
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/bbe028db-a089-30f5-8019-2fcf2297dc1f.roa
File: bbe028db-a089-30f5-8019-2fcf2297dc1f.roa (raw, json)
Hash identifier: Sk1CorpKF/CXfbN9TWosMTbxxRaqCZWohA+MrzF0CL8=
Subject key identifier: B9:08:87:BB:B9:E4:7F:54:83:53:B2:EF:4E:69:57:2F:AC:D4:04:CC
Certificate issuer: /CN=25ad5b03-90df-485a-8924-5b355c4ba415
Certificate serial: 010D0C9F4328584DE9B0890A478290B990049AE0
Authority key identifier: 61:43:89:06:8B:50:D5:D3:C3:35:63:83:3F:72:C0:87:50:24:B8:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/bbe028db-a089-30f5-8019-2fcf2297dc1f.roa
Signing time: Fri 22 May 2026 01:00:24 +0000
ROA not before: Fri 22 May 2026 01:00:24 +0000
ROA not after: Thu 20 Aug 2026 01:00:24 +0000
asID: 10419
IP address blocks: 142.202.137.0/24 maxlen: 24
2602:803:1000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/25ad5b03-90df-485a-8924-5b355c4ba415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/25ad5b03-90df-485a-8924-5b355c4ba415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e9:b0:89:0a:47:82:90:b9:90:04:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ad5b03-90df-485a-8924-5b355c4ba415
Validity
Not Before: May 22 01:00:24 2026 GMT
Not After : Aug 20 01:00:24 2026 GMT
Subject: CN=4d64d544-4955-4012-b8c5-6a13b44fc035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:68:38:70:67:a9:6b:1c:fb:75:56:1f:34:
c1:64:2f:80:96:5e:61:43:6f:e4:6d:61:df:f6:b4:
39:88:f8:fc:4e:ac:cb:7b:a3:5e:bc:d2:7b:f1:24:
16:9e:87:32:87:31:b7:3c:10:17:48:a1:f3:a5:7a:
55:1b:09:7f:a2:95:ae:9a:ff:d2:f8:9e:b2:ed:4b:
86:85:13:17:7b:4e:93:42:31:76:61:bb:23:8a:84:
78:bc:7d:a3:03:46:a6:7e:d5:51:13:3a:78:65:a4:
05:93:1a:0d:34:72:db:1c:b4:2e:aa:c0:d6:85:96:
b2:8f:12:58:02:cb:c5:78:28:8c:05:32:9b:9f:3d:
4a:1f:83:12:25:bd:68:53:03:60:a9:16:f9:d8:25:
2e:94:5c:23:3b:c8:ec:60:9c:5d:19:42:85:a2:7e:
8a:0b:76:75:51:c6:26:c7:09:bd:58:cd:b3:3b:d9:
91:a9:77:48:86:8a:54:59:88:99:22:3d:05:44:a8:
c4:e8:0c:c8:ca:0c:65:c0:04:0f:9e:63:84:09:bb:
7e:76:62:d1:87:4d:b1:4c:c0:81:cb:24:d4:01:35:
0b:c6:ed:75:4c:93:47:16:34:fd:07:c9:55:c7:59:
90:38:e5:a1:35:22:0a:c0:8b:1d:b6:50:5f:f7:5e:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:08:87:BB:B9:E4:7F:54:83:53:B2:EF:4E:69:57:2F:AC:D4:04:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/bbe028db-a089-30f5-8019-2fcf2297dc1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/25ad5b03-90df-485a-8924-5b355c4ba415.crl
X509v3 Authority Key Identifier:
keyid:61:43:89:06:8B:50:D5:D3:C3:35:63:83:3F:72:C0:87:50:24:B8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.137.0/24
IPv6:
2602:803:1000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:96:b0:49:a9:21:c7:34:fd:02:6e:7a:aa:16:96:4d:a3:75:
29:5b:cc:ee:f3:2f:bc:d3:b8:ed:33:59:27:53:7e:d9:a3:6c:
49:af:7c:d2:71:ba:75:b4:89:e4:c4:11:54:1f:f7:5c:ca:3f:
ce:39:e6:24:bc:cb:17:3b:8e:72:b9:02:82:37:76:82:1f:9e:
c6:42:f6:90:29:23:34:76:21:53:af:f4:d7:0c:25:83:dc:c5:
45:a4:87:3b:51:72:16:7f:2f:fa:83:3c:7e:98:f4:d6:b1:62:
d4:67:45:3c:89:82:b4:86:3d:e2:94:f2:ac:3b:f0:69:17:b3:
e4:c5:84:b1:f7:d0:51:bf:48:58:3a:f8:21:5b:8d:e6:07:e3:
f8:cd:e8:15:0c:2f:6e:de:73:97:2c:86:c9:6a:c2:32:9f:3c:
fa:be:d2:d2:ff:cd:0d:10:20:c6:64:f2:92:d6:5b:d9:62:f7:
eb:f3:a4:9f:6b:3a:31:9b:75:68:f9:53:6c:fd:63:59:a9:fd:
bd:5f:9e:25:4a:ff:28:10:e9:bb:10:b4:74:07:cc:2f:18:b9:
d1:d2:ab:0f:82:d8:0e:9e:68:2a:9b:35:09:cb:af:2a:28:73:
ba:e0:86:b6:f1:e8:8b:d9:34:a2:fa:0d:30:10:98:d4:c0:e7:
bc:3b:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:35 2026 by rpki-client