
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa
File: cae92603-341e-3d54-9fda-0cf1e572484c.roa (raw, json)
Hash identifier: NQJmg7A4ye3khLiXVZGWwO2QtV8+aozlBHlWGcE8uRQ=
Subject key identifier: 38:B8:36:8B:B2:47:31:AF:04:C9:7D:47:B4:32:1D:8E:F9:04:84:C8
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584E253F0522B6EAF92188D2C6C0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa
Signing time: Fri 12 Jun 2026 09:00:11 +0000
ROA not before: Fri 12 Jun 2026 09:00:11 +0000
ROA not after: Thu 10 Sep 2026 09:00:11 +0000
asID: 21949
IP address blocks: 199.247.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:3f:05:22:b6:ea:f9:21:88:d2:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Jun 12 09:00:11 2026 GMT
Not After : Sep 10 09:00:11 2026 GMT
Subject: CN=4bd351f7-d815-489f-97bb-9b805104831b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:13:9a:df:bc:b7:62:10:45:a6:55:ab:0c:
53:ed:8a:0e:65:a4:0a:25:a9:e4:26:e6:5f:41:1f:
b8:43:0d:5f:63:ef:2d:6c:be:91:30:1d:31:f9:94:
08:c6:9e:4d:45:ae:aa:76:57:81:d7:d0:22:29:0f:
08:26:ed:a6:14:fb:03:5f:70:97:e0:1e:1a:03:ce:
44:38:c7:45:1c:c1:3f:0f:d3:ba:8a:12:20:af:9f:
90:81:46:75:ff:23:4a:b0:9b:bc:66:4c:2a:c4:38:
6c:49:61:bc:dc:cc:af:46:6f:9f:c8:fe:76:78:8f:
0a:9b:65:07:e2:33:42:89:56:d3:c4:10:67:76:08:
4b:84:b4:91:b9:62:c3:d4:fa:f8:e5:fa:82:5d:6c:
55:93:4b:ea:58:6e:11:ec:47:68:30:09:b9:6e:bb:
94:3c:30:21:90:39:da:47:91:42:00:c1:1a:a4:eb:
68:7a:e8:68:7c:a9:85:14:1f:02:26:15:ea:0a:77:
54:ac:2a:5d:1c:31:92:bd:fb:c3:03:6f:b7:31:1d:
0d:17:72:ca:0f:dd:55:50:31:fc:f9:84:84:39:01:
9f:7c:1d:d9:65:12:55:87:bd:25:87:82:db:e0:dd:
a7:72:13:90:4d:f5:9a:f3:81:a1:3f:bf:c3:c1:54:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B8:36:8B:B2:47:31:AF:04:C9:7D:47:B4:32:1D:8E:F9:04:84:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.247.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:88:15:a3:c0:e4:1c:ea:d6:d8:a7:bd:f8:e6:0c:fd:e2:e0:
b8:25:e8:01:52:03:03:82:79:22:d4:5b:dd:e4:35:ec:e1:9e:
dc:6a:ee:4e:af:c1:bb:3c:e9:f4:46:fb:e0:27:0a:78:da:66:
c8:e0:7d:b9:0d:66:20:8d:92:23:b8:4e:f5:05:d3:fe:e3:cd:
a8:1b:51:ca:5a:87:c0:bf:b7:f0:2b:bc:7d:19:b4:24:2b:ee:
a0:10:22:77:e3:aa:2b:ed:1a:28:6a:9d:ee:b9:5f:b5:f6:32:
45:b1:2f:c4:14:2f:4a:aa:20:37:df:13:59:cb:73:38:a1:46:
71:37:be:37:4a:a8:be:8f:53:94:08:cf:35:44:f5:ab:ab:0c:
1c:69:41:3a:1c:e1:1e:2e:77:36:cd:0e:1a:f6:c2:74:d5:fe:
ab:3f:72:20:5c:a4:42:39:d6:49:59:a8:1a:42:62:c9:9e:de:
8c:73:67:2d:57:3d:95:8c:d9:eb:78:28:34:d6:e2:26:97:37:
96:29:cc:e6:2a:e0:0d:89:55:f7:17:22:28:d0:4b:43:88:ca:
9c:fc:62:63:87:e1:93:8e:53:a9:fc:ff:c9:4c:e1:88:d6:30:
a4:af:e4:b3:39:90:be:94:33:32:09:b0:64:06:69:d6:98:a3:
87:1f:73:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:09:06 2026 by rpki-client