
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1f665a4d-9973-32ba-bac7-ae9dd438c88a.roa
File: 1f665a4d-9973-32ba-bac7-ae9dd438c88a.roa (raw, json)
Hash identifier: IPe5azj2vwIc9BsTUS0mUnPVh2RrX1MxhpMZRgCyk74=
Subject key identifier: 11:4E:1E:E0:75:F7:DD:33:35:26:3F:A3:02:13:48:A5:E6:70:90:25
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584D5F7FB44551004C813C5718C0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1f665a4d-9973-32ba-bac7-ae9dd438c88a.roa
Signing time: Thu 02 Apr 2026 13:00:30 +0000
ROA not before: Thu 02 Apr 2026 13:00:30 +0000
ROA not after: Wed 01 Jul 2026 13:00:30 +0000
asID: 151302
IP address blocks: 153.43.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5f:7f:b4:45:51:00:4c:81:3c:57:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Apr 2 13:00:30 2026 GMT
Not After : Jul 1 13:00:30 2026 GMT
Subject: CN=7c81a67d-2021-454c-b000-c35dc7fa81b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:00:40:39:12:fd:38:06:07:6e:bf:cc:75:
1e:92:0f:e3:6c:ec:5a:58:08:64:26:d3:1a:01:0d:
73:f2:98:a4:b5:93:de:fb:ee:e0:1d:97:bb:55:a1:
96:f1:20:6a:a3:67:45:c1:e0:28:03:29:0c:4b:65:
c5:0d:bc:09:61:d7:2a:c1:c5:a9:e1:17:45:b5:03:
ad:67:3c:4e:e2:95:00:35:da:67:67:96:d9:e4:93:
fd:38:99:56:ab:14:a9:cd:1a:71:f0:f1:c0:84:98:
1e:c0:4b:93:80:fc:72:1b:74:ae:cb:cb:c1:9d:c5:
80:1d:ab:9f:f1:30:a0:62:ab:4b:e1:a7:f5:93:7c:
e4:cf:e5:fd:92:44:cc:1f:ec:6c:a5:4e:8d:ce:b8:
82:5e:1f:48:f4:a0:0d:d5:55:0c:bf:1a:91:fe:e9:
46:25:38:8c:a4:34:e5:a3:87:b4:7b:93:8b:38:22:
10:95:7b:d7:9b:e1:37:75:04:dc:5a:4c:18:0f:5d:
46:20:38:a2:82:69:f7:a3:8f:bc:e1:95:2c:98:79:
fd:28:68:b0:46:7e:40:0f:85:5c:77:8d:29:39:45:
e5:e6:09:10:58:b7:03:0a:14:38:54:5e:b2:26:9a:
62:5a:86:1d:5b:ff:fe:34:d1:88:e0:db:00:a7:8b:
65:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4E:1E:E0:75:F7:DD:33:35:26:3F:A3:02:13:48:A5:E6:70:90:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1f665a4d-9973-32ba-bac7-ae9dd438c88a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
153.43.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:c9:06:ab:0d:98:2b:df:64:ea:15:61:35:a8:ce:12:8f:bd:
b0:54:50:95:2b:60:6c:58:da:e6:83:ea:5e:52:75:76:56:3c:
48:e4:50:c8:dd:23:81:4d:22:5e:8c:23:e5:72:bc:f9:b1:5a:
19:c5:19:3d:1b:ae:79:2c:2e:0b:db:15:3d:fe:f5:0b:dd:ce:
64:d9:f9:e4:ee:e9:ac:5f:e7:7d:a4:16:a1:48:8e:de:a6:df:
9c:bd:bb:91:76:89:b6:1d:26:ca:a4:83:a5:f1:e2:aa:f1:3e:
f5:67:df:49:7c:56:09:0b:f5:88:3d:65:25:98:b9:db:74:77:
59:51:60:07:85:f6:26:47:bd:34:aa:ed:bd:6b:5c:59:0e:62:
6e:cf:85:6d:2c:32:fa:18:6a:e7:02:6c:29:47:48:d5:a5:29:
e2:a0:a6:d4:83:c2:83:24:de:ab:73:3d:ba:68:59:cd:a1:ef:
02:33:8d:55:cc:99:03:8b:33:24:ec:e3:5f:46:7b:a9:9f:6b:
fa:73:43:f5:84:0a:6f:8b:93:10:ae:86:f0:21:68:a4:d3:95:
2f:ff:cc:7d:80:e4:8e:e6:1f:7e:dc:28:ab:d3:f6:e9:d3:7e:
bc:00:a6:66:7e:b9:53:31:28:30:89:bc:d0:2f:78:c0:c1:0c:
4d:9e:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:00:55 2026 by rpki-client