
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9df40ab-642c-3d6c-9c68-188c8debb70e.roa
File: d9df40ab-642c-3d6c-9c68-188c8debb70e.roa (raw, json)
Hash identifier: fIvmx6a7Zqr4k7j235AfrLZKDdXBkViAuNOlhdKyN9E=
Subject key identifier: 18:EF:8B:2C:E4:8B:1E:9C:18:D4:88:17:85:94:EA:E3:E1:5B:B0:EA
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D0217B5CC195F327014FC0880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9df40ab-642c-3d6c-9c68-188c8debb70e.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 396584
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:b5:cc:19:5f:32:70:14:fc:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=4e49a753-503b-41aa-a52f-c144c74f73ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:a2:f9:7e:c3:f9:d9:12:85:26:1a:a0:e8:
8e:ff:f8:c3:36:4a:a5:86:14:b9:8a:1e:68:b6:d4:
2f:db:8d:8e:1b:63:77:c9:97:9d:2d:5f:72:b7:5c:
d2:1a:c9:29:9e:9e:45:8c:cf:9f:5f:31:79:49:50:
95:e0:aa:66:90:7a:06:3f:d4:fd:eb:4d:bd:31:a4:
64:a9:d9:fa:05:cc:29:0f:b4:d0:d4:9b:0a:65:04:
3f:ef:ba:1c:20:70:d5:c4:3b:20:eb:a1:f8:c6:6d:
60:4f:5f:54:fe:cd:dc:09:76:e9:d5:b7:e2:5b:11:
aa:ba:db:41:a4:94:9f:a3:64:b6:82:4f:19:fd:3e:
55:b9:55:eb:a7:02:1b:d6:c9:29:f6:51:d1:0d:4e:
67:7a:0b:d2:8f:c0:89:4a:83:3e:07:b6:13:23:0a:
69:9a:1e:58:86:31:e7:54:5c:55:b2:6d:ca:db:96:
f8:98:0c:81:ba:f3:88:a6:22:57:d1:08:4d:58:9f:
e7:26:9a:14:6a:d0:40:f1:3e:84:4e:21:9e:9d:18:
cf:69:a2:7b:80:e3:40:da:c7:54:92:be:e4:83:6f:
5f:11:0f:dd:ab:2c:4a:50:3c:9b:11:ee:b6:8d:00:
d6:96:d6:10:c5:c5:ac:9b:23:87:7f:e5:bd:4e:00:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EF:8B:2C:E4:8B:1E:9C:18:D4:88:17:85:94:EA:E3:E1:5B:B0:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9df40ab-642c-3d6c-9c68-188c8debb70e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:fb:64:ec:92:81:93:d7:3d:e9:b3:a9:ac:b0:09:f0:9e:7d:
93:fe:6f:e6:7d:be:62:a9:fa:e5:48:50:51:1d:4d:93:0b:ad:
66:23:23:20:b5:34:4d:5d:1f:6f:76:dd:3a:d8:c5:e3:55:7d:
05:ef:b1:1e:12:22:7b:ca:1a:5e:3c:4a:a7:80:9b:11:e0:92:
99:81:99:05:7d:90:0d:9a:8a:06:8c:5b:6e:c1:eb:ab:4f:ff:
54:b2:2c:25:4d:9a:9d:ea:19:be:fe:16:98:4f:a4:00:7c:2b:
4c:a7:22:aa:98:d5:30:cf:ca:10:a9:1b:24:05:ee:2d:92:11:
a5:8d:60:c2:2a:3f:13:a3:d4:b5:48:47:67:55:55:93:14:0e:
98:1b:11:d3:53:35:c4:81:a2:bc:43:d7:8f:e5:99:2f:8e:3b:
0a:e4:0d:29:de:06:8c:3f:c5:13:53:03:af:8f:a5:36:00:39:
a4:94:f7:a7:f2:86:01:0f:8a:e1:e0:9a:3a:9c:a3:4f:b2:f9:
fa:85:cf:1d:31:65:9d:7c:dd:f6:c6:30:df:94:74:54:fd:ef:
ef:cd:38:93:79:2f:01:41:9d:84:65:50:20:8e:22:3b:e9:bc:
f1:18:28:f7:56:7e:08:dd:4d:2f:91:9f:14:76:6e:ae:79:ca:
4d:7c:0c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:37 2026 by rpki-client