
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/deeb7e7d-a984-38ec-a6a0-6087a24b4c9f.roa
File: deeb7e7d-a984-38ec-a6a0-6087a24b4c9f.roa (raw, json)
Hash identifier: OKizBc3sHNhIRfZaIqAldP/TkhXi8jyMJAeWcGM5NEU=
Subject key identifier: 74:C8:A1:7C:EE:37:BB:89:BB:8E:18:0A:E5:0E:08:91:04:D5:F6:16
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D0217A1AF3DC95FF4C8B26500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/deeb7e7d-a984-38ec-a6a0-6087a24b4c9f.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 396567
IP address blocks: 198.41.0.10/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:a1:af:3d:c9:5f:f4:c8:b2:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=bc8a38f3-fd35-4021-902f-370a48523927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:14:1e:56:c1:52:20:a9:c1:b8:14:ef:3c:
76:fe:ac:e3:f6:4a:f7:70:9f:ee:ff:07:3d:76:b6:
13:36:b0:80:c6:0d:26:30:f5:1f:8b:7a:fd:1b:fe:
ab:f9:02:25:85:63:75:b4:97:21:fc:43:3a:b6:0f:
41:1b:92:67:ce:a9:30:09:94:11:78:9d:cf:b9:ce:
46:6c:2b:47:cc:d6:55:22:03:ac:22:75:60:a2:f9:
29:b9:fe:bb:8c:07:2a:db:a9:80:f5:89:19:75:54:
95:86:2f:73:93:ad:3c:77:d5:c8:50:15:88:2b:0b:
d0:b1:95:cc:6c:2a:8a:01:3b:5c:10:62:c9:87:a1:
83:ae:e4:34:f8:88:e8:27:73:c6:27:6c:4e:6a:03:
01:11:8c:fe:12:15:02:a7:c5:95:a4:d0:67:0c:49:
f9:23:ba:18:c1:ac:6a:32:67:97:bd:d3:3f:2e:66:
30:ba:b6:2a:c8:94:23:0f:9b:1d:7d:ca:7a:81:3b:
20:63:60:22:f2:fa:3e:ae:d2:b7:f5:76:be:30:75:
e7:82:21:e5:56:53:93:bc:92:4c:9e:aa:16:58:7a:
d7:c1:02:04:88:57:15:c4:24:21:c8:06:9b:f1:d7:
7a:b7:a6:be:bf:e7:5c:3f:b2:c5:d1:0e:6b:8e:6a:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:A1:7C:EE:37:BB:89:BB:8E:18:0A:E5:0E:08:91:04:D5:F6:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/deeb7e7d-a984-38ec-a6a0-6087a24b4c9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.10/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:89:52:a0:34:cb:e6:10:a0:73:4e:ef:39:60:b0:b5:dd:38:
0d:0a:9f:80:3d:92:14:67:c4:1d:10:25:42:cb:69:0c:d8:ee:
91:b1:93:df:dd:c5:9b:c6:0e:dd:2d:6f:e9:fe:98:f3:13:64:
61:b7:bf:bd:1e:29:72:dd:88:0d:49:d6:71:29:8b:fd:bf:70:
b7:8f:3a:af:fc:8a:a0:0d:a2:9b:47:ea:ac:56:a4:d0:96:f5:
56:08:e7:2e:9d:8a:e0:b5:bb:71:af:ee:7a:63:eb:c2:a9:01:
30:c0:ca:82:e9:09:5c:f0:91:9a:cc:37:ff:16:d0:49:45:a9:
61:b2:bc:0d:a7:15:84:b3:c7:23:ee:18:36:39:21:82:95:d4:
02:ee:43:76:b7:30:23:bc:af:56:9a:2d:6a:0a:5a:48:10:c3:
c1:fd:0a:af:31:a1:8b:28:f6:22:43:50:59:71:63:31:04:4a:
57:8d:06:97:03:38:97:e7:b9:bb:c9:e9:e4:5b:a2:b8:8c:58:
56:20:07:a8:47:b0:4e:ba:b1:16:a6:7a:79:bc:7d:3e:c9:de:
d9:2e:ab:b8:87:56:85:2a:5e:24:ca:4b:0c:68:01:ea:a2:b1:
9a:43:a3:cc:57:6a:e7:08:ff:36:fa:66:81:b2:28:64:07:83:
ae:50:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:40 2026 by rpki-client