89fbac-61e6-4733-94c9-2b1e39702205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:f7:0b:67:a7:1d:b4:16:e1:18:4a:d8:ac:
59:07:c1:ef:95:a9:61:cb:5e:d6:85:09:81:e2:f3:
89:90:94:f1:cd:f4:cb:30:ea:12:92:17:63:15:dd:
70:00:65:e8:da:c2:55:98:df:c5:ac:92:61:2d:8a:
98:27:7c:84:97:a4:fa:11:c0:44:df:e4:8f:d9:ae:
78:bf:21:51:b9:5f:47:2f:13:66:23:2d:30:1e:c2:
3b:6a:ec:66:29:f9:82:d6:f1:6e:32:16:79:c8:4a:
25:f7:99:ac:a8:67:7a:9d:93:b7:d9:25:96:7c:fa:
61:9a:15:50:40:ac:c4:26:12:d0:48:33:93:b4:8d:
13:d8:dc:20:3d:aa:c8:9c:5f:e1:c1:e4:c0:45:24:
b3:e5:01:ce:b1:7f:e2:87:d2:c2:6b:c9:e7:60:b9:
b7:ba:de:5f:5a:74:91:13:ca:54:37:ea:d2:1f:16:
ea:91:b1:22:3e:0c:38:f9:19:93:a6:c3:4a:d4:c0:
bd:e0:c1:32:d3:ae:76:8e:27:71:b4:9b:c4:e5:3e:
77:22:08:b5:81:90:9b:61:1d:ca:84:b8:23:d5:ae:
57:1c:b7:ec:96:7e:91:c1:51:7b:57:95:54:8c:f1:
98:d6:6b:f1:3d:0f:5d:a4:c1:e6:c8:d5:d9:2d:56:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BC:BB:23:25:76:7C:CD:48:99:14:CF:EC:23:0E:67:D3:62:8A:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/290cf5fd-1adb-3368-ac39-260194c932ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
X509v3 Authority Key Identifier:
keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
sbgp-ipAddrBlock: critical
IPv4:
199.230.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:fc:7b:3b:73:88:8a:25:2a:60:a9:22:24:7d:ca:93:38:bc:
b4:56:ba:5b:e0:6c:e9:91:5c:58:e3:2a:e9:e3:4b:52:aa:f3:
fd:da:bc:5b:8f:37:15:6c:60:6b:c3:b0:0a:5b:5d:53:e3:42:
67:ca:fa:83:92:e2:92:47:e8:cf:30:62:9e:5b:17:e7:5c:18:
d4:ea:a0:a7:c8:a1:ba:88:73:ea:61:e1:6a:aa:a3:be:c9:16:
8f:b3:de:7e:a9:5b:98:28:a7:9a:97:51:13:76:97:12:d5:7c:
fa:dc:a2:d9:2d:a8:7f:81:27:28:2b:90:35:92:62:44:2e:c3:
dd:7a:c5:61:4a:98:a4:d1:5f:fb:26:7d:96:67:05:c2:fb:80:
c3:b2:a8:88:16:cf:15:14:06:57:91:3d:bd:a2:ef:f3:6c:10:
07:20:3e:56:59:ed:ad:6d:f4:e1:d3:c7:93:0d:62:ef:28:c0:
ca:8d:ef:21:af:6e:eb:30:8b:64:75:28:28:35:04:8a:53:1a:
13:ad:a2:55:34:47:4f:41:e3:b8:ae:64:c9:2f:ba:81:9a:e9:
a3:fc:ac:ce:3f:71:a5:27:ca:2d:2b:25:4e:85:8f:c6:9d:0c:
2f:f3:3b:cf:86:d0:98:32:6c:5a:88:43:b4:5b:d1:57:3c:3a:
22:88:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:42 2026 by rpki-client