
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3a8e6f1f-9e62-312f-b5f3-a19911286853.roa
File: 3a8e6f1f-9e62-312f-b5f3-a19911286853.roa (raw, json)
Hash identifier: kEkH5HndNfEt+eeXb8cLkM2s+n7AsymQknwnYJ6iqos=
Subject key identifier: 90:32:A0:F6:07:32:8F:BB:4A:40:54:0A:AD:67:DD:A4:48:06:46:32
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584CD99D0E4E3B18F99A0BE49780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3a8e6f1f-9e62-312f-b5f3-a19911286853.roa
Signing time: Fri 13 Feb 2026 14:00:41 +0000
ROA not before: Fri 13 Feb 2026 14:00:41 +0000
ROA not after: Thu 14 May 2026 13:00:41 +0000
asID: 7029
IP address blocks: 199.250.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:9d:0e:4e:3b:18:f9:9a:0b:e4:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 13 14:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=c4ff74c2-353a-405b-8526-82fa6c11965f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:cb:40:7c:c0:a7:56:f7:02:bb:36:32:ae:
b4:55:15:6b:1e:30:eb:41:54:0f:00:d3:84:35:3f:
ec:a6:8d:df:08:05:df:db:e9:09:9c:45:c7:2e:7a:
c5:1c:c7:d6:c8:8c:ab:ae:b0:9e:18:4b:d4:28:8a:
cf:0c:24:de:91:ca:13:9d:11:f7:b2:4a:dd:64:2d:
84:fa:f7:b1:ea:be:ad:d6:1d:66:dd:6c:31:c2:57:
47:91:5a:4a:32:9e:a4:6a:ba:98:88:9a:f2:99:35:
49:80:25:7d:54:a5:e9:2b:3f:89:4f:07:09:9c:15:
4b:1e:47:3e:f1:64:46:e7:5b:54:c1:6a:4e:5e:da:
c5:03:ab:79:5a:d1:f8:70:5d:8f:e6:60:35:0a:66:
3c:94:53:7f:f6:a8:02:a1:d1:87:9d:0b:c4:6a:bf:
bc:22:f2:b2:0d:6e:77:c8:3e:07:3d:82:33:66:b5:
b8:a6:ed:d3:e5:0c:b8:6f:0a:29:a8:d8:6d:5e:7b:
8a:02:6f:d0:de:f1:86:d3:f1:22:6d:fa:b8:b3:dd:
71:2f:7b:17:eb:1c:30:fd:91:29:e5:33:75:77:82:
cd:56:f7:3b:68:fd:02:50:ce:98:72:71:c3:f0:a8:
2d:f7:df:52:55:c2:c9:06:12:be:dd:0f:c8:fa:f5:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:32:A0:F6:07:32:8F:BB:4A:40:54:0A:AD:67:DD:A4:48:06:46:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3a8e6f1f-9e62-312f-b5f3-a19911286853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
199.250.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:ec:7a:cb:f3:25:05:53:93:e3:2b:d6:62:36:fa:a4:1d:42:
dc:8e:49:e4:42:2b:c2:de:98:68:1a:1f:ee:9d:70:20:d1:8a:
a5:84:73:45:1e:c7:e9:db:cb:7e:0b:61:d0:ae:ae:c7:88:7e:
ad:bc:59:0e:91:30:99:bf:7f:26:a3:e2:4c:09:1f:70:5f:b3:
23:66:91:c0:f3:d1:e6:16:61:fd:75:67:d6:bd:92:ee:e8:d2:
59:6b:42:c2:25:1a:7f:c9:94:02:e0:c9:fa:c8:52:2b:e5:db:
44:fe:be:fe:67:96:a7:48:cb:38:96:9f:16:13:61:44:bb:71:
ff:c5:0e:35:02:6d:fb:84:1e:18:40:47:e4:1b:d1:e8:78:d8:
f9:fe:ec:68:b0:6e:72:0a:44:4e:fb:df:1e:51:d2:72:de:30:
f1:11:fd:36:15:84:2b:59:48:f1:60:c3:84:aa:7b:78:ea:ad:
33:60:f3:9d:51:bd:67:59:0b:51:59:91:40:f4:19:00:9a:9a:
26:48:0b:e2:a2:49:ba:2d:fc:7e:25:0b:f9:c3:d4:93:3c:bc:
50:43:be:1f:f2:b7:2d:59:0d:b4:d9:55:08:9c:d1:a6:6a:e3:
8b:98:10:e8:b6:f4:24:61:c6:63:e8:d6:e9:38:be:26:ea:19:
13:f6:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:47 2026 by rpki-client