
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa
File: 2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa (raw, json)
Hash identifier: xgzv0SrGmVyg7zt862r2dr2yg/aHC+stvqR3cQRoxC8=
Subject key identifier: 07:89:43:FF:44:53:84:0D:E8:BC:30:77:74:28:59:06:1F:02:72:A9
Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial: 010D0C9F4328584D667A4BC5B56C8F18C8131240
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa
Signing time: Sun 05 Apr 2026 01:00:24 +0000
ROA not before: Sun 05 Apr 2026 01:00:24 +0000
ROA not after: Sat 04 Jul 2026 01:00:24 +0000
asID: 401395
IP address blocks: 192.157.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:66:7a:4b:c5:b5:6c:8f:18:c8:13:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Validity
Not Before: Apr 5 01:00:24 2026 GMT
Not After : Jul 4 01:00:24 2026 GMT
Subject: CN=cc477e99-8869-4870-ade4-a63185017a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:5e:db:ae:04:be:6a:bf:b5:72:bb:fc:e3:
b4:6c:18:25:93:e2:08:65:cf:25:9e:b2:2e:af:1f:
f2:cc:5b:87:9d:cc:39:18:4c:8b:d8:c2:36:0a:55:
1a:26:a8:e9:db:d9:56:dd:7c:22:0c:8e:71:af:17:
17:37:26:f0:c3:90:02:77:30:79:53:68:59:81:97:
a0:95:5a:f5:23:64:dc:43:65:65:23:5b:31:c1:95:
4f:3b:a8:eb:c3:eb:25:eb:f8:e8:4a:64:34:31:12:
b5:14:78:ed:60:44:f0:dd:89:69:62:9d:c7:98:0f:
06:f5:f1:11:91:12:d4:0c:88:e1:fc:87:0b:61:1c:
2f:ed:0d:ea:43:b1:78:f3:f2:91:1a:47:bc:37:49:
27:ff:86:1e:70:d9:8e:2d:4f:b2:80:df:5b:a7:57:
8d:93:ba:ea:10:61:ed:bb:c8:7f:9a:f8:28:18:52:
75:62:11:66:1c:92:6a:66:af:31:3b:4c:bb:33:8f:
64:86:3a:76:68:93:31:71:d1:46:e2:8d:aa:54:ea:
82:89:da:e4:d3:f0:9f:c2:e5:b4:33:13:93:51:8f:
84:cc:54:02:3a:f7:d8:12:75:02:1e:6f:f4:2b:7c:
d7:16:84:30:c4:39:a6:d6:f0:a2:30:57:b3:61:b7:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:43:FF:44:53:84:0D:E8:BC:30:77:74:28:59:06:1F:02:72:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
X509v3 Authority Key Identifier:
keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:5f:2f:fa:07:6e:8d:36:c0:e0:62:1f:3e:40:79:d2:7a:be:
88:35:08:33:c6:6e:b1:34:be:ec:f6:bc:90:4b:2c:46:2b:58:
cf:74:6e:07:35:85:55:2b:1f:5e:8e:ce:82:02:9d:f7:d8:e4:
b5:af:9a:74:ed:93:66:62:20:ac:eb:59:bc:b7:46:f8:cc:fe:
2f:9a:75:94:f4:20:1b:71:74:15:1b:43:f4:c6:70:86:90:ac:
76:a3:a5:b6:fe:18:b0:4d:e7:e5:06:d3:d5:f0:cd:42:93:83:
52:f1:f9:eb:08:c1:22:50:50:08:03:bc:87:d7:87:cd:e0:d0:
90:bc:02:6f:70:19:cd:9b:a7:f3:98:38:1f:b3:3a:3e:8c:0f:
c1:82:5d:7a:16:f2:dd:20:16:18:74:65:cf:58:5e:fb:26:f3:
ca:10:89:ef:fc:9c:cf:64:ac:8f:71:db:ac:28:aa:10:08:c3:
69:33:6b:36:69:76:37:ab:48:29:44:bf:d9:ed:48:cc:6d:76:
0f:0c:ad:0c:2a:0d:46:fc:d2:0d:f2:62:ae:45:4b:02:a0:7e:
e1:3c:a8:6d:92:66:3a:b1:17:0c:5b:43:de:ce:f2:21:c8:2a:
a6:79:34:6c:a5:d3:22:49:33:c7:06:3b:c5:bb:c7:a8:1b:3a:
95:6f:04:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:54 2026 by rpki-client