
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e08fe6be-b7cf-3298-b47d-d5cae020135e.roa
File: e08fe6be-b7cf-3298-b47d-d5cae020135e.roa (raw, json)
Hash identifier: eQm7ZIC3+45R59B1WKgpzh8xAmv8fxj+xqAeslV/hHo=
Subject key identifier: 0D:13:70:D1:E9:AF:C5:4D:4A:80:3B:5C:88:C1:CD:17:36:1E:A0:97
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584DE2B5EE5BA2CDFDF2D5EAD7C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e08fe6be-b7cf-3298-b47d-d5cae020135e.roa
Signing time: Tue 19 May 2026 13:00:32 +0000
ROA not before: Tue 19 May 2026 13:00:32 +0000
ROA not after: Mon 17 Aug 2026 13:00:32 +0000
asID: 396576
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e2:b5:ee:5b:a2:cd:fd:f2:d5:ea:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: May 19 13:00:32 2026 GMT
Not After : Aug 17 13:00:32 2026 GMT
Subject: CN=049d64a9-7049-49ae-bbc4-e04b6dcf00da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:6e:6e:b3:96:9d:3e:a3:8c:7f:75:6c:2a:
72:25:24:31:9b:06:95:6c:c8:d1:bc:96:a7:f8:54:
00:9a:78:1b:a8:3e:51:07:94:ab:67:14:64:80:3e:
20:b7:e0:95:6e:9f:b3:e5:01:84:49:02:6b:c5:41:
2e:c5:70:49:7a:de:64:55:39:f6:ed:63:d5:88:8e:
17:9a:12:2d:e0:39:f8:cb:1f:9e:9d:ca:ae:3b:32:
a9:34:99:c2:73:7b:b4:9f:5b:f9:73:03:d3:cb:0a:
02:ce:6f:6d:6b:ce:5f:49:64:42:fe:9d:25:ee:7c:
f8:8b:e8:b6:a6:e0:e3:98:34:d2:d7:c8:cc:63:a5:
35:21:04:89:bf:fc:3d:84:85:05:12:6e:24:47:23:
c6:88:0a:1a:8c:b1:5e:98:0d:f7:88:12:2f:63:22:
b3:15:6f:5f:40:c6:a4:b8:30:32:ab:d2:e1:21:86:
73:30:18:90:79:18:0a:c3:91:17:e9:75:3c:d5:69:
fe:47:0d:45:03:e0:28:fa:ce:a1:cc:d6:68:81:28:
39:13:5d:1b:37:c4:e4:c4:2e:74:11:36:67:e9:29:
20:12:60:e3:2b:1f:97:9f:df:78:b8:0e:24:08:f8:
31:cd:1a:8d:57:82:26:16:7a:6a:74:f6:c0:f8:15:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:13:70:D1:E9:AF:C5:4D:4A:80:3B:5C:88:C1:CD:17:36:1E:A0:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e08fe6be-b7cf-3298-b47d-d5cae020135e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:9c:87:29:7c:80:26:81:0c:3d:d2:19:22:24:6e:26:47:07:
67:61:80:3b:b7:7c:bc:13:99:ac:86:da:e6:29:7d:43:06:fa:
d8:5b:64:2f:b6:16:4e:57:a3:27:86:9f:db:45:f1:ea:c1:42:
48:82:97:7c:36:75:d6:c1:b9:4e:0d:7e:e8:67:b0:a6:55:30:
a8:47:f3:46:0b:ab:af:07:d7:57:bc:46:46:a1:07:cd:63:f7:
d8:69:b6:fc:78:1a:1e:86:91:94:e3:64:b6:f4:b3:da:7a:75:
b5:3c:da:9a:1d:b4:8c:9c:d6:41:ba:de:42:93:51:c3:3b:df:
88:0c:bd:5b:b1:41:8a:65:b9:19:b8:6b:12:db:7a:0e:61:6e:
95:45:cb:f6:7b:2b:95:ab:c2:2e:68:fe:d4:4b:eb:06:9e:61:
f6:44:9b:23:ea:73:32:0d:a0:0a:aa:cc:9e:82:dd:3b:79:3d:
bd:d1:c7:f4:28:98:f9:4a:9e:c6:ec:03:65:f9:3d:e2:0c:1b:
20:98:10:d5:d7:2c:1f:e7:59:30:17:67:61:1e:5a:4a:2e:42:
90:eb:9d:e3:0f:b0:39:2f:01:c1:c3:7f:83:d6:ff:cc:f5:12:
11:a7:c9:16:c0:14:b2:4b:67:ac:f7:b4:18:cf:0e:8a:a5:a8:
2b:8f:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:40 2026 by rpki-client