
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b28980a-5d28-3be0-806f-762cfd98334a.roa
File: 7b28980a-5d28-3be0-806f-762cfd98334a.roa (raw, json)
Hash identifier: b0sqvVSigj0u7McvyXN0Zz+rJwzxBrOlBG+jCtxhv7k=
Subject key identifier: 3B:CF:E1:D2:10:D8:62:A2:66:1B:5B:2D:F8:14:CC:B6:62:D4:8C:98
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D0217BB9E4F536B2A04F256A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b28980a-5d28-3be0-806f-762cfd98334a.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 25485
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:bb:9e:4f:53:6b:2a:04:f2:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=db5897da-77ce-4949-b003-a34a69e352ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:52:d1:a8:9e:aa:35:7e:10:ca:c8:94:3d:
2f:ad:6e:17:18:06:92:df:ee:b8:48:13:0e:8a:a6:
6c:bc:5a:07:50:fa:d0:87:af:c7:ee:75:53:0d:f7:
dc:f9:73:91:e7:b8:fa:8e:5f:87:d8:42:bf:8c:f7:
ff:00:ed:ba:99:52:aa:69:99:6c:0d:a0:3c:eb:71:
11:15:82:41:36:ba:9f:59:78:04:00:aa:25:d2:e6:
23:62:b2:4e:00:49:8c:3e:d0:29:be:e4:c1:89:42:
3a:93:50:0b:86:a4:10:54:02:af:be:d3:c7:10:c3:
a8:11:43:d5:f9:a1:4c:b6:1f:98:76:b2:c6:44:c0:
00:b4:19:ae:42:fa:b8:3e:cd:0f:7c:ec:b5:b4:ab:
c7:c4:3c:87:2d:ac:52:34:da:0b:cb:88:9f:99:9d:
0b:cd:8e:39:ec:b1:0e:7c:4c:56:8d:8a:93:e5:4a:
36:a7:74:5f:c7:58:00:22:b8:a6:d3:b1:95:6b:c2:
0c:02:b6:af:62:f3:cf:5b:40:22:0f:5a:9a:a3:65:
b3:82:08:dc:3e:d3:8a:41:d2:e6:f7:07:3d:2b:fe:
6b:64:c8:6a:66:53:59:79:f1:bb:d3:17:5d:55:a0:
76:99:da:eb:ab:85:44:91:35:bb:cb:c9:82:5d:95:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:E1:D2:10:D8:62:A2:66:1B:5B:2D:F8:14:CC:B6:62:D4:8C:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b28980a-5d28-3be0-806f-762cfd98334a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:50:9f:b2:82:3f:35:23:d2:49:d4:a4:7f:c1:80:9d:97:3f:
8d:97:01:17:69:ff:9e:87:e7:d6:2d:ba:91:ad:e6:b9:5d:a9:
be:48:62:d0:ff:ea:5a:06:7f:35:7e:ec:d9:16:ad:94:e6:b9:
2a:f4:db:a1:9c:e8:21:25:75:18:92:97:ca:dc:d1:37:2b:8c:
e9:16:e3:a7:27:40:82:96:a0:c8:fd:d0:29:61:42:35:d1:d9:
16:e8:8c:a5:89:c9:af:fc:ab:ae:63:ce:99:57:f5:21:97:89:
2a:f5:da:51:f4:24:f5:cc:05:fb:c8:cd:64:97:3a:ed:2e:f5:
58:d5:b6:ca:61:6a:9e:ba:7b:96:8b:b1:31:24:a0:29:33:3f:
e0:54:dc:46:9c:98:5f:5a:c9:74:44:30:54:f2:d5:ba:6c:a3:
cb:62:ae:f0:a8:94:7d:83:0d:51:47:df:42:ae:ce:2a:7e:dc:
8e:b0:ea:93:08:1f:9d:a5:0c:2e:4d:30:3c:64:01:45:d0:fa:
0f:9f:a5:db:96:d2:20:a9:fb:e7:d0:97:b2:6e:e1:2c:0f:bd:
f9:ab:36:a9:ac:be:f2:d8:9b:5a:91:53:6c:81:42:22:64:fb:
82:e6:26:67:35:35:0e:18:c4:bd:4b:98:d3:83:a7:a5:59:17:
d1:fd:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:01 2026 by rpki-client