
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/a2e1241f-8f1c-331a-b0e2-b0f34a9c6b6e.roa
File: a2e1241f-8f1c-331a-b0e2-b0f34a9c6b6e.roa (raw, json)
Hash identifier: 2k6Eh0U0YgROLNPDNI+FkItdiiEcp7ovdLK5xXLzc0M=
Subject key identifier: E2:32:B5:35:26:AD:15:CB:CD:77:C9:C2:76:34:36:80:A7:F3:DD:92
Certificate issuer: /CN=af93a26c-49ee-415a-bda7-07e781689339
Certificate serial: 010D0C9F4328584D60E517C63F916FE45A869A80
Authority key identifier: 72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/a2e1241f-8f1c-331a-b0e2-b0f34a9c6b6e.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 14618
IP address blocks: 131.149.232.0/24 maxlen: 24
131.149.233.0/24 maxlen: 24
131.149.234.0/24 maxlen: 24
131.149.235.0/24 maxlen: 24
131.149.236.0/24 maxlen: 24
131.149.237.0/24 maxlen: 24
131.149.238.0/24 maxlen: 24
131.149.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:17:c6:3f:91:6f:e4:5a:86:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93a26c-49ee-415a-bda7-07e781689339
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=df11f6ae-12d1-4e68-83af-39ba54970c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:e2:0b:b5:65:b6:c7:ba:4b:10:b7:36:9e:
fd:3f:0a:9d:e3:34:63:f7:85:b5:e9:5a:3a:bb:91:
a7:e2:eb:1d:d3:0d:19:16:0e:b0:18:00:3b:d6:8e:
4a:5d:f4:46:da:63:53:4f:63:bf:c4:a3:58:a1:f5:
b9:fa:d1:2d:e7:6c:b9:b6:eb:e7:ef:97:d8:09:4c:
b2:d1:57:d6:d7:c4:76:a6:b1:2e:d6:0c:33:9d:99:
09:6f:c3:62:7d:af:c1:62:ff:0d:13:c5:7d:e5:4c:
c5:d9:7c:ce:97:8d:16:d7:4e:c5:76:80:d1:b0:6c:
a0:2a:a5:c1:82:30:f1:10:0e:ea:ef:10:0d:00:7f:
db:74:da:1b:b9:26:58:8a:53:13:69:7b:d4:a5:72:
82:41:0f:dc:53:4e:b6:8e:ab:3f:e9:11:78:40:2a:
8e:3c:50:d5:79:70:1a:37:b8:bc:22:53:38:5c:bc:
bd:f0:fb:ff:dc:33:0b:ad:70:53:63:c3:ff:d0:41:
c0:37:be:6c:45:4b:9d:65:de:ea:f6:5a:2d:8f:a1:
c6:af:26:29:c0:97:f1:47:2b:e3:0f:7f:14:f2:9d:
80:b1:5d:6e:e2:92:c0:cd:78:79:f0:59:d3:bc:a3:
60:8d:de:1d:c9:7c:27:cf:0a:e6:93:a1:5a:c0:49:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:32:B5:35:26:AD:15:CB:CD:77:C9:C2:76:34:36:80:A7:F3:DD:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/a2e1241f-8f1c-331a-b0e2-b0f34a9c6b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl
X509v3 Authority Key Identifier:
keyid:72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer
sbgp-ipAddrBlock: critical
IPv4:
131.149.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:9d:18:94:1c:97:92:69:6f:db:7f:25:2d:28:e1:08:18:d3:
12:25:de:26:94:4b:38:78:55:89:5f:86:a9:b6:f2:54:9f:81:
0c:bd:c1:c2:48:19:40:54:8e:b7:ee:1c:99:e8:f4:f4:23:f6:
ab:91:92:47:08:63:6c:64:95:c9:8f:b8:b1:05:aa:ac:d4:e8:
96:eb:c8:d1:00:b7:83:58:d5:29:e1:c9:36:c9:d5:c2:db:95:
26:32:26:79:0b:24:4d:58:31:ca:55:71:09:8e:34:12:5c:3f:
57:7b:80:b5:a7:9f:ce:7c:b8:ce:9f:8b:cf:2b:03:7b:62:42:
f6:fa:86:97:37:cf:49:6c:c7:d0:f6:56:78:f2:d3:03:1f:93:
80:76:a7:98:34:60:9a:09:6e:1b:ff:7e:8d:6a:c0:2c:1c:64:
a7:3b:af:a3:e2:9a:be:df:dc:dd:36:54:84:01:45:42:47:e1:
83:a8:7d:d3:ba:1a:f0:bf:cc:4c:68:ac:81:da:3d:90:57:0d:
77:d2:41:d3:c2:ea:26:0d:12:2d:54:70:07:5d:b5:ff:09:97:
36:52:4f:29:87:b0:df:8a:44:63:80:e0:8a:d8:18:38:c3:f6:
0e:cb:05:e2:9f:84:3e:ef:75:cf:87:2d:94:ae:04:25:83:dd:
14:69:7c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:14 2026 by rpki-client