
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa
File: 1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa (raw, json)
Hash identifier: Ao5P78SdlajHbR+PSkx4yhXmRFVDhhaCT5HH0g+vYGs=
Subject key identifier: A3:DF:F6:36:37:F4:89:F3:7D:FC:2D:E5:45:56:AC:18:A7:BB:6B:D7
Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial: 010D0C9F4328584CA061C831F6BB8ECF2FBA0E00
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa
Signing time: Sat 24 Jan 2026 02:00:31 +0000
ROA not before: Sat 24 Jan 2026 02:00:31 +0000
ROA not after: Fri 24 Apr 2026 01:00:31 +0000
asID: 11052
IP address blocks: 199.249.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a0:61:c8:31:f6:bb:8e:cf:2f:ba:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Validity
Not Before: Jan 24 02:00:31 2026 GMT
Not After : Apr 24 01:00:31 2026 GMT
Subject: CN=247190b3-f643-4c1b-bbf0-b0c86b7dca02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7b:fd:f5:8c:9a:85:fd:ae:ce:63:a7:2e:b2:
a1:bf:e2:ce:64:9e:30:09:0a:2c:e5:89:73:f8:b2:
9d:a6:8b:b9:ac:74:fd:93:54:81:f7:6f:6c:b6:91:
03:c7:20:72:78:e1:09:10:45:2b:34:ed:f2:5d:ac:
8b:be:01:b3:5a:a0:ca:00:b0:c6:bd:0d:30:cc:ec:
be:39:a7:ac:76:15:26:53:e2:61:0f:4d:0f:10:33:
c0:67:5e:01:b4:ac:8e:0d:47:77:f7:d5:04:cf:22:
ac:ec:99:02:ae:c4:26:82:e0:2b:42:5a:30:22:7c:
6d:d9:2e:a0:d1:c7:3a:a0:6c:1c:84:8d:7f:7c:e6:
82:9c:df:f3:61:a5:c1:65:fb:79:15:c0:cc:4d:6b:
f3:13:b3:20:bf:44:4c:34:30:97:ed:85:71:8b:71:
38:d8:47:f0:c5:16:ce:4c:21:d6:66:5e:53:df:7d:
94:9f:9b:bd:55:2e:74:01:b4:a3:26:ac:68:bc:bd:
ce:43:d9:48:28:6c:c8:65:8d:ce:0f:44:0f:d6:ef:
b2:5d:1c:34:13:19:ea:8a:f3:bd:f7:e0:22:c5:94:
01:76:59:b5:96:31:3b:b6:38:5b:53:61:fe:96:bf:
b9:4e:36:ba:d6:44:f3:d0:a9:34:68:96:c5:f5:5e:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:F6:36:37:F4:89:F3:7D:FC:2D:E5:45:56:AC:18:A7:BB:6B:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
X509v3 Authority Key Identifier:
keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:9d:e4:33:33:0e:2e:4b:49:73:e5:5c:ba:d5:95:3a:06:85:
52:2f:4e:f4:4a:8c:b4:83:c7:a6:06:e2:72:9d:87:02:5f:a8:
53:c9:c9:59:aa:67:17:1f:58:ac:c3:62:8a:e7:58:d2:61:e8:
3c:d7:2f:86:da:f3:82:66:be:50:8d:ca:66:16:55:d7:8e:fb:
4d:5e:76:bf:44:f8:18:1f:41:b0:fb:b8:d2:e8:18:f2:9a:d7:
b9:0e:f0:51:71:a1:66:a4:29:88:c5:55:c5:61:3f:49:7a:0b:
6d:cf:2e:12:2a:ac:42:ea:d9:aa:ba:9a:4c:ed:15:04:ed:67:
8b:fc:ba:29:c8:84:b4:85:10:f7:c5:64:9b:8c:97:66:a6:c4:
40:2b:cd:e8:02:7a:d0:8a:b5:70:23:c1:7b:60:0a:3c:64:df:
22:e2:94:d7:dc:97:ce:32:d1:51:33:e5:aa:26:7e:52:9e:ed:
7b:ca:e1:0c:56:be:13:21:3f:a4:4e:fd:13:70:e9:4c:61:9e:
8b:e4:42:4a:39:21:d3:77:bc:87:6f:a7:85:32:6d:fb:54:7d:
01:e7:73:9c:57:4c:c4:15:d2:5f:13:2c:68:f4:b6:d3:6f:01:
fe:a8:72:6b:5f:7a:e7:25:81:f7:2d:53:09:2d:b5:c2:71:5e:
01:98:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:48 2026 by rpki-client