
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/172e475a-8153-336c-8bb5-c27b6f69a079.roa
File: 172e475a-8153-336c-8bb5-c27b6f69a079.roa (raw, json)
Hash identifier: t55YspcRoGOjLa7Mmfaun4UBxIKr0v0MWnisx5MfYj8=
Subject key identifier: A7:19:E5:49:22:C6:80:69:BC:29:9B:8D:F0:B4:15:01:DC:81:20:51
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584DE2B5DEB24621F5A80A6F7700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/172e475a-8153-336c-8bb5-c27b6f69a079.roa
Signing time: Tue 19 May 2026 13:00:32 +0000
ROA not before: Tue 19 May 2026 13:00:32 +0000
ROA not after: Mon 17 Aug 2026 13:00:32 +0000
asID: 397194
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e2:b5:de:b2:46:21:f5:a8:0a:6f:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: May 19 13:00:32 2026 GMT
Not After : Aug 17 13:00:32 2026 GMT
Subject: CN=797f8ded-170d-42dc-b1ce-f72b1d546025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:0e:cc:76:d5:24:d4:06:b5:e2:53:31:04:
77:85:85:62:5f:4f:98:28:2c:ca:fe:2a:6c:cd:09:
d0:36:db:01:f3:45:1b:96:b4:14:f9:66:f5:ac:5a:
e3:68:30:4c:2e:e8:df:24:98:3e:5f:a1:d5:16:52:
be:62:71:1b:9f:0b:e0:e7:49:00:26:f6:36:69:48:
b4:d4:f7:2f:f4:55:4f:11:93:cd:6d:99:e8:2f:14:
82:8f:15:2b:d7:e7:bb:fa:70:ff:1e:4d:14:d7:ec:
f8:13:af:31:3e:90:4e:d3:82:43:93:07:4b:ed:5f:
fa:8d:be:64:9d:33:b4:7e:be:39:91:97:8e:fb:1c:
e1:a5:79:69:b9:c7:1b:ef:d9:63:35:6d:bb:24:fd:
20:49:10:75:7d:78:3f:f3:01:99:26:74:22:f0:15:
99:c7:1e:cb:be:73:4f:15:fa:23:f1:4b:1f:78:58:
83:fa:0a:a8:1a:7d:d0:56:19:65:28:2d:f0:8e:a8:
47:d3:ea:6d:02:c3:bb:cb:28:6f:e2:4f:28:5b:ca:
eb:a9:78:df:c9:53:b6:f6:f7:8f:9d:64:d1:28:7f:
14:c6:32:4d:82:25:63:4d:50:f3:b2:c3:37:93:5b:
ef:9f:9e:a0:45:31:80:f5:09:75:0c:e6:a1:70:1b:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:19:E5:49:22:C6:80:69:BC:29:9B:8D:F0:B4:15:01:DC:81:20:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/172e475a-8153-336c-8bb5-c27b6f69a079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:20:e6:ad:0b:95:1b:65:af:5d:03:f2:be:a6:55:31:48:6b:
72:fd:a8:b2:80:3b:29:92:34:f0:f8:44:01:62:df:1d:0a:9a:
47:d1:ff:d8:da:11:c8:48:ee:a7:5e:ee:bd:6b:9b:42:f4:9a:
21:ad:d2:11:8a:01:1b:82:cc:89:36:50:61:21:1e:b0:16:c7:
65:5d:e4:81:ff:fa:5e:b1:9e:a4:4c:ff:da:27:6a:cc:31:67:
5b:ee:bf:65:6b:fd:f4:d4:05:29:3b:7e:0c:85:b3:39:00:32:
8a:9e:71:0b:71:ec:48:49:f6:d3:b0:23:2c:7c:dd:84:aa:d0:
87:bd:92:0b:c7:2d:41:6c:93:52:f0:dd:ae:ab:87:4c:ce:e2:
45:44:82:6e:ea:33:eb:a1:db:c9:6f:d7:26:98:69:c0:4b:1e:
31:01:fe:09:5e:14:e5:a1:59:d3:12:db:7f:34:9f:6c:97:61:
d4:ca:21:16:18:b0:e6:d6:72:0f:22:c2:05:95:bf:48:72:5a:
2f:ee:3e:5b:2f:8b:92:01:1b:f2:b4:9a:ab:b9:90:d8:e3:ac:
1b:bd:65:83:f1:b3:9a:ab:cb:09:3a:38:7b:64:b4:f6:64:b5:
76:c5:b6:d8:66:08:47:41:ce:92:3b:d0:f1:95:12:6d:90:43:
bb:38:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:19:20 2026 by rpki-client