
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0b748b8d-ba99-3c1b-9130-a2662d021bfc.roa
File: 0b748b8d-ba99-3c1b-9130-a2662d021bfc.roa (raw, json)
Hash identifier: PHs6ciOxJAyhs1+IeTUqhRqwZRRzGnKcO4CI6yuwFZk=
Subject key identifier: 5F:AA:75:14:FB:E1:9B:35:4B:64:8D:FF:9E:4F:2E:0E:55:C8:89:6E
Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae
Certificate serial: 010D0C9F4328584D59EA7A860ABD389AB92E2800
Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0b748b8d-ba99-3c1b-9130-a2662d021bfc.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 16509
IP address blocks: 198.22.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:7a:86:0a:bd:38:9a:b9:2e:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=c7676b0f-5eb3-4c43-8a5c-3445d67c03c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:23:78:e5:99:c4:ef:88:7c:cf:1c:fb:eb:
02:3e:ac:a9:56:50:da:7c:31:78:de:db:33:8d:79:
92:2c:52:65:16:a9:1a:06:e7:dc:8d:b1:3d:49:8a:
cc:c9:21:20:69:00:80:4d:75:0d:32:41:cb:7f:28:
b9:56:ad:b5:99:c2:d7:26:a6:7a:0d:ac:ae:a7:17:
27:a6:29:8e:d9:a9:e8:94:84:52:12:e4:c0:67:d7:
27:60:d7:82:e7:77:21:e8:6f:e4:18:1c:7e:35:ec:
20:bc:00:b3:81:db:47:42:e1:0d:a3:4c:07:c3:0c:
37:af:35:9c:eb:93:17:71:0c:05:46:07:1b:64:92:
3a:6c:da:b7:c5:9c:56:1e:12:6a:fa:c9:cc:ca:59:
84:78:e5:33:78:41:c5:04:0d:1b:bd:b4:b9:a7:a5:
8d:ef:46:fb:6c:e6:bd:3f:8d:cd:27:2a:8f:d9:f1:
ed:d5:6d:09:7f:88:46:02:5b:6e:9b:a1:37:90:81:
51:92:0c:1a:e1:31:a6:b0:c3:64:a0:68:0b:58:a7:
c2:4d:c4:a1:8b:1a:96:91:1c:cb:8f:d5:13:e4:c6:
7e:ce:c0:d8:95:85:5b:36:ba:b5:40:12:f9:82:db:
08:0c:15:10:88:47:38:9a:7e:4d:cb:03:42:6c:c4:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:75:14:FB:E1:9B:35:4B:64:8D:FF:9E:4F:2E:0E:55:C8:89:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0b748b8d-ba99-3c1b-9130-a2662d021bfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl
X509v3 Authority Key Identifier:
keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.22.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:f9:a6:1e:e8:10:e1:4e:ca:45:17:7b:10:3d:a2:dc:5c:0e:
fa:58:58:3d:e1:ff:13:60:be:b8:23:26:8a:3a:fd:e4:da:dc:
1d:09:eb:b8:da:4d:2c:1c:33:1e:a0:2d:d4:89:3a:6f:a2:14:
07:23:cf:10:60:e5:fe:77:0d:72:e6:4f:9c:5a:59:13:a2:b8:
46:49:c5:3e:b1:cf:24:ef:9e:72:ac:bf:d2:c4:63:1d:2f:7b:
dd:89:07:4f:c9:fd:64:26:e8:f8:e8:31:cd:0f:b1:9c:fc:9e:
68:cf:68:e8:30:f8:c1:e1:13:2c:9a:e5:a9:3f:75:ec:d9:6c:
5c:19:a5:d2:de:a1:c3:4d:a5:b8:00:f4:10:7a:6b:63:08:a9:
79:53:e0:cb:25:e6:bf:83:55:3c:0a:dd:ba:1a:a2:c5:5f:50:
ab:e7:8c:d3:65:a4:4f:7e:91:03:0b:fc:c5:a3:57:24:70:2c:
ba:44:30:49:91:20:37:6d:55:95:51:42:bd:58:24:63:45:c6:
04:13:3b:86:42:da:86:bc:05:db:4e:75:b3:dc:b6:c9:9c:26:
1b:c4:85:74:51:43:42:96:ef:a3:fd:80:52:18:1f:ec:4d:40:
c2:a8:6a:f1:84:6f:8f:be:e0:22:08:8b:19:11:ed:06:e0:e3:
b4:49:e9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:39:23 2026 by rpki-client