
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa
File: 67477eed-64e1-395b-a913-8b8a438ebac1.roa (raw, json)
Hash identifier: aK8hSpnukQEGETiemutwh64f/RherKpQZxx9aGdXuhQ=
Subject key identifier: 98:B1:CE:87:A3:52:AE:16:0B:AB:5D:74:10:AD:0D:15:73:C0:DE:C0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584D83CA93DEA4CA5658E52FDB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 36522
IP address blocks: 209.71.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:93:de:a4:ca:56:58:e5:2f:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=3c5db6a7-845c-4358-b360-4543b5eed605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:23:ef:93:88:1f:45:92:59:21:ba:4d:df:
08:3c:35:9f:97:4c:22:3f:6f:a8:5e:e8:f2:35:bd:
42:ff:6e:a2:f9:37:7d:cd:b4:ab:a7:9d:84:3d:3f:
c9:da:e5:e0:40:64:a0:da:a2:1f:b1:26:5c:92:b4:
07:f9:0a:02:80:a3:f7:26:8b:df:88:74:d9:da:1d:
9f:87:3f:9d:82:b5:77:42:c0:38:c3:44:0b:1b:bf:
62:0d:8b:37:0c:08:ff:4f:48:62:c0:2e:20:dd:91:
2e:1d:f9:73:2e:f3:9b:ec:42:1d:47:bb:26:e4:d3:
1c:03:54:d6:ae:86:79:3f:25:be:58:68:71:35:72:
a7:c4:a6:6e:fc:90:22:c1:69:7e:a9:7c:fd:3a:33:
00:31:77:d4:8d:f6:26:d4:63:28:16:a4:40:41:16:
7e:55:29:a5:39:f3:52:a0:93:11:7f:7d:fe:2c:a8:
f3:61:34:82:22:93:c1:36:be:b7:d3:99:7e:36:f9:
c5:f9:9f:a9:60:f2:39:ff:08:a1:50:b1:15:9a:71:
83:77:91:e7:0f:8d:a9:3c:05:41:1d:8c:5c:3a:0a:
cc:61:ce:9b:c9:ab:6f:0f:ef:fa:b3:d5:c5:11:c3:
7b:72:96:cc:c7:85:ab:a1:00:b1:55:d1:7f:d0:e2:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B1:CE:87:A3:52:AE:16:0B:AB:5D:74:10:AD:0D:15:73:C0:DE:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:e8:cf:bd:a0:bd:c9:4b:9e:4a:6b:a0:b4:c1:42:97:c8:7d:
30:61:d7:c6:f3:b6:bb:7d:12:2c:26:00:ca:1a:5c:83:e9:1c:
85:31:de:0b:5f:b4:8a:2f:9f:8f:13:d7:de:5c:de:bb:9a:04:
05:9b:f0:39:01:88:f0:d3:01:1e:0e:62:63:9b:54:21:9b:23:
66:89:ae:ce:f2:1b:14:6a:44:c3:4f:58:02:eb:e9:d1:16:80:
66:63:21:b0:44:48:24:4a:3d:cd:f1:2b:60:a6:b9:c8:5c:49:
66:50:26:26:2a:f0:e7:55:98:40:11:be:1f:7e:ec:e0:37:37:
11:d5:06:fc:fc:ef:d6:99:3d:13:23:1f:63:6b:4a:fa:a8:82:
29:f5:f0:db:71:e0:97:d3:23:be:22:51:8d:d4:ff:3a:29:6a:
91:17:d8:7a:d1:35:1f:a7:49:fc:a0:11:f8:13:06:c0:cb:9b:
79:df:5f:2c:25:6f:b6:29:b4:77:0c:9d:22:4f:a3:d9:1b:ce:
cd:66:7a:c2:e0:25:9c:77:5d:33:01:ce:d3:c8:c7:9c:f5:6d:
c6:56:e3:f1:96:f5:b7:d6:67:19:64:a8:49:a0:5c:1b:8a:f8:
fc:75:f0:fb:24:33:30:9c:e3:88:f8:62:60:99:be:00:59:f6:
33:19:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:50:56 2026 by rpki-client