
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/865955ac-d856-324b-9aeb-ff7e8f71dadd.roa
File: 865955ac-d856-324b-9aeb-ff7e8f71dadd.roa (raw, json)
Hash identifier: Ku2u2BR97WwAFWXsNjS2XZsZH9TK+kqRCPb4O2Uj/M0=
Subject key identifier: 5B:92:F2:21:59:91:06:A5:FB:3D:9C:09:26:4D:6F:20:24:76:CD:95
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584D6AAA878416611C3574799960
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/865955ac-d856-324b-9aeb-ff7e8f71dadd.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 9009
IP address blocks: 172.111.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:87:84:16:61:1c:35:74:79:99:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=3791a7f6-1d8e-4ac9-a673-3a39f5606317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:aa:73:a7:56:62:2b:bc:f7:3d:c7:2a:d3:
06:73:74:23:66:3f:36:4c:9f:06:c5:aa:28:da:9b:
89:db:92:df:a6:5b:a3:7e:10:1d:12:07:94:86:a3:
dc:f0:44:c9:40:a8:bc:0c:21:00:60:04:35:ba:76:
bb:9f:c2:16:40:7f:82:0b:3e:77:52:20:08:62:31:
ca:b4:73:01:7c:60:2d:6d:73:1a:7b:23:f6:1d:7d:
be:3a:3d:77:18:72:93:55:34:fa:de:b6:9c:1e:77:
97:5e:f5:18:cc:aa:ae:c9:92:6e:93:5c:a2:99:98:
a5:e7:80:a5:79:e1:44:35:07:a2:b9:d5:4f:b7:93:
2f:73:36:6d:4d:71:02:dd:7b:08:0f:72:6d:7c:dd:
41:48:75:7a:78:ee:b4:f6:50:d7:c9:db:98:ce:31:
1e:15:91:80:51:79:db:b5:87:b5:28:76:dc:46:35:
06:e1:81:5a:2b:53:8f:23:ae:9a:51:16:80:84:f7:
f1:12:0a:b3:63:43:04:98:db:47:07:2f:d7:e0:2c:
47:ef:74:72:a0:c9:b5:91:88:6e:30:28:d0:56:fe:
dc:6d:67:22:f5:63:b9:86:96:fe:0c:bb:fb:42:ea:
b3:d0:fb:42:d4:a8:bb:8d:2e:c3:ae:fe:81:e9:55:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:92:F2:21:59:91:06:A5:FB:3D:9C:09:26:4D:6F:20:24:76:CD:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/865955ac-d856-324b-9aeb-ff7e8f71dadd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:ed:fa:eb:56:99:d2:97:95:41:d8:f1:d3:b9:38:61:59:8d:
5e:f1:51:20:84:9a:08:9b:a7:d8:bd:c3:85:68:88:ba:da:61:
6e:d4:85:7a:20:42:11:e8:40:80:ca:43:ce:a4:8e:e4:e0:6a:
b6:0d:6c:0d:d0:0a:3e:a8:f5:0e:88:80:91:9d:f7:e6:7f:35:
5a:00:e8:83:a7:90:72:1f:bc:92:37:5b:f2:76:cf:e4:3b:80:
f5:fa:7a:0b:37:3e:f8:96:a1:71:31:16:64:56:a2:82:d2:79:
70:b4:a4:f4:77:6a:c4:3a:e0:29:52:f9:11:2f:c5:70:09:9d:
e9:3a:9b:59:9d:1a:66:7d:37:99:7e:84:ad:54:05:ec:3d:d8:
4d:19:70:78:fe:9b:f3:b1:a3:d2:b2:07:3b:cb:0f:80:50:9a:
bc:da:cc:ab:3d:4c:47:dc:00:64:ce:ba:d4:ed:17:6d:86:d7:
d3:38:bd:3c:9a:09:4e:ae:fd:b6:9c:ae:82:44:d8:99:81:d1:
98:26:30:c2:b0:95:a8:27:c9:8a:0b:2a:87:68:40:6d:32:ea:
05:e5:83:7e:20:0c:46:45:e6:4d:5d:e9:13:8c:ac:01:04:86:
94:12:4e:42:4b:3f:ed:e9:f5:1d:09:01:4c:5e:75:6e:84:1f:
53:db:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:34 2026 by rpki-client