
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f4be87c-4600-35bd-b087-ad38f32fe278.roa
File: 5f4be87c-4600-35bd-b087-ad38f32fe278.roa (raw, json)
Hash identifier: OAu2SdMDmLyxT8rtp+AHN+DWMoEZe49FEOl4hDfwxb8=
Subject key identifier: E6:EA:D3:50:68:44:B7:54:E1:4B:74:2A:74:D7:77:2B:08:32:5F:78
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584CF878DAE21A18ECDDC359F780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f4be87c-4600-35bd-b087-ad38f32fe278.roa
Signing time: Tue 24 Feb 2026 15:18:37 +0000
ROA not before: Tue 24 Feb 2026 15:18:37 +0000
ROA not after: Mon 25 May 2026 14:18:37 +0000
asID: 396591
IP address blocks: 209.112.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f8:78:da:e2:1a:18:ec:dd:c3:59:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 24 15:18:37 2026 GMT
Not After : May 25 14:18:37 2026 GMT
Subject: CN=85b4d801-d3a7-4e17-bfb6-2fe8a6262c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:74:a7:bd:b3:f3:10:cc:1d:89:d6:24:17:
9f:0f:25:65:3f:c6:03:e3:1c:c0:1d:41:2f:62:cd:
7a:89:42:c6:c3:ad:98:31:b7:60:1d:0a:c6:ad:0d:
6e:f0:5d:43:aa:ea:ed:a3:b6:24:dc:74:b7:a2:42:
b3:30:73:1c:f6:7c:1e:43:1c:04:e3:a9:c3:24:83:
9b:b1:8c:ac:74:01:14:bd:c9:b2:0c:f0:90:b5:ea:
91:62:88:1b:77:2d:9f:1d:a5:eb:2b:63:88:af:8e:
52:09:f1:3b:b8:26:7e:15:31:f0:76:7f:b7:d1:2a:
13:b3:45:2f:98:0e:b1:7e:51:5b:ae:5a:83:f3:c4:
7d:bf:0a:5a:5a:b2:d4:5d:6a:da:cd:28:f1:e1:1e:
2f:86:b9:83:39:3c:25:d7:d8:7c:b7:3e:d4:4c:29:
aa:ca:93:f0:80:96:0d:0a:00:83:d0:f7:76:09:93:
33:a7:a7:96:99:ec:79:0f:21:7b:e0:3e:7b:91:b9:
cf:41:73:e9:77:64:2f:ba:15:af:ad:2e:08:f1:56:
33:00:f8:cd:c6:61:3a:9f:ea:1b:c2:13:8c:95:6c:
c9:d4:e9:4e:ce:e8:22:7e:51:28:3a:3f:ca:ae:1f:
1a:0d:62:1e:14:dd:52:87:f9:87:a3:74:ae:5d:ae:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EA:D3:50:68:44:B7:54:E1:4B:74:2A:74:D7:77:2B:08:32:5F:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f4be87c-4600-35bd-b087-ad38f32fe278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:8e:ef:94:90:b0:f3:d3:62:14:2d:b8:af:c8:d1:f3:18:b1:
85:b3:37:e2:bd:11:c3:8e:57:bc:b4:d6:1a:fa:6a:e2:f3:95:
12:db:92:16:57:e3:07:27:77:ed:6f:a2:69:ae:6a:b5:c5:45:
4a:27:a6:e8:c7:ef:82:b7:72:37:08:f2:a5:98:53:46:ae:bd:
7c:e9:7d:b9:c3:4c:68:d8:4a:8a:0f:3c:01:06:a4:e5:61:72:
4a:72:6d:cf:d3:28:3a:66:d4:9d:8f:53:5e:e4:58:86:eb:44:
98:be:2e:12:1b:1a:a1:29:ea:04:41:2f:1b:b4:59:cf:05:d5:
d4:07:28:90:a2:b5:43:6b:aa:3e:85:33:e9:10:77:e1:91:ef:
7f:4d:81:9b:f8:74:fe:87:05:04:95:1b:21:20:3f:c4:2d:b8:
82:2b:97:1c:00:79:4a:78:eb:15:f1:a3:e5:38:f1:a5:d1:f9:
6d:52:39:0b:5b:10:33:c6:20:64:c7:89:ee:61:f5:fd:15:42:
30:95:a6:a2:95:d6:8c:7e:ec:b7:3c:90:af:3d:c5:6e:f1:88:
af:14:91:9d:7c:d1:80:67:d0:cd:6f:b4:31:70:93:6a:40:e2:
1c:df:e9:5f:a1:a7:b0:15:19:fa:19:74:23:32:d3:8c:b4:25:
b6:81:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:29 2026 by rpki-client