
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa
File: 966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa (raw, json)
Hash identifier: WXFyguz8pN24M+vyBHHCdYcZPwVNWdhFqc6b58B46Qc=
Subject key identifier: B4:B0:28:D5:C5:6C:6E:C2:DD:0E:8E:6A:2E:3E:AA:24:AF:C8:67:55
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584DFA70A3391FFCA88A0D9B9FC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa
Signing time: Thu 28 May 2026 01:00:10 +0000
ROA not before: Thu 28 May 2026 01:00:10 +0000
ROA not after: Wed 26 Aug 2026 01:00:10 +0000
asID: 396563
IP address blocks: 198.41.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fa:70:a3:39:1f:fc:a8:8a:0d:9b:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: May 28 01:00:10 2026 GMT
Not After : Aug 26 01:00:10 2026 GMT
Subject: CN=b1eb7a55-cc0d-4f47-b8de-2b23cae6ff21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:02:d1:75:ef:07:5e:15:c0:80:b1:18:7f:
a2:65:16:86:e5:35:4a:e6:e2:6a:20:c4:a6:46:4e:
81:30:93:ef:24:85:a3:97:72:94:15:a9:0d:de:e0:
0f:d2:db:d2:a4:f4:f2:aa:ec:26:2c:f9:de:fc:fb:
40:9b:34:66:7c:7a:a0:e3:58:dc:78:3a:ee:03:c0:
4a:d9:f4:4d:0d:bb:ba:ac:80:de:25:23:d9:48:36:
24:f0:31:f2:9d:cb:15:6c:34:f1:fa:2f:c0:91:e6:
ad:a8:52:6e:0a:30:2c:79:18:99:fd:65:30:50:da:
71:f0:01:58:e5:dc:b3:b8:87:9c:b9:15:a7:7a:f9:
9d:cb:48:70:90:08:72:13:0a:7f:4d:88:af:da:fe:
f9:dd:d7:e6:c8:91:6b:ac:32:0e:a5:e9:8c:f5:21:
67:31:ae:08:50:13:0b:61:44:bf:b8:58:b8:ff:a8:
34:f9:87:24:99:09:53:a5:6b:01:91:0f:e7:76:d6:
d9:4c:dc:7c:d4:0c:e5:8b:a6:74:8d:70:aa:34:71:
9c:49:c2:61:31:b3:a6:98:47:b6:d1:86:50:28:cb:
20:f1:5a:cc:9b:fd:04:ff:1d:e9:ab:e8:d3:d7:03:
58:7b:45:38:3f:b3:7f:09:ac:59:22:7a:d9:86:e0:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:28:D5:C5:6C:6E:C2:DD:0E:8E:6A:2E:3E:AA:24:AF:C8:67:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:0a:a3:04:07:9f:ea:af:2b:38:a5:65:a1:84:38:12:ab:ac:
91:67:0f:48:bf:64:7e:4b:13:cf:7d:ed:12:0f:5e:f6:e3:9e:
02:cb:9b:c5:3e:e0:11:3b:fd:57:54:8b:0b:a2:0c:63:a4:25:
d5:07:a2:4e:43:18:9f:7d:d8:2d:e6:e7:e7:0b:dc:ae:42:2e:
19:29:3f:e7:73:79:2d:4e:03:c1:18:01:a2:89:4a:9a:78:db:
27:56:c1:03:ea:c9:93:25:c0:57:ac:03:0c:da:e5:f0:5c:72:
20:a9:f4:7d:d1:a7:cb:b0:2f:96:09:70:d2:08:b5:2d:2c:15:
d2:b0:dc:67:c0:c8:53:c6:c4:ad:e8:20:d9:5f:11:6a:00:ee:
1a:b6:60:26:5f:3c:bb:0a:0c:17:11:ad:0c:4e:88:8c:fc:77:
42:29:75:1c:8b:d2:a6:ea:a3:0a:82:46:38:4b:1b:93:fd:4a:
9c:a2:75:a1:dd:e7:a5:a4:51:47:a8:c9:14:7c:1f:88:3d:3d:
91:7b:28:c7:2a:26:26:39:43:b6:47:2b:e7:fe:e3:c3:16:ed:
d0:b9:85:50:04:9a:14:2a:14:2b:23:b3:e8:83:25:c8:09:ba:
b4:f4:90:46:1f:f7:51:62:b6:02:ea:3e:13:49:0d:1b:14:84:
1b:71:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:14 2026 by rpki-client