
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575475a-2a7f-3a02-8915-1d59f753fdc1.roa
File: 8575475a-2a7f-3a02-8915-1d59f753fdc1.roa (raw, json)
Hash identifier: ppG1JiqK/hLCKNqby/ZuencDIZunbAhZApvStJgnOjQ=
Subject key identifier: E3:5D:70:C4:30:16:7E:3C:B1:4D:C5:6E:06:2B:B7:CB:C6:A5:DF:27
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA78FE9A174B53F35353C48D0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575475a-2a7f-3a02-8915-1d59f753fdc1.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396560
IP address blocks: 198.41.0.10/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8f:e9:a1:74:b5:3f:35:35:3c:48:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=5f04ef06-900c-4629-a0a6-c5cde722a2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:f7:56:67:bc:3f:61:c4:e0:2f:fc:c9:22:
ff:5e:db:ca:cc:55:6e:cd:07:35:51:67:5f:29:70:
66:41:45:70:4f:97:77:9f:3a:82:6b:db:81:a2:17:
e7:3a:4e:d2:d9:33:2b:d0:d1:de:aa:e7:33:53:ba:
d7:20:26:98:f5:6e:e1:7b:20:09:34:9d:e0:9b:8a:
05:1a:2b:79:e6:3a:66:60:fa:29:8b:d1:84:f1:52:
3f:fb:8c:ff:05:7b:97:73:10:3b:22:72:42:81:32:
a2:b0:93:b9:7e:33:51:f8:d0:00:81:05:22:bc:d4:
a3:61:d7:5b:f6:d5:9c:c7:de:ff:9c:6e:5b:b4:f2:
39:9f:47:9e:14:42:e8:09:5c:f6:53:bc:1d:17:54:
6f:2d:82:22:21:93:f3:9d:85:66:63:ba:c6:06:7a:
47:69:c6:7d:b0:b0:0e:cd:3f:9d:e5:d4:dd:89:3d:
6f:43:c8:38:74:6e:dc:48:ef:4f:24:b1:98:ca:d6:
0e:c8:c2:f6:30:9a:b5:16:b7:1a:86:07:9d:70:0e:
90:be:a9:c3:a7:c3:8c:95:d5:5c:62:d7:cc:61:a0:
48:cd:3f:00:bf:dd:f1:2d:78:28:e3:8d:4b:29:e8:
99:e7:16:02:d5:a7:c3:88:f2:44:e0:27:a8:2c:f0:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5D:70:C4:30:16:7E:3C:B1:4D:C5:6E:06:2B:B7:CB:C6:A5:DF:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575475a-2a7f-3a02-8915-1d59f753fdc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.10/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:a2:7f:b6:e7:b5:fb:83:ee:0d:fe:f2:18:8c:cd:69:19:3d:
f0:1f:dc:a4:b6:a4:20:3c:fb:6f:29:eb:77:32:a1:d2:74:2e:
be:7c:77:71:db:00:6a:59:e8:23:e0:14:3c:98:4b:77:2f:a9:
0c:3e:7b:9a:86:6f:b1:b3:a6:21:17:d7:a9:57:91:6d:b3:96:
f4:36:ba:d7:30:1c:32:de:86:a3:bb:07:55:aa:e0:31:cf:fa:
fa:0c:04:12:41:d3:ef:a0:c7:5d:d9:c4:94:6c:b7:41:51:5e:
fe:39:74:ad:e7:03:ae:7f:55:96:c8:47:b7:cc:5d:75:99:8b:
47:a0:a4:35:56:29:19:01:d7:56:77:f6:d5:75:26:50:dd:5c:
c7:04:17:59:d7:fd:9d:46:e2:97:ad:97:65:5f:d4:98:22:f1:
fa:5d:43:d9:6d:57:7f:8c:08:5f:cb:bd:12:79:f7:a5:8e:7d:
21:cd:7f:31:da:81:f0:a2:fe:dc:02:19:79:ea:81:f2:ba:db:
12:6f:cd:c7:af:3a:76:d7:03:7d:9c:f3:fd:0b:66:5e:87:2f:
89:b8:9a:00:bf:94:d6:e0:5b:fb:95:11:ac:4b:56:6b:79:40:
04:5f:c8:99:dd:9d:5d:8d:2c:70:05:d5:1a:1d:77:59:d4:56:
37:04:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:43 2026 by rpki-client