
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa
File: 9e385ca2-c418-3d2f-acb5-00a220501733.roa (raw, json)
Hash identifier: F1QtNwchk4mH+6rDd1qUvKDkF3gPS7Q0pLYH7Rb/axs=
Subject key identifier: A8:37:11:09:9B:FA:0E:A9:E6:C1:EE:93:72:2B:E9:0F:B6:DE:D2:46
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F4328584CD99CCC3378365F2B8989C880
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa
Signing time: Fri 13 Feb 2026 14:00:41 +0000
ROA not before: Fri 13 Feb 2026 14:00:41 +0000
ROA not after: Thu 14 May 2026 13:00:41 +0000
asID: 19795
IP address blocks: 208.85.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:9c:cc:33:78:36:5f:2b:89:89:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Feb 13 14:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=dd616116-c035-44f7-8355-b473685992b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:ad:b6:82:69:d7:90:3f:31:91:25:31:42:
c8:ef:ba:8c:dd:92:fc:0b:62:64:d2:21:72:93:7a:
87:62:49:0f:f4:6d:e9:70:7a:aa:06:29:45:1c:01:
4c:18:59:54:96:b9:0a:e3:9d:cb:e8:dc:b7:45:3c:
37:2b:d5:16:21:eb:bf:c2:ea:cf:a5:1b:09:7e:a2:
af:59:cf:52:38:12:53:a8:62:f7:36:d8:c0:d0:9f:
97:85:99:44:11:c6:ab:4a:b1:03:ed:00:a5:36:74:
87:72:d4:ed:6b:a8:7f:ea:ab:71:ba:1f:79:ab:41:
75:ee:2f:a3:7a:c6:57:39:6f:de:fe:21:72:44:97:
f6:ca:3a:ac:13:22:41:48:76:93:49:57:97:c0:1f:
5b:69:3a:71:cc:5c:8b:ca:20:98:d1:5f:2e:01:58:
8e:eb:1a:77:de:d1:87:e7:f3:91:6f:99:22:af:21:
93:52:e5:b6:a4:ba:d3:d5:63:fd:60:99:4f:3f:d1:
4e:ca:3c:75:79:f1:e0:85:9f:32:c8:5b:1e:06:db:
5f:7e:12:6e:db:ce:5a:73:7d:63:03:00:7e:7b:a9:
a3:8f:9d:c2:0a:b5:31:b3:be:a4:56:ff:44:2b:7a:
7b:3e:de:52:5b:7d:39:f9:16:b9:79:9b:6d:1c:85:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:37:11:09:9B:FA:0E:A9:E6:C1:EE:93:72:2B:E9:0F:B6:DE:D2:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
208.85.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:21:dd:42:68:03:1b:7c:a0:70:43:fb:c5:7c:c1:7e:d7:4e:
56:a1:ae:f1:c2:56:de:4a:78:2d:9a:ba:12:2d:40:55:f7:56:
55:ba:c0:04:59:d8:bf:c9:5d:32:de:1b:28:fc:37:57:d3:7d:
da:d3:74:0f:d9:62:9c:42:5c:98:93:8e:79:c2:8a:d0:6a:c0:
68:8c:1b:6d:14:33:7b:d0:5c:76:a4:07:93:11:72:67:5e:3a:
c3:b6:e9:ab:df:0b:f5:4c:7b:64:d9:66:8c:41:22:f2:7f:15:
60:df:f0:d5:96:0e:7d:c9:d4:99:2f:ac:00:85:43:d8:ce:75:
07:0d:24:be:45:f5:69:63:4f:5e:4c:dc:24:23:a4:b4:ed:30:
b4:37:0d:df:d8:02:05:d4:6f:6f:c8:ed:53:bf:64:89:4b:42:
68:8f:15:fc:77:20:e3:b5:50:94:43:72:62:a1:34:89:f3:29:
3f:23:43:af:35:e5:1c:42:c1:8f:ba:8f:5f:c6:36:f3:01:ea:
88:36:9c:43:57:a8:26:15:b6:2c:49:e1:0a:ad:fd:86:71:4f:
98:a6:2e:54:63:2f:65:da:5a:f2:08:1c:dd:5f:f9:35:aa:07:
82:19:de:e6:0d:61:06:9c:ab:8e:f4:a1:a1:06:8a:b4:d0:82:
ed:2d:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:29 2026 by rpki-client