
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa
File: a2894194-5977-35b0-91f8-795131d217be.roa (raw, json)
Hash identifier: hs5q6PTVQbY5jTSdQhCRpHTqDAjFCXCSrN8HkcMZA0Q=
Subject key identifier: 73:B6:CA:F9:C1:38:BA:C9:3A:68:F4:6B:60:34:F4:EC:F2:FE:E4:26
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584DFA707116E7AAF6DA1B28BE00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa
Signing time: Thu 28 May 2026 01:00:10 +0000
ROA not before: Thu 28 May 2026 01:00:10 +0000
ROA not after: Wed 26 Aug 2026 01:00:10 +0000
asID: 396599
IP address blocks: 198.41.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fa:70:71:16:e7:aa:f6:da:1b:28:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: May 28 01:00:10 2026 GMT
Not After : Aug 26 01:00:10 2026 GMT
Subject: CN=c1d147a7-9a91-443c-932c-7d406afdf675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:ae:eb:76:80:c6:87:78:af:3d:88:cf:48:
a3:f9:a6:17:9f:c6:5f:bf:a8:55:c2:83:49:19:bc:
1e:2e:6c:1b:dd:a4:de:96:dd:11:cb:bc:26:c7:47:
a5:ae:59:d3:16:38:3b:08:aa:9e:6a:6f:d5:3b:30:
69:a7:b9:7d:26:95:7e:6d:30:a3:86:7f:ed:5b:18:
78:fa:d1:80:97:9c:78:2f:30:d5:1b:a2:c6:9c:da:
db:9d:87:15:36:35:9e:17:ce:74:a0:fc:01:e5:1f:
f2:a9:bb:15:ad:ee:13:7a:ea:62:dc:fe:ad:20:f5:
89:95:e4:de:b9:6d:3c:03:4c:99:d4:f9:e8:93:3d:
0d:57:3e:4e:09:02:ad:3a:c7:d4:13:61:f1:52:d7:
65:c8:36:a3:73:4f:a4:a5:46:4a:02:f3:3e:0f:9c:
88:d8:61:9d:8b:a7:db:2a:51:bf:4f:dd:c5:60:d1:
40:99:4c:ab:34:c2:3f:14:10:41:93:18:ee:2d:e8:
fe:93:be:32:8b:b7:0b:d9:21:ae:3c:90:2a:77:0c:
e6:d5:0b:8e:39:ff:93:b7:0d:85:71:9a:12:5b:fc:
a4:e3:26:79:67:83:55:3a:d3:03:c1:74:af:95:df:
b6:d4:da:7a:bd:09:c2:c2:c6:e6:30:31:6f:6f:50:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B6:CA:F9:C1:38:BA:C9:3A:68:F4:6B:60:34:F4:EC:F2:FE:E4:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:0e:02:90:58:8e:30:af:64:a3:62:48:6a:83:14:2a:aa:11:
a2:eb:10:f5:33:30:0a:ec:eb:25:2d:2a:bc:c5:fe:3a:f2:a6:
ed:5d:32:87:4d:29:36:ea:01:5b:c3:1f:b1:b9:f2:3f:d1:2c:
87:3c:5c:c7:12:90:7d:8c:81:51:6b:1d:a0:8d:4c:7b:29:a4:
d0:a7:27:97:8a:cb:60:92:4e:30:3e:a4:bf:07:90:11:08:47:
72:3b:a0:f0:a4:fe:3e:94:8f:7e:71:8f:31:10:45:bf:10:5e:
9a:f6:0e:8d:93:b9:75:ae:c5:67:0b:01:c7:13:79:b5:96:20:
21:80:a3:7e:9b:e5:b1:44:43:20:0d:26:fc:b9:0d:2f:f1:89:
e1:6e:e2:0c:5b:8f:a3:49:a0:05:44:52:6c:b4:dc:28:04:f6:
2c:86:6e:07:7a:f3:76:80:6c:a8:28:ec:c3:4a:6f:8d:64:28:
7d:29:31:ea:e7:49:7d:3c:e2:57:42:4a:cf:e9:8e:c0:b1:e4:
1a:e3:19:7e:a3:ec:85:66:fe:04:e9:f6:84:4d:39:71:f3:7a:
a7:e0:a5:92:df:6f:63:90:ea:95:93:3b:8c:96:76:b0:57:e8:
61:68:a5:d2:93:60:4d:a0:8d:01:f5:2c:0e:57:b6:99:e2:a4:
6c:1f:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:53:56 2026 by rpki-client