
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c1c82053-3392-33ff-8323-9cd9509d2c03.roa
File: c1c82053-3392-33ff-8323-9cd9509d2c03.roa (raw, json)
Hash identifier: vWcS4XPzoDIg7jDERm3sssf2sIJKcsdsAGkcuQfGQMU=
Subject key identifier: B8:36:F0:E5:61:C0:32:3D:EB:63:F3:11:B5:92:43:AD:D3:DE:96:26
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584D5C9839ED1C7E0B63AFB2EF80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c1c82053-3392-33ff-8323-9cd9509d2c03.roa
Signing time: Wed 01 Apr 2026 12:02:40 +0000
ROA not before: Wed 01 Apr 2026 12:02:40 +0000
ROA not after: Tue 30 Jun 2026 12:02:40 +0000
asID: 208185
IP address blocks: 104.250.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5c:98:39:ed:1c:7e:0b:63:af:b2:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 1 12:02:40 2026 GMT
Not After : Jun 30 12:02:40 2026 GMT
Subject: CN=7b18bb1a-8e3c-46c6-ab90-7e4d5ed76b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:0b:31:8c:7d:db:1c:90:76:c6:37:3d:e8:
14:c4:44:2a:50:70:d3:a1:47:15:31:03:b3:dc:fb:
2a:2e:0b:32:e8:f0:cd:3a:03:3e:43:61:a8:e6:6a:
a0:2c:86:7f:80:55:1d:cc:ce:c4:09:73:26:dd:9d:
ef:d4:8e:b1:06:97:9e:40:ff:36:0e:27:27:20:3c:
14:bc:97:d5:56:0f:66:d3:1d:ee:3b:50:a9:c8:70:
dd:f9:db:1f:11:8a:e3:6e:d7:07:6d:77:a8:b6:e2:
3c:06:04:21:82:30:3c:a8:c6:06:79:15:12:36:16:
8e:d8:1c:0a:cb:8d:cd:c8:82:74:e5:f4:79:ac:d1:
9c:f4:87:ac:f8:65:18:9a:ea:9b:0d:0f:75:e1:89:
b2:f2:08:b0:92:b9:7d:04:19:17:a8:12:0a:b8:d1:
f1:3c:7d:f1:08:b6:90:c5:55:02:9a:39:8c:5d:a7:
08:45:f4:6d:b1:ab:0d:98:32:3e:3b:6c:47:4e:e6:
e6:06:39:6b:10:7c:44:df:7d:f5:84:f4:45:3f:31:
49:38:7a:91:2a:e8:71:3b:62:75:23:d0:52:88:bf:
df:77:a9:9f:c6:c5:7e:d7:8c:e8:b4:d6:4d:b5:77:
37:6a:42:d5:86:a5:53:68:c4:89:38:b4:2b:41:ac:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:36:F0:E5:61:C0:32:3D:EB:63:F3:11:B5:92:43:AD:D3:DE:96:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c1c82053-3392-33ff-8323-9cd9509d2c03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:14:1f:07:84:84:00:ad:e2:b4:a6:ba:e2:87:96:36:67:91:
03:35:ab:a7:dc:2e:f9:68:33:4f:13:f0:bf:e7:01:8c:6c:83:
e7:aa:cf:d8:b4:2e:f6:97:22:d0:4d:66:35:d5:fe:84:3c:9b:
e0:f3:6d:fb:cb:e0:90:04:21:ee:cd:b2:d5:83:80:ab:82:fe:
c0:9a:e9:28:78:1a:c6:dd:5f:25:8b:af:b9:bd:9e:33:eb:ec:
a9:47:3e:6c:36:77:c6:c1:55:2b:af:5b:32:77:6b:7f:21:ab:
de:09:1c:a7:90:25:be:a6:73:64:eb:ed:9c:f6:6c:5a:b6:3e:
b8:12:84:c2:e4:e4:30:03:92:f5:37:3c:3c:04:49:2b:cc:68:
d9:8b:ff:11:45:fe:a0:38:61:e4:65:83:91:a5:f1:17:e2:62:
56:06:ef:3c:5a:98:9f:8c:6f:11:e8:6c:d1:29:dd:f1:4d:af:
7d:54:32:0e:eb:94:94:8a:b2:27:9c:58:af:00:77:ef:d9:68:
f6:79:d0:ae:83:f2:51:af:12:4f:87:a3:1d:94:8c:5e:ad:60:
c7:15:b2:12:41:af:51:9b:4d:f0:15:45:89:8c:46:18:fb:c4:
57:6b:b4:73:e3:99:c0:e1:31:16:7d:70:74:b3:1d:31:23:0d:
1e:da:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:46 2026 by rpki-client