
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
File: eff20afa-d256-340d-8b13-7a8f9e404a25.roa (raw, json)
Hash identifier: GGdWXksvzIB0DaF9Kd/COtMyscVsvaaCTb7DXnLPX9U=
Subject key identifier: 84:13:9D:EE:67:62:3F:97:4F:68:6E:86:64:E5:DC:76:3C:6F:DD:67
Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial: 010D0C9F4328584CD13CACE22A22E4C60B5B6580
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
Signing time: Tue 10 Feb 2026 14:00:41 +0000
ROA not before: Tue 10 Feb 2026 14:00:41 +0000
ROA not after: Mon 11 May 2026 13:00:41 +0000
asID: 21559
IP address blocks: 104.238.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d1:3c:ac:e2:2a:22:e4:c6:0b:5b:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Validity
Not Before: Feb 10 14:00:41 2026 GMT
Not After : May 11 13:00:41 2026 GMT
Subject: CN=0bc0158c-9ad9-40b1-ade2-2a8a87cbfeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:ea:f8:48:30:eb:23:af:9b:23:6c:7a:14:
0e:ae:b6:6f:8f:02:13:2d:dd:50:fc:12:97:da:65:
81:f4:7d:53:bf:b0:9d:17:90:86:7f:9f:e1:3d:1b:
74:76:65:4e:48:8d:fb:61:37:18:a7:c1:11:67:9d:
71:cd:15:c0:34:ab:ed:28:ee:48:bd:cd:30:e1:ad:
e7:e3:e2:5e:9b:36:ef:ae:40:0f:54:b1:08:08:e0:
ce:e4:24:5d:29:ab:9b:23:ea:93:dc:e4:b8:c2:11:
fb:bb:e5:1a:15:4f:c5:34:4e:57:24:c4:89:35:7c:
9c:aa:3f:dc:80:53:0a:a0:ad:22:34:b7:9e:65:ca:
e3:38:4a:fa:4e:9f:f4:38:ef:f8:eb:99:d8:32:09:
a6:24:c7:0f:09:91:e8:b5:e5:cf:1d:61:85:8f:06:
87:bf:32:38:50:92:4e:a6:7a:c5:10:d6:52:55:51:
3f:b6:e8:40:33:76:b2:06:36:76:e8:1b:0a:a6:9f:
28:a1:e1:fd:45:9c:34:34:22:c5:6a:fe:5e:89:69:
9f:41:76:cb:78:07:d0:a6:b8:bc:a2:8b:4a:ab:e8:
10:e5:32:96:36:64:5b:e8:d4:96:c7:b6:7e:c4:9e:
de:d8:8e:96:5d:70:23:bb:6e:10:21:8f:4a:ce:1c:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:13:9D:EE:67:62:3F:97:4F:68:6E:86:64:E5:DC:76:3C:6F:DD:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
X509v3 Authority Key Identifier:
keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.238.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:41:72:cf:fa:a1:7b:68:e7:ad:77:7f:86:3b:d4:e2:a6:fd:
cf:13:2f:51:ba:7f:e4:b2:26:f4:20:ce:c8:61:2a:57:fe:2a:
39:70:19:fb:99:9d:f9:31:45:3c:c8:f1:95:96:ba:9d:06:7c:
3a:a4:17:f6:74:0b:14:24:0d:a9:a4:ca:a3:8e:cb:19:77:c2:
88:78:ac:7b:29:61:91:aa:f5:38:8c:00:bf:0d:a7:bc:c0:87:
82:50:4e:a3:52:50:8d:33:6b:4a:7c:44:34:49:ad:25:6b:8d:
b0:8f:2c:12:17:a0:a6:74:de:07:49:8c:13:78:c3:fe:d1:e7:
70:5d:4c:60:83:aa:94:15:9d:5b:29:4d:a5:21:e4:1e:f0:8b:
38:fc:ca:4e:4e:6a:f9:2f:8e:0d:ba:69:78:9f:ec:b6:00:de:
51:93:f2:5f:55:8b:03:86:1c:6b:25:45:ed:d3:a1:2c:f5:5a:
d8:b9:5b:24:48:f9:a8:e4:ad:75:d1:10:7c:03:60:71:5f:b7:
bb:ea:2a:0c:2f:53:6c:77:8d:07:3c:e3:25:fe:cd:40:f4:33:
6f:46:8a:cf:0c:2b:c3:ef:e7:be:1a:f1:40:57:12:e9:cb:5f:
05:78:68:47:85:57:e1:a8:73:ac:72:e6:01:75:c3:fb:8c:27:
92:f8:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:46 2026 by rpki-client