
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa
File: a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa (raw, json)
Hash identifier: UOEFWQpOjr1r8YRYLzxy4o8JwuXdcjT+/Cb50DeO11s=
Subject key identifier: D9:A7:6B:F4:6A:DB:31:44:F8:C6:6D:E9:B2:57:1A:CF:04:D0:4A:C9
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D0217947AB390F8D6E99EEC80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 396587
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:94:7a:b3:90:f8:d6:e9:9e:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=99dc8cd6-65d4-45c2-b925-a03b7c2bf419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8f:f4:00:33:9b:f8:4f:77:08:40:bc:08:bf:
36:23:e3:1c:3d:12:0a:b3:f4:00:d6:6d:c6:81:35:
75:21:20:0b:18:19:a3:c1:79:2d:ae:bf:39:d4:03:
59:27:75:04:46:a9:e8:c1:ea:86:18:3e:ba:3a:b4:
36:4a:6d:8a:35:1a:26:4a:2a:8a:4a:a0:06:7e:0d:
81:98:e0:32:54:c2:fe:45:f3:38:92:c0:15:19:f8:
51:60:8b:f8:50:ac:60:66:c8:8f:46:05:e2:75:16:
04:36:42:dd:f8:a1:53:89:91:66:2c:d0:3a:ff:91:
0f:41:69:f0:69:a2:2d:1f:47:07:e2:72:38:9f:b6:
9f:da:e5:e6:cf:56:19:3e:d0:3a:96:15:91:7a:5a:
6d:5d:34:cb:58:28:98:06:c1:f9:13:ca:e1:78:00:
25:07:7e:38:48:5e:01:13:c5:a7:27:1f:6c:d9:70:
a1:f5:50:77:14:dc:ed:57:03:d1:c5:b1:d5:10:da:
d5:5f:8a:c1:95:68:35:b1:e0:91:52:98:76:50:05:
69:57:04:5d:e7:be:07:4d:87:d5:d3:f6:81:47:3b:
0f:af:62:b1:ff:ff:b3:77:1f:10:65:00:47:c1:d1:
d4:e4:46:18:62:e8:f8:62:05:61:93:04:7b:3a:28:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:6B:F4:6A:DB:31:44:F8:C6:6D:E9:B2:57:1A:CF:04:D0:4A:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:3e:08:49:0f:2d:9f:3e:5c:af:bc:f4:98:28:e5:ce:ef:6f:
65:4e:4c:28:ce:f8:7f:2b:fc:9a:22:38:e6:a6:ed:2d:58:34:
e9:d5:5c:18:20:19:f8:89:2d:46:d7:8a:71:5b:9b:30:b8:5f:
4f:d4:59:97:74:51:a3:a7:2d:84:d6:0f:8e:05:99:40:89:70:
30:12:41:dd:d1:bb:b8:69:ff:a6:e5:94:4a:69:ef:45:40:4f:
39:3a:52:cd:bc:75:88:4c:2c:ed:e2:4c:74:dc:f5:87:d7:57:
4a:fd:5a:cc:61:ce:57:af:33:4c:30:99:c5:84:48:7a:37:fb:
fa:d8:e9:2a:94:9f:c3:86:91:ee:62:ab:19:91:89:29:5c:66:
4b:28:61:ee:86:30:e9:ad:a6:41:31:8a:d6:60:f6:14:91:79:
ec:76:ba:5a:a7:57:c4:6a:be:b3:b8:69:54:f2:a2:a1:07:79:
e4:69:46:21:84:1c:4e:10:22:3d:c3:a2:c5:73:2d:eb:ee:99:
a9:dc:6f:32:bf:57:ac:45:7b:b0:0b:3c:59:eb:3e:00:0b:0c:
11:c1:6d:51:46:e6:8a:39:b0:a6:33:72:72:53:b7:02:c4:b9:
8b:e2:e6:5d:9e:76:ed:6f:d8:71:ba:42:20:48:aa:01:c5:27:
ae:8d:ea:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:10 2026 by rpki-client