
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13b686eb-676e-32c3-9236-13a6e2f875c4.roa
File: 13b686eb-676e-32c3-9236-13a6e2f875c4.roa (raw, json)
Hash identifier: zM5K74IEZk5vh8tasKRPyDXAXkna39+0MH3HgdZKCnM=
Subject key identifier: 92:2A:D5:3C:8A:E2:AD:5C:9E:26:13:BC:42:DE:FA:9E:34:91:E9:D0
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584CF878D6F6B63E73C543536E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13b686eb-676e-32c3-9236-13a6e2f875c4.roa
Signing time: Tue 24 Feb 2026 15:18:35 +0000
ROA not before: Tue 24 Feb 2026 15:18:35 +0000
ROA not after: Mon 25 May 2026 14:18:35 +0000
asID: 396576
IP address blocks: 209.112.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f8:78:d6:f6:b6:3e:73:c5:43:53:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 24 15:18:35 2026 GMT
Not After : May 25 14:18:35 2026 GMT
Subject: CN=b8e8d72f-fcd0-45cd-96c4-759ddee24329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:be:f6:ed:7e:dc:15:7d:e9:d8:86:41:9a:
da:17:5c:04:1a:85:64:0f:81:c0:0d:82:ee:ca:08:
1e:97:b6:ab:6c:9a:c7:3f:66:3a:36:e5:1a:99:52:
9b:fe:ca:52:c0:22:e9:66:38:01:e6:63:32:ed:2f:
0e:d9:ef:ef:e2:78:19:6f:37:8e:b0:75:3d:99:67:
e0:2d:1a:55:a7:5b:7d:03:e9:50:c4:3f:83:89:b3:
1e:d1:0a:8d:c0:9f:e6:aa:af:27:f2:24:a8:e5:dd:
38:39:2a:5e:0d:2b:56:b6:3b:e6:53:4d:2a:d6:36:
74:8d:87:91:6c:50:aa:6c:f9:58:02:1a:8f:70:ed:
37:32:d1:15:84:09:17:10:ac:cf:d4:88:8b:6d:f0:
cb:db:c5:bd:c7:21:a4:69:fe:7b:ae:98:e1:d3:43:
cb:fe:05:5a:75:28:79:be:6e:43:8c:19:4f:43:71:
85:6a:5d:7f:99:55:51:bc:e1:9f:5a:66:b4:60:bc:
6c:19:3d:86:72:ad:c7:7b:bb:72:2c:1e:dd:c1:2b:
8d:e9:11:ba:fa:8a:78:aa:68:a1:9d:8a:dd:48:31:
f2:91:00:90:1e:40:0f:98:45:e8:f2:af:93:ba:03:
14:be:76:56:c8:4e:11:0b:c6:4d:51:6c:f8:93:f0:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2A:D5:3C:8A:E2:AD:5C:9E:26:13:BC:42:DE:FA:9E:34:91:E9:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13b686eb-676e-32c3-9236-13a6e2f875c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:6f:d1:76:37:fb:ac:9f:f1:d0:fa:ed:10:a0:e5:e5:90:c1:
2c:e0:39:4c:e3:c9:9b:f0:31:6c:20:c4:3d:d8:08:69:ff:2a:
ab:4a:e1:53:92:24:28:42:74:2a:fd:b9:df:46:ed:c5:10:89:
5b:7d:dc:11:77:b7:ec:d7:96:2d:3e:f4:28:7f:01:b5:6f:46:
e8:24:09:da:ee:19:ee:a9:a1:ed:47:3c:0b:fe:78:2b:d5:26:
a1:b9:26:c2:7f:95:2b:0e:64:ac:58:fb:78:6c:d2:70:01:02:
ac:aa:78:76:43:a3:13:33:ad:2b:c6:3e:8e:4f:7d:b3:11:c8:
22:ee:ea:78:f3:9e:e0:8d:67:89:45:63:c7:a0:5b:bf:ac:d7:
de:79:04:d7:19:d9:3b:64:c2:e2:6c:4e:be:b8:20:9c:6f:e9:
d1:f4:fc:da:95:29:da:9e:04:f2:1c:ae:22:ae:34:e0:4f:b5:
a6:f0:97:40:65:f4:9f:63:89:54:1c:37:77:d8:0b:a2:e9:b7:
fb:2a:9c:25:4a:36:a6:e0:37:b1:71:78:ab:99:a9:64:63:6e:
a7:a9:e9:70:db:51:43:8c:84:e9:58:7f:7b:fb:c1:a1:b4:78:
ca:9d:53:88:39:66:f6:1e:94:22:38:12:ef:40:d7:dd:de:2e:
2c:7c:9f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:18 2026 by rpki-client