
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa
File: 8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa (raw, json)
Hash identifier: 3kDwTEqRGjOHyTDUZ0exvjT/xNQWdeJ1kC9b5uxdhig=
Subject key identifier: A9:76:C8:0E:76:A2:98:9A:E1:04:AF:68:BF:38:05:61:D1:0B:1E:4D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584E0C1ECAF63AE0C78FE3407100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa
Signing time: Wed 03 Jun 2026 09:00:13 +0000
ROA not before: Wed 03 Jun 2026 09:00:13 +0000
ROA not after: Tue 01 Sep 2026 09:00:13 +0000
asID: 396585
IP address blocks: 216.168.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0c:1e:ca:f6:3a:e0:c7:8f:e3:40:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jun 3 09:00:13 2026 GMT
Not After : Sep 1 09:00:13 2026 GMT
Subject: CN=84d114ee-286c-4cec-b67c-5c6aa979460f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:d5:bf:b0:e9:c0:cf:5c:7d:d8:85:a4:18:
61:79:58:be:4c:05:9f:0c:9e:ef:70:6a:c7:a6:ee:
4b:4a:ca:bf:16:80:eb:36:6a:2f:71:99:bb:0c:a9:
bd:09:ff:79:43:ba:96:e1:b5:d5:1d:74:65:a4:8e:
c5:81:e1:64:90:7c:44:57:09:78:a0:ba:da:cb:f6:
70:02:fe:a5:7b:5d:3d:04:25:3c:b5:f0:66:f7:ef:
95:7f:dc:73:39:f0:a6:17:25:8d:81:dd:45:90:c1:
d2:76:1a:cf:1b:38:13:f0:01:78:d1:74:62:b0:4f:
97:d1:9e:6c:b8:e7:ce:31:18:25:6d:9c:f5:b7:a2:
f1:3c:58:d7:c1:95:61:d0:da:a9:8b:a6:ae:89:a6:
a4:58:85:ff:04:c2:3d:32:67:d0:3e:7c:5a:3a:05:
e4:46:36:c7:53:a7:93:f1:cd:9d:2a:9c:b2:63:2a:
16:bd:de:9b:5e:89:56:39:25:bf:c5:62:33:4f:74:
b4:aa:cb:28:4e:02:b3:56:7c:cd:66:92:6c:ff:0a:
1b:37:9e:6b:dd:43:7f:e4:40:04:92:50:55:f8:4e:
4f:dc:c7:74:27:a1:bb:3b:b2:e5:ad:58:06:d0:86:
92:e0:c8:e5:17:2e:ce:bb:7e:d4:2e:17:8b:41:93:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:C8:0E:76:A2:98:9A:E1:04:AF:68:BF:38:05:61:D1:0B:1E:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:21:1a:76:18:f8:f4:06:43:db:60:9c:fa:7d:48:5c:4c:59:
31:88:e1:3f:3f:3b:b9:f5:2a:98:f5:cb:a5:ec:60:8f:5e:01:
7c:3d:61:04:ca:67:e5:c7:e7:11:8e:ba:49:ea:35:2d:7c:d2:
d5:89:13:c7:fc:dc:cf:41:e2:8b:91:db:3e:c3:76:db:a4:e5:
d3:1b:9e:06:9b:79:77:23:01:74:cf:fe:57:8f:1f:60:19:f5:
a3:b1:72:2c:54:d3:b8:76:91:72:04:da:57:3a:f8:77:d8:1a:
e6:18:d1:ad:b1:55:34:82:74:2b:97:64:d7:b0:de:24:3d:43:
9a:12:fa:53:30:3c:d8:29:f0:f0:59:e4:e7:e8:07:ad:14:ec:
e1:c8:85:45:34:ec:f1:01:dd:4e:b7:9c:08:7b:0d:cd:48:0a:
66:69:11:ed:a7:91:e8:36:bc:b7:41:02:cd:1e:5d:94:51:7d:
aa:fa:28:47:31:c2:b7:4e:cd:5e:4b:53:28:3b:78:b9:52:16:
f8:9f:be:fc:03:ff:fd:f2:42:b3:b0:22:8d:88:52:29:ce:58:
69:27:9e:9d:ae:af:41:c3:ce:09:8e:59:2c:77:9d:7d:16:81:
55:2a:ce:ea:f1:dd:19:48:8e:ee:f2:6e:f4:c4:c0:42:84:02:
f3:7c:ae:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:21 2026 by rpki-client