
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3d5d205b-f99a-3218-a3e7-c2919be39ebb.roa
File: 3d5d205b-f99a-3218-a3e7-c2919be39ebb.roa (raw, json)
Hash identifier: xJSaS5z+qe/P/MwzyohXoiRpyJk9h95LT3ljUs53Lr8=
Subject key identifier: 82:30:01:D5:B2:59:E6:1E:2F:5D:FC:1C:71:A7:6A:2C:90:F0:53:F2
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584D746FFD742364DC9E3E5C6D70
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3d5d205b-f99a-3218-a3e7-c2919be39ebb.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 54113
IP address blocks: 140.248.73.224/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:fd:74:23:64:dc:9e:3e:5c:6d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=533411d2-4797-4de5-878d-1cd803b1976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:bd:2e:54:4c:07:13:bc:bc:7f:d0:eb:b9:
67:95:d5:5a:78:ab:c8:90:2c:11:13:17:09:12:85:
4c:2f:a2:65:cd:4e:c2:f8:4d:4e:d9:f3:13:84:43:
59:3d:7d:0a:8c:90:02:86:c9:2a:95:7e:35:2d:70:
4e:8f:5c:40:b5:f7:e4:20:ab:6f:14:9b:4d:36:bf:
28:27:4a:82:1c:49:3c:d9:a7:05:f2:be:e6:5f:c6:
d2:34:e2:5b:e4:c8:ef:2d:d3:df:d8:18:1f:29:37:
23:f6:1b:44:54:1a:ed:a5:c0:45:8b:29:fd:96:a3:
ac:1d:61:d6:6a:1d:4a:c9:f3:18:f8:61:b5:4d:8c:
fc:4a:f9:b8:48:bd:11:07:4c:1c:3f:bd:fa:cb:b6:
2b:52:75:11:fb:cf:9b:b4:6f:34:fc:d3:2b:46:28:
cb:70:29:84:f8:1f:0d:64:19:7f:18:ca:f2:29:d2:
d2:65:83:ed:2c:40:13:e0:c4:26:74:71:4c:6a:c4:
74:d3:a3:c4:86:cd:8e:16:00:b5:e9:c7:b9:75:1d:
01:14:f1:24:90:c4:ac:22:d1:6f:91:ab:0e:1a:b4:
d8:c0:71:01:9c:53:5f:87:1d:78:ae:51:ef:61:46:
46:cf:a5:9e:63:1f:67:16:be:19:d2:91:94:fa:b1:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:30:01:D5:B2:59:E6:1E:2F:5D:FC:1C:71:A7:6A:2C:90:F0:53:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3d5d205b-f99a-3218-a3e7-c2919be39ebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.73.224/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:c0:ce:a1:c8:e1:33:d5:20:d1:64:c5:e9:0d:04:c9:44:eb:
19:3c:bf:67:68:ca:d3:4f:76:7b:91:d1:95:22:86:e9:c1:e0:
65:03:ad:0c:53:e1:d9:6c:98:cf:9f:40:45:25:8a:d0:7e:35:
a4:12:48:65:da:94:1a:82:37:7b:94:04:6b:85:10:5d:f2:cd:
81:cd:f1:4e:05:97:5e:eb:a0:49:27:a4:bb:70:64:79:66:6e:
9d:49:cd:79:5c:bb:a8:a1:ae:42:0d:03:f8:ea:3a:a2:94:57:
c2:ce:f2:ca:f3:96:c0:8c:7a:5c:29:c7:b2:b4:b5:94:1d:2b:
e2:56:7b:70:3a:24:67:32:44:18:ac:20:9b:43:ff:09:35:26:
7f:b8:a5:13:f5:e8:6a:97:b5:94:d5:bd:9a:5a:db:ea:0d:5d:
44:06:ee:9f:98:5b:8f:f8:48:d8:13:cc:13:e6:31:c1:d2:db:
1b:6d:65:2f:90:b1:dd:0d:29:ed:c3:ea:35:40:ba:d4:5f:c8:
fd:95:80:4d:34:23:ea:09:c6:ba:f9:4c:ab:64:88:ef:e5:2e:
74:43:72:95:7a:8d:28:3b:bb:ad:4a:5c:d0:29:63:ca:57:45:
4e:13:ed:f4:ef:bb:27:d1:f5:58:95:ca:90:48:be:75:4a:c3:
41:77:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:21 2026 by rpki-client