
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa
File: 523ef6f6-d440-330b-aad0-be8d682f4c42.roa (raw, json)
Hash identifier: hjUSlojSg2nzLx3yj8Rp7VQgCKj5x5cdS5Yu7azihJc=
Subject key identifier: B3:AB:0E:F7:A5:05:48:15:44:A0:5D:99:49:5E:BA:96:09:C1:F3:B2
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D021791B7C67F888363DB2EC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 20431
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:91:b7:c6:7f:88:83:63:db:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=b9728095-9ebb-466d-bb0c-af4be9081708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:01:3f:a3:b0:f9:f3:58:f8:6e:fd:fd:5a:
c8:0a:a3:79:5a:1e:84:cb:2a:b8:b9:7a:3b:c0:d8:
38:46:bf:23:13:10:c3:7a:38:ef:49:c1:a7:98:c0:
7a:a2:0a:fb:31:bd:52:bf:36:6c:75:4c:99:c8:8c:
6a:ac:39:1e:a0:8c:d0:e6:b9:22:ad:6b:f8:e2:ab:
84:86:3a:b9:04:af:ed:67:bd:de:17:eb:47:c1:14:
05:2d:e8:5c:f3:50:31:15:f9:a6:2a:30:c2:d8:a1:
b4:2f:6d:2c:68:be:2f:02:79:a2:b4:71:c1:a8:6e:
4e:0a:65:99:2c:ff:22:70:29:cc:62:32:54:69:2e:
0e:d9:18:2e:26:ee:97:cc:62:d0:79:c4:32:21:5a:
36:08:4b:44:1a:46:0b:7b:50:e3:af:1f:f3:de:61:
98:ac:62:6d:33:33:95:a6:f0:a8:c1:21:af:cb:4b:
d4:80:7f:41:29:ad:fe:e9:62:8b:ce:06:fd:8d:da:
12:58:43:a6:e9:0b:b6:f9:c2:60:3b:aa:19:96:fc:
86:c1:cb:0a:97:21:4e:90:74:a4:d2:1c:16:cd:9f:
41:53:2c:b4:03:66:23:77:d9:71:34:06:48:67:87:
3c:f9:e8:a0:6e:52:1b:b7:8c:44:63:fc:c7:c9:ff:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:0E:F7:A5:05:48:15:44:A0:5D:99:49:5E:BA:96:09:C1:F3:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:55:13:8d:25:ab:67:49:54:a5:8f:79:0e:c7:3f:b4:92:17:
fb:58:60:e7:a9:05:77:d6:2d:e1:e3:d7:a9:2c:80:6b:e1:e3:
25:71:64:66:7b:64:61:ce:c5:49:9c:c0:2d:69:7e:d5:0e:5b:
8a:4a:82:f1:0f:b4:f5:b7:e1:0c:5d:de:13:88:5f:78:16:a5:
07:df:8d:de:10:1b:66:72:d1:28:17:95:07:c4:22:7e:6e:09:
06:7f:94:2b:9a:67:f9:6b:67:b8:ce:bc:85:f9:ad:e7:68:c5:
c7:04:3f:02:d9:22:d6:bd:59:18:25:a8:15:b7:b4:61:a5:fa:
5b:63:8c:37:84:fe:e0:39:79:48:8c:21:5e:b2:75:45:1b:ee:
37:e2:59:51:90:c0:c9:2f:27:5d:18:cd:aa:4a:14:3f:41:3c:
ab:f4:5c:17:fa:01:9e:56:6c:a8:4e:04:3e:34:3b:58:63:46:
9d:78:3f:3c:82:e3:10:e7:1a:dd:ca:8f:24:30:8f:d5:b8:df:
2e:43:ef:3a:e5:0b:83:55:38:a9:bc:e1:6f:b2:39:ef:93:14:
84:3e:89:0d:33:5a:48:7c:9a:ee:68:9d:1b:65:c4:06:67:38:
79:f0:f7:e0:c2:a0:ec:dd:ee:54:d8:0e:53:61:53:b8:78:12:
32:10:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:56 2026 by rpki-client