
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa
File: 6d52598c-853a-33f7-b184-caa86dfc7a61.roa (raw, json)
Hash identifier: hqnrcf4+sc0wdj5MdBrjh0XUahWlHzbAHCmXdpk4TIw=
Subject key identifier: 7B:D5:75:B2:67:69:36:76:4A:BA:58:15:55:7C:6B:00:5B:56:48:AA
Certificate issuer: /CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
Certificate serial: 010D0C9F4328584CF852452150AAB195A8712C80
Authority key identifier: 18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa
Signing time: Tue 24 Feb 2026 14:00:41 +0000
ROA not before: Tue 24 Feb 2026 14:00:41 +0000
ROA not after: Mon 25 May 2026 13:00:41 +0000
asID: 36515
IP address blocks: 199.68.56.0/21 maxlen: 21
209.240.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f8:52:45:21:50:aa:b1:95:a8:71:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
Validity
Not Before: Feb 24 14:00:41 2026 GMT
Not After : May 25 13:00:41 2026 GMT
Subject: CN=24ce6321-c3a0-4250-aa2c-6e0c71b19e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:72:94:4e:8b:0b:d3:18:d8:ef:36:2e:a7:
f6:54:81:83:6a:4c:93:2e:72:f9:5d:2b:27:72:a5:
74:22:a0:f2:57:fd:0a:37:a6:b7:87:2d:2b:6a:72:
ff:c6:25:5f:be:06:64:42:3d:ea:86:d9:cf:44:20:
00:26:fa:6e:53:0c:f0:1e:71:a0:28:82:8a:15:2c:
92:2e:af:fa:3d:fa:13:d7:b5:9b:b9:53:44:48:70:
39:c4:72:15:75:19:cc:10:32:30:71:3a:dd:ae:5b:
a7:e1:08:15:7c:c0:83:c0:14:43:82:d4:69:90:4d:
01:bd:5d:4c:21:36:7e:a6:50:d9:ba:91:61:0b:e7:
ac:95:88:16:f1:43:ab:5a:de:f3:68:26:a1:98:fd:
d1:87:c9:eb:24:99:28:7e:aa:f6:a4:fa:df:18:47:
82:d1:6f:97:09:19:c9:f4:c5:e9:47:49:73:65:37:
83:b6:a0:5b:8b:9c:a8:29:bb:7b:7b:2f:6c:c4:ac:
66:26:8a:3e:84:bd:04:3a:fc:53:f6:31:de:2c:87:
12:4c:75:a4:4b:0a:72:16:d0:79:5b:fa:d2:17:56:
f9:b7:19:79:e2:57:76:3a:72:c2:8c:ed:cc:15:35:
90:e5:55:d9:92:d3:20:50:03:2d:b8:7a:3f:a3:e6:
5b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D5:75:B2:67:69:36:76:4A:BA:58:15:55:7C:6B:00:5B:56:48:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl
X509v3 Authority Key Identifier:
keyid:18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.56.0/21
209.240.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:2c:a2:cb:9f:e8:ca:7f:66:58:6a:cd:fb:4c:8b:5e:e8:4e:
2e:d7:80:70:da:a4:74:94:b1:a5:70:65:73:9b:78:f5:37:3f:
49:f2:83:1f:e3:aa:a7:8d:7a:ba:9e:44:c3:99:67:0e:a2:26:
d8:f0:7a:ff:a7:75:07:4c:9d:65:a9:3a:8b:1a:67:da:7d:3a:
03:95:c0:2c:24:c8:4b:a4:7f:8c:ba:d5:a4:22:fc:6d:33:f1:
42:46:f9:19:ed:b3:44:4e:46:3e:15:12:0a:85:ce:41:55:b1:
b7:c9:88:78:c2:d2:eb:36:10:53:d8:45:12:e8:bf:14:ac:8b:
7b:1f:5b:91:03:af:e3:72:32:02:6f:89:25:5a:18:12:0c:8e:
d7:81:13:33:92:0a:12:a1:54:c1:37:59:85:4c:65:dd:f9:45:
57:3a:a5:04:5a:0c:27:48:5f:0e:6f:55:f5:82:d9:9a:9d:fc:
6d:95:d5:8f:67:60:23:f5:cf:f7:60:7b:e2:82:0b:b7:41:64:
a5:ad:15:8b:29:76:e1:ea:18:50:18:89:a4:9c:52:2c:6c:86:
7b:9a:7b:9a:7f:46:91:ea:ea:4f:8c:8d:98:c8:2b:75:a7:0a:
af:d6:87:dd:57:2a:d2:05:36:f0:9f:38:9f:59:c7:91:9c:68:
8d:a4:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:03 2026 by rpki-client