
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa
File: d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa (raw, json)
Hash identifier: LT7Jnxza9U8CN3bWwAd+7ehKkuiVdQPRxRxLRkbRj/c=
Subject key identifier: 95:EE:BE:14:7E:30:55:C8:9A:78:57:E6:98:2E:9B:71:E6:F2:5A:30
Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial: 010D0C9F4328584D5E1A7325F72D2EBF3E0EBD00
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 11260
IP address blocks: 149.19.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:73:25:f7:2d:2e:bf:3e:0e:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=fcf76e90-954b-408a-9858-e57df21e5ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:20:b5:82:2d:07:05:39:80:9a:f3:ff:09:
47:98:5c:e0:e5:33:12:2a:95:c9:c4:8d:0e:66:c6:
8b:07:34:7a:18:ed:9c:c4:ac:c2:0f:8a:0d:f8:51:
fc:d2:86:67:a8:c2:62:cc:fc:1e:ed:cb:db:9c:09:
66:ba:51:6f:91:9c:7c:5b:b2:75:65:0f:f7:12:8d:
17:22:8a:a3:f5:3b:28:76:a5:16:89:73:1f:22:d3:
93:29:f8:9b:82:08:c1:a9:9f:51:b6:bb:31:87:dd:
90:13:d2:ac:1d:58:d2:2f:d9:10:ab:12:c7:46:a9:
58:23:af:7b:c9:c2:7b:a6:9c:de:0a:cc:22:d5:bb:
b0:f3:e8:71:5b:5e:e5:dc:c1:51:cc:d7:5c:c8:ab:
09:34:18:2e:d6:3c:9f:71:e6:11:ae:40:26:55:9b:
26:2a:99:32:90:ab:d1:ee:43:85:97:5d:bb:86:ff:
4d:ef:29:71:e8:34:a3:b9:3c:67:51:c1:1c:1b:49:
17:66:07:d9:a6:7b:2a:c7:37:e7:37:b4:1d:20:d2:
3a:f9:91:58:4f:69:a0:ba:50:90:ac:66:c5:91:45:
7d:66:bd:e1:1f:39:c2:56:20:b2:43:11:52:27:53:
4f:e0:8b:2e:77:1a:01:0b:6a:c7:47:e6:3c:07:4c:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EE:BE:14:7E:30:55:C8:9A:78:57:E6:98:2E:9B:71:E6:F2:5A:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
X509v3 Authority Key Identifier:
keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:2c:70:0e:26:d0:f0:6f:55:fb:e9:65:04:5f:8c:47:e3:22:
84:7e:0d:33:5f:33:1b:46:60:1b:93:fe:5a:f3:8b:90:7d:88:
cd:19:22:96:7a:ab:4f:20:b3:be:dd:d0:17:b7:d7:89:12:0a:
c7:2f:5f:26:3d:d2:14:92:93:97:51:af:50:17:af:d4:50:c8:
83:7a:43:0a:5d:a2:59:db:f4:4c:70:be:ff:5a:92:10:4b:b2:
d8:46:df:ec:30:69:16:6e:d7:47:df:9f:1f:4c:84:ed:e7:5f:
b0:7d:7c:e0:da:4d:0a:40:ba:1d:b5:eb:b0:07:f9:ab:c5:cc:
30:5c:2a:52:95:70:2a:26:0d:a4:cd:43:67:46:8c:56:3a:75:
21:25:de:15:81:58:7f:b6:12:22:c4:75:47:c6:0d:b6:b1:96:
a4:bb:4f:b4:e1:3c:b8:ed:e5:01:c3:97:87:c0:38:bf:96:a6:
d4:a1:d8:cb:dc:aa:09:a0:5d:cc:82:1a:8c:fe:55:e0:35:17:
e8:92:74:f4:8b:b1:03:38:d3:04:f3:84:90:f9:98:0c:a4:ef:
25:3f:fe:b9:0c:c7:df:5a:9f:69:14:bb:7b:13:83:53:3e:1e:
11:62:ae:9c:c8:e7:8b:e3:2b:fc:0e:b8:06:4e:5e:9f:1f:70:
0b:70:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:01 2026 by rpki-client