
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8bdf53e-7a1e-33e0-9294-00fee6b6be6e.roa
File: e8bdf53e-7a1e-33e0-9294-00fee6b6be6e.roa (raw, json)
Hash identifier: Ox/0ccxu8Y3spz6xO+/ntMtY+4wbWEdB0OMCf5/Bkyk=
Subject key identifier: 7C:88:78:7F:01:61:74:7F:82:BD:35:4B:3B:C9:BD:99:C5:F1:8E:A4
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584CF878DB12E3D0720E6DC58360
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8bdf53e-7a1e-33e0-9294-00fee6b6be6e.roa
Signing time: Tue 24 Feb 2026 15:18:37 +0000
ROA not before: Tue 24 Feb 2026 15:18:37 +0000
ROA not after: Mon 25 May 2026 14:18:37 +0000
asID: 396542
IP address blocks: 209.112.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f8:78:db:12:e3:d0:72:0e:6d:c5:83:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 24 15:18:37 2026 GMT
Not After : May 25 14:18:37 2026 GMT
Subject: CN=13a4198e-eb00-49b4-9f6c-fe01ec894970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:2c:c8:ad:0c:a1:1a:b6:3c:ac:00:18:13:
e9:3d:12:75:97:6e:47:d2:76:40:83:93:14:6d:5d:
0c:b7:96:00:80:16:06:ec:96:a2:b0:6d:ed:3b:ad:
6c:6d:62:c5:26:79:c2:d5:05:1b:14:e9:49:6b:47:
60:47:16:f6:24:2d:d0:62:6e:35:58:97:f7:b6:3c:
d1:9b:8b:bb:92:1c:a6:e5:93:da:69:10:21:74:d4:
16:28:13:ab:39:4d:8a:ed:0e:4f:7c:c4:8f:49:a3:
6a:ce:0d:37:7b:8d:b4:0d:6d:a6:79:29:3d:6b:d9:
46:14:e7:89:84:3a:47:f9:c3:c5:ce:8e:fd:a5:13:
76:b6:4a:30:26:42:b7:7e:91:52:f5:b7:b1:99:16:
15:d0:be:23:f0:8b:90:9f:b1:c8:d5:57:1c:69:ed:
59:71:e0:c1:ea:8d:80:61:e8:2c:46:cf:51:95:4e:
ab:ec:48:8e:b0:b6:3e:cc:81:ae:97:40:71:b3:e4:
fa:54:56:6e:a8:11:d5:73:0c:93:e0:61:87:1e:99:
9a:ab:8f:d5:6c:be:0b:ea:ee:d8:fa:22:ce:0e:52:
3b:e9:92:ee:a3:0e:7a:b2:d8:2a:8e:04:fd:16:27:
26:bc:9c:35:99:50:4d:bd:42:00:77:d5:84:94:be:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:88:78:7F:01:61:74:7F:82:BD:35:4B:3B:C9:BD:99:C5:F1:8E:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8bdf53e-7a1e-33e0-9294-00fee6b6be6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:a8:7d:6b:6d:fd:8a:32:33:1a:7f:39:d7:6e:5a:29:72:14:
9a:6c:3e:f8:1d:d0:6a:0a:30:b4:56:3c:ed:7b:54:d0:5d:1f:
66:47:ab:7c:1a:fb:b9:79:5d:26:4f:09:32:c3:d2:5f:5f:03:
4e:4e:0b:ae:41:c2:ad:2c:cf:9a:0a:c4:07:bc:68:f6:0d:20:
a1:79:16:a2:4c:07:be:9c:e8:57:c6:4f:17:94:05:16:7f:01:
a5:c2:5b:52:e3:76:a4:30:27:7c:d1:91:15:fc:d0:5f:48:43:
a2:9c:2a:87:14:a7:0b:03:06:0d:ab:02:b8:e1:8d:a9:85:49:
5c:23:8b:6b:7e:00:c4:d3:cb:5d:a2:47:ff:fa:6c:a6:d6:db:
82:59:6e:d1:a2:6c:d0:e2:eb:c4:39:75:79:5b:e0:db:a0:ed:
81:4b:40:49:ca:b2:0b:8e:b4:6f:c2:62:0f:60:50:a8:70:46:
cf:fe:e1:cc:78:cd:77:d1:fa:67:f9:3c:b5:b2:6e:0e:8b:15:
80:56:df:dc:62:13:9d:e6:8d:22:89:26:b0:33:26:1e:f6:01:
5c:5c:b1:eb:34:12:da:ff:a7:86:12:ab:45:76:09:52:a2:0b:
8e:9e:5a:04:35:36:6b:81:83:7e:59:3d:2b:2b:ad:25:e3:7a:
aa:65:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:10:00 2026 by rpki-client