
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa
File: 5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa (raw, json)
Hash identifier: rwC2sIMA4xRryFnEByBkpNc2+uFDIbNsv8Bfnc3kOQI=
Subject key identifier: F0:10:D1:48:8B:66:FB:C5:EE:2D:D3:34:C1:5A:B9:8C:AD:4A:BA:4B
Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial: 010D0C9F4328584D60E4F3460C5D221D958A9500
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 32889
IP address blocks: 96.60.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e4:f3:46:0c:5d:22:1d:95:8a:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=4cae63cd-fe5a-464c-9728-a8ebb65539ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:09:48:7e:99:9c:ad:96:1c:82:6a:86:5b:
d9:f5:d6:5f:b2:2e:0f:d6:9d:3d:e0:36:65:f3:34:
dc:30:05:b2:73:80:a6:b5:23:98:59:83:86:e2:4c:
a3:8e:6f:c5:ae:77:75:8c:0f:b6:e9:0f:4e:24:2a:
61:0b:64:50:75:07:01:69:53:60:e5:9f:72:4a:1e:
b3:7f:b6:a8:84:5a:51:70:48:22:b7:42:e9:59:ee:
2a:26:b3:11:b9:61:a7:2d:1c:e8:20:64:54:70:8c:
f4:69:b6:26:0e:c0:3f:a8:a7:fb:ab:1a:d0:96:b0:
49:16:aa:8c:12:dd:57:cc:01:9f:9e:66:00:38:3d:
6e:0c:b3:53:e8:c8:a8:d7:62:66:36:56:8b:fc:25:
ff:e1:59:db:98:86:2c:4f:43:2a:02:b9:0c:0f:71:
c9:49:4c:3f:01:d9:85:b4:71:03:61:de:84:30:60:
ca:7a:d8:8c:77:03:f5:ad:02:ef:65:c8:a9:7f:d2:
e9:9a:ff:fb:32:9d:50:9e:f3:67:2f:55:e2:ef:32:
5c:1d:96:b2:94:b5:d2:1d:5e:51:ec:53:65:cf:ed:
c7:70:84:e9:02:2e:cb:6e:2d:a2:63:24:c3:ca:08:
d7:33:16:d9:ba:27:9f:ca:8b:fa:25:bd:b8:f5:2b:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:10:D1:48:8B:66:FB:C5:EE:2D:D3:34:C1:5A:B9:8C:AD:4A:BA:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
X509v3 Authority Key Identifier:
keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
sbgp-ipAddrBlock: critical
IPv4:
96.60.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:bb:05:f1:e7:7b:07:fc:1f:96:3e:fd:ca:b7:0d:2f:7e:dc:
30:00:0e:24:20:22:66:a8:e9:42:76:21:ca:d6:00:a3:ed:fd:
54:11:db:c7:fd:2a:9e:3c:45:43:49:71:0b:b8:11:49:d1:6e:
69:0d:4b:7c:4d:d7:4f:9e:b2:30:8a:26:71:80:80:52:5c:b4:
8c:70:1d:fc:57:5f:d1:06:4c:e4:50:07:44:e6:51:c8:6e:de:
0f:2b:f3:12:6b:82:b7:58:13:e7:5c:fb:78:66:5d:c9:46:15:
06:89:7d:0c:ba:8b:de:c7:f9:e1:10:c9:e0:e0:ba:a0:a4:e6:
c4:b6:b9:d6:c9:6d:29:6e:1f:05:7e:36:69:7c:82:3a:db:32:
90:67:05:59:98:f0:c4:b6:1b:3a:e9:db:bb:16:2f:e4:bc:d2:
7f:5f:9f:71:f4:85:11:8e:70:a9:79:33:55:6b:38:13:5b:59:
e3:d4:e8:da:ee:8e:8c:01:a6:d5:89:21:68:14:e0:02:93:07:
44:46:2a:b2:90:1a:d3:f2:f0:07:95:72:d8:ac:51:7b:ea:04:
98:67:54:8e:b4:4f:16:28:1d:19:dd:01:bd:03:1e:98:40:35:
43:c5:51:b6:3a:b4:c3:f7:8e:c8:9e:78:a9:16:4d:9c:72:f3:
1d:de:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:13 2026 by rpki-client