
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1954f466-2f93-3a89-b865-828d3f141036.roa
File: 1954f466-2f93-3a89-b865-828d3f141036.roa (raw, json)
Hash identifier: wLHaukJhVeNb3c6PtQODz7Zy96sHZK9ysfesPzsbvRw=
Subject key identifier: B7:BF:27:CA:10:13:44:A5:52:16:39:80:88:14:F2:AB:46:3A:15:20
Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial: 010D0C9F4328584CEA5CD6F263EDA75E255EEF80
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1954f466-2f93-3a89-b865-828d3f141036.roa
Signing time: Thu 19 Feb 2026 14:00:40 +0000
ROA not before: Thu 19 Feb 2026 14:00:40 +0000
ROA not after: Wed 20 May 2026 13:00:40 +0000
asID: 46841
IP address blocks: 199.30.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:5c:d6:f2:63:ed:a7:5e:25:5e:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Validity
Not Before: Feb 19 14:00:40 2026 GMT
Not After : May 20 13:00:40 2026 GMT
Subject: CN=3f9b474e-81e9-4101-b288-48d9dbe45203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:0e:83:40:de:d1:1f:4b:f7:90:02:30:93:
6d:d9:4b:91:4f:54:4b:99:05:5e:c4:a4:c0:9e:22:
dc:bd:69:ba:5d:36:c6:f0:50:28:1f:08:f6:9f:d9:
f7:22:eb:8f:fd:64:20:71:cf:83:67:60:3b:21:1b:
40:2c:4f:30:c6:12:32:88:8b:56:ef:8f:5d:48:38:
3c:be:3d:9b:80:f7:67:66:d4:2f:f4:cf:88:00:8c:
1e:ca:a3:2d:47:a9:05:1b:b1:a1:5c:4c:51:86:b3:
c2:df:02:1b:9d:46:b8:97:ff:df:17:fc:2f:87:1c:
9e:76:32:73:e1:dc:21:01:d9:c8:cb:cc:c3:da:95:
5c:c0:92:b5:8b:54:42:98:52:ef:ab:2b:c6:eb:9e:
cf:ce:9c:57:5b:94:03:17:9d:99:4c:63:13:3e:47:
66:78:61:92:2f:24:84:93:3a:22:0f:b3:69:da:c7:
fb:f5:34:cc:0b:e6:59:12:f8:ba:32:d9:05:bd:08:
af:d8:f0:43:91:ba:ff:44:4e:af:97:e2:a7:4e:3e:
82:e6:47:a6:aa:b5:11:e1:9b:bb:47:0b:2f:0e:70:
ca:ba:bb:87:83:2e:d6:38:ac:91:09:13:9b:a5:9e:
3b:e6:47:c4:b9:e2:cd:62:32:7c:8f:eb:f8:93:78:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BF:27:CA:10:13:44:A5:52:16:39:80:88:14:F2:AB:46:3A:15:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/1954f466-2f93-3a89-b865-828d3f141036.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
X509v3 Authority Key Identifier:
keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.30.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:9e:40:86:10:4d:e1:46:ee:14:05:70:63:10:d2:a4:5c:62:
19:02:41:79:3c:1c:55:48:b3:30:88:6f:7f:aa:7b:da:e0:ae:
a8:4f:1d:1f:40:b6:76:7b:b3:7d:82:dd:e5:cf:26:a2:aa:61:
8a:67:b2:b8:13:97:51:d2:93:5a:46:5c:5a:2f:d3:03:02:e3:
63:39:72:53:79:c0:64:94:9e:42:a0:9e:07:0d:3c:60:bb:55:
d5:42:a1:92:03:e6:cd:56:ac:03:ab:b5:7b:e8:c8:93:0e:dc:
c1:27:ff:38:1d:fd:25:03:fb:f4:4f:00:9a:8a:02:21:aa:da:
a2:74:bf:92:23:86:a0:3f:18:a9:bf:3f:90:f7:c4:f0:8c:68:
5e:90:84:c7:05:66:78:1e:f1:61:06:f9:27:3f:ad:a6:5e:f8:
a0:5b:eb:39:3a:8e:4b:e5:ba:d8:d6:b7:4b:40:f5:83:53:b7:
74:2e:48:18:5d:20:1b:17:bc:b9:ab:e5:84:94:55:9c:09:41:
6d:70:36:bb:13:50:92:e8:d2:ea:f6:c2:72:23:7a:1e:dd:ef:
88:c3:0b:6b:b6:de:7b:21:5c:04:26:4c:f2:ad:30:d4:f9:06:
c4:3d:48:40:73:6a:3e:2d:35:2e:c2:d8:11:c9:10:9d:e7:2a:
a8:b5:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:17 2026 by rpki-client