
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8363202-68f3-396a-a17b-6bc148c1773e.roa
File: f8363202-68f3-396a-a17b-6bc148c1773e.roa (raw, json)
Hash identifier: lTPGgAp8wr+4NYJoakpWidiMOqSaqt/mCoW4ejA1r6g=
Subject key identifier: A8:3E:A9:B3:83:DC:E3:A9:11:50:8C:10:77:59:55:04:B5:90:9F:D7
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D02179BF105CDBAEEF3BC3140
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8363202-68f3-396a-a17b-6bc148c1773e.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 36625
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:9b:f1:05:cd:ba:ee:f3:bc:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=53b8f0d0-de8a-4cfc-8ae8-ee5dde43edaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:aa:9e:c4:fe:ca:60:5d:79:5a:27:4d:8d:
e6:03:61:f1:e9:b6:3c:00:bc:8a:ed:f8:4f:a6:10:
a1:c6:d8:54:2c:0c:0f:9c:57:1c:59:dd:9d:1e:b6:
01:3b:db:ec:5f:85:82:74:3f:f4:b6:e9:f6:9c:bf:
c4:f0:b0:db:8f:ff:c6:41:42:22:cb:7d:eb:03:59:
dc:de:76:fc:4b:15:19:ff:36:a8:94:78:25:c9:14:
f0:52:89:71:34:b9:59:d2:06:15:17:27:b1:96:32:
59:c9:a1:58:28:53:23:c7:df:88:26:c1:74:95:38:
98:66:6f:2a:21:b2:77:dd:af:98:b9:31:bb:91:ab:
e6:a1:7e:59:3d:c8:93:f9:20:09:07:63:6f:74:e7:
9b:30:0e:a3:ee:45:3b:99:0b:9c:65:e0:58:3d:20:
8f:11:e9:1e:f2:95:d3:22:49:61:bf:ef:86:4a:58:
bc:19:cb:48:b0:a2:37:d7:bc:cc:91:79:ac:2b:69:
f5:58:21:61:bc:fc:0c:ec:c0:00:ea:04:54:66:41:
3b:4b:43:de:a1:75:45:69:c5:28:02:fb:76:07:c3:
9e:fd:e6:57:76:a8:95:37:ba:82:a0:2d:16:f5:d5:
dc:67:20:78:f8:1c:c0:9a:c7:49:c1:b1:7b:44:14:
d4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3E:A9:B3:83:DC:E3:A9:11:50:8C:10:77:59:55:04:B5:90:9F:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8363202-68f3-396a-a17b-6bc148c1773e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:22:51:6e:53:4a:e1:e3:02:db:65:9a:c0:06:60:90:3b:24:
9c:2c:fe:3a:cd:6f:f1:db:74:02:d1:f6:f3:4c:ec:44:2b:13:
56:b2:5b:0c:13:95:84:e0:3c:13:6f:54:ca:fb:b0:66:1c:ea:
23:f3:a5:97:77:0c:01:4b:46:5e:14:6b:f9:d3:e1:3c:f9:6b:
98:6b:4b:1b:9b:9b:6d:e0:0b:14:c0:7a:cb:c4:fa:e5:6e:11:
9f:78:4f:82:28:62:a8:dc:74:c1:3f:82:39:b6:a9:d1:e4:de:
d6:85:b9:15:40:bc:af:4a:de:11:70:ad:14:74:16:6e:59:7f:
6a:a5:f5:d5:d4:24:4f:86:5b:24:0b:cf:b9:18:23:00:12:3b:
ef:2e:63:bc:8b:27:41:b3:e0:d9:60:20:fe:5b:65:1e:f2:8d:
6a:3f:95:53:fd:a5:1f:1c:b6:c6:1a:f8:99:54:8e:8d:1d:d7:
73:13:17:3c:6c:49:44:44:1f:a2:ca:fc:c1:ef:64:85:c1:7e:
e3:ff:41:b2:27:ea:80:41:fd:25:25:cb:c7:e0:02:31:62:e5:
88:03:21:dd:67:25:2d:52:44:b1:f9:c8:6c:63:a0:d2:0d:10:
70:5a:48:df:1f:37:c9:74:d0:8f:7a:1c:33:80:27:68:da:ef:
8b:41:bc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:03:41 2026 by rpki-client