
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/028a86c8-1e2b-3873-a76e-270be9acc827.roa
File: 028a86c8-1e2b-3873-a76e-270be9acc827.roa (raw, json)
Hash identifier: 4k+dhdnQKLHY2GlkJcHHXa4NZekY5Mk8okcr/VFjU/k=
Subject key identifier: C8:DA:D7:DB:29:E8:BD:AB:A0:2C:74:69:2A:C4:FE:9C:B6:61:74:45
Certificate issuer: /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial: 010D0C9F4328584CCFD7395537B2C6090373C500
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/028a86c8-1e2b-3873-a76e-270be9acc827.roa
Signing time: Tue 10 Feb 2026 02:00:31 +0000
ROA not before: Tue 10 Feb 2026 02:00:31 +0000
ROA not after: Mon 11 May 2026 01:00:31 +0000
asID: 1048
IP address blocks: 192.139.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cf:d7:39:55:37:b2:c6:09:03:73:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Validity
Not Before: Feb 10 02:00:31 2026 GMT
Not After : May 11 01:00:31 2026 GMT
Subject: CN=a2d91b1d-0f3f-4563-95fc-c600a1db71b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:72:df:1e:d0:d9:6c:28:54:07:50:26:60:
b8:d2:87:1a:7a:db:fb:a7:f3:00:4b:cc:6b:25:72:
3f:96:d3:6c:6f:52:10:ed:c5:f2:71:3b:c9:8d:54:
4f:90:b8:bd:bc:69:81:9d:1d:d4:ec:65:51:3b:50:
cc:7e:84:f5:15:72:57:cf:b8:e4:40:68:4e:b7:f0:
0e:8d:11:d2:10:29:68:62:c2:0c:60:51:56:42:b9:
9d:b6:f0:44:36:1a:4c:f7:25:4f:ae:e6:b8:4c:a6:
a7:08:af:19:90:a7:f7:cf:1f:c0:0b:a6:7a:21:57:
58:e2:a5:c6:28:82:ee:12:ce:bd:98:a3:0c:03:7d:
77:52:ab:30:52:9b:27:26:aa:32:c7:c8:13:7b:e9:
c0:b0:90:0f:8c:6d:07:c3:5b:af:e8:93:e6:ac:70:
95:94:91:db:01:25:6a:cd:bc:b6:f8:7f:7e:f2:24:
59:a8:aa:0f:58:55:eb:04:91:f7:56:b4:e5:bb:7f:
e6:c0:ad:63:2c:69:77:e4:bc:be:cc:5c:74:25:c6:
e1:fe:02:e7:6e:1e:46:8d:dd:30:20:1f:cb:62:72:
0d:07:da:34:00:a6:eb:16:b8:f0:e5:15:4d:3d:52:
0a:da:06:fb:24:9a:16:d1:88:bf:15:9a:fa:20:e8:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DA:D7:DB:29:E8:BD:AB:A0:2C:74:69:2A:C4:FE:9C:B6:61:74:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/028a86c8-1e2b-3873-a76e-270be9acc827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
X509v3 Authority Key Identifier:
keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.139.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:19:27:6b:d5:a3:c4:a5:cd:b9:f7:94:f0:e8:ed:72:65:9f:
b4:20:52:26:41:e5:6c:e6:eb:b7:dc:22:0c:5c:85:7c:32:30:
c5:00:28:83:5f:21:6b:ce:f4:ed:33:7c:05:79:75:8b:93:86:
58:23:fa:6e:43:c1:06:41:11:f1:16:ad:55:98:d0:ae:ef:ce:
95:f1:19:61:83:6c:d3:7f:4f:8e:4f:01:c6:20:4e:1e:19:6f:
a2:80:ad:90:3c:81:70:77:37:1c:bc:fc:d2:7a:d5:8f:eb:db:
f3:d4:5d:85:26:92:1b:97:d6:20:39:19:8e:d3:ca:8e:29:44:
ae:f1:57:ce:37:c3:56:78:33:6d:b9:34:87:22:21:5c:fc:30:
c2:89:35:b6:26:9c:20:9a:ac:16:89:3c:55:b9:fd:ab:6e:51:
65:b2:a6:85:2b:d6:09:b4:08:92:d9:8f:20:ac:a9:6b:58:35:
bf:4a:e0:8f:d5:3e:7b:af:fa:25:44:18:b5:72:02:a1:ee:99:
1c:81:d3:e7:8b:35:0a:5e:e2:78:e7:da:60:4c:71:83:30:f8:
30:5f:bd:be:9e:ed:1a:54:84:89:94:ff:8e:e3:3c:86:b8:42:
8b:f2:df:bd:87:1c:25:cd:ad:ee:04:b3:fd:0a:c0:d3:a1:a9:
7c:23:03:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:17 2026 by rpki-client