
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/40a3da2d-d51c-3714-9f44-526748cc77d7.roa
File: 40a3da2d-d51c-3714-9f44-526748cc77d7.roa (raw, json)
Hash identifier: j/cmC1s5Fg5IQ7KOpLgLpajY7Vz6lRJZ3UIbE1IS9zg=
Subject key identifier: E7:70:C1:7D:EA:9E:68:99:13:E0:5D:91:82:7C:97:6A:27:DC:E1:E4
Certificate issuer: /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial: 010D0C9F4328584D0647A360FD7B7F1C87220980
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/40a3da2d-d51c-3714-9f44-526748cc77d7.roa
Signing time: Sun 01 Mar 2026 14:00:41 +0000
ROA not before: Sun 01 Mar 2026 14:00:41 +0000
ROA not after: Sat 30 May 2026 13:00:41 +0000
asID: 13875
IP address blocks: 204.235.252.0/24 maxlen: 24
204.235.253.0/24 maxlen: 24
204.235.254.0/24 maxlen: 24
204.235.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:06:47:a3:60:fd:7b:7f:1c:87:22:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : May 30 13:00:41 2026 GMT
Subject: CN=5d94c99c-86f5-4aa1-826d-a22491312168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:a5:42:76:1a:1d:55:e1:c9:2b:7c:1f:0c:
12:2f:07:50:a3:49:fd:5f:71:ff:72:ba:f3:71:a2:
a5:b1:c8:f2:f7:b7:b3:ce:21:14:51:da:ba:d9:dd:
38:ec:e7:bd:7d:41:1f:80:44:84:c1:d0:5d:d7:d0:
93:61:95:03:41:11:f8:db:56:57:80:69:a6:8d:27:
33:32:25:a8:d0:cb:7f:e3:ac:81:6f:8e:35:95:97:
6e:c5:64:a1:bf:1b:17:b9:a5:1b:84:a2:5b:f5:ab:
32:1a:26:6c:15:49:2b:74:7c:af:49:7e:b2:66:c1:
9a:72:1a:68:96:d0:56:e8:35:f3:d7:1b:f4:57:06:
d0:e0:27:32:17:02:1a:84:c8:3c:28:cb:3f:32:e7:
45:0e:02:be:62:fc:05:af:37:33:e4:5f:7e:4f:66:
9d:9c:a6:d1:bd:68:8f:ff:fc:f3:54:8e:67:8d:72:
ce:c1:96:89:1d:f9:c0:d6:84:7f:4b:e9:72:ed:db:
fb:f5:28:54:8e:81:e1:02:89:dc:e5:07:7a:45:65:
78:f4:c1:87:82:5a:24:32:a0:24:c9:48:5c:f4:1e:
b4:d2:f3:24:62:92:30:02:77:5a:8c:f0:a5:57:c0:
a4:4d:15:9a:69:5b:54:24:e7:fd:59:64:7f:64:65:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:C1:7D:EA:9E:68:99:13:E0:5D:91:82:7C:97:6A:27:DC:E1:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/40a3da2d-d51c-3714-9f44-526748cc77d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
X509v3 Authority Key Identifier:
keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:f7:97:8e:ed:ca:5d:63:c9:c9:66:51:8b:18:08:22:da:8a:
4d:5c:33:94:55:bf:5e:95:85:1f:76:f9:15:0c:e7:6d:4d:c5:
4a:a6:f3:c6:2e:8a:1f:62:61:1c:e8:42:fb:d4:c1:e7:9b:c7:
f9:11:44:ee:3a:35:25:cb:d4:17:16:49:1f:d9:ad:cb:aa:c6:
d6:93:ad:d4:ad:a4:05:60:da:01:63:d7:44:68:1c:81:3d:8b:
dc:b2:54:93:31:d8:99:d1:f7:31:1e:69:e1:50:34:58:af:4d:
14:92:b1:73:68:33:84:d7:6c:28:49:b7:0d:58:a4:37:71:4d:
b5:cb:df:6e:56:b4:7b:c1:57:ca:39:a2:b1:88:2b:a8:79:61:
ca:d9:dd:cf:82:ea:f8:4a:04:d5:dd:66:9a:45:0a:e4:64:04:
57:8d:cb:8f:d0:f1:39:bb:f6:53:a4:61:48:fa:62:e3:08:22:
2a:f0:5c:c6:c1:59:b7:9f:d0:57:a8:8d:ea:f9:7a:8c:cb:3a:
02:df:d0:ad:f8:ad:04:09:83:54:46:7b:45:3b:05:5f:2c:f3:
9f:9c:16:c2:70:67:23:d9:63:0b:45:e4:79:82:a5:9d:b0:65:
cb:56:d5:75:f3:37:91:d2:0c:6c:17:50:a6:7f:d3:8b:3c:86:
5b:0b:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:42 2026 by rpki-client