
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa
File: cf9e080d-5220-3f48-8b51-39615620115f.roa (raw, json)
Hash identifier: pAEoH3y2n/uoj67Rg7OjRZA93/C9IdMUpLsswacHLEQ=
Subject key identifier: E0:EE:45:3E:DD:E1:BA:D6:49:E3:74:2C:58:11:12:09:6F:49:E3:32
Certificate issuer: /CN=af93a26c-49ee-415a-bda7-07e781689339
Certificate serial: 010D0C9F4328584D703FE73C5672D747634EF298
Authority key identifier: 72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa
Signing time: Wed 08 Apr 2026 13:00:33 +0000
ROA not before: Wed 08 Apr 2026 13:00:33 +0000
ROA not after: Tue 07 Jul 2026 13:00:33 +0000
asID: 33191
IP address blocks: 208.103.161.0/24 maxlen: 24
2602:f79a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:3f:e7:3c:56:72:d7:47:63:4e:f2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93a26c-49ee-415a-bda7-07e781689339
Validity
Not Before: Apr 8 13:00:33 2026 GMT
Not After : Jul 7 13:00:33 2026 GMT
Subject: CN=8d83e330-fff8-4067-8b0d-183b3227b6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:64:e6:50:0b:e4:9b:d7:35:0e:e7:31:3d:
32:0d:af:74:89:fb:62:2c:bd:6b:b1:c4:5f:a5:b3:
c3:d8:44:df:24:a1:e6:88:98:f1:31:48:d2:75:ee:
82:7a:f3:48:35:87:94:96:a6:ad:d7:ec:70:2f:b8:
ca:95:e4:84:59:7e:1c:a6:7b:f8:71:c9:d6:dd:a6:
ba:9e:ca:05:a3:e1:73:da:c3:7f:31:3a:85:75:b3:
9d:cb:77:2b:ea:38:82:f3:e4:7b:09:4e:7a:7e:65:
43:81:59:c2:0d:6a:1c:6f:a7:ac:84:d1:91:04:d4:
d5:6a:8c:8f:38:66:a3:dd:67:f5:d9:a1:f9:ee:29:
c9:03:db:70:d2:50:97:7c:9b:cc:e3:8a:d2:60:bc:
32:48:22:92:83:a1:d6:33:22:58:0b:d7:3f:71:7d:
22:92:33:ae:74:ce:0e:64:11:95:71:ce:56:24:0c:
29:bc:fa:08:fc:0b:eb:e1:83:3f:04:b2:75:db:f4:
58:65:43:1f:bd:21:29:3d:aa:c4:7f:e8:2c:b7:6f:
2e:8b:30:c1:53:6f:54:7b:7d:fe:86:d2:6f:86:3c:
2e:9f:fe:e7:01:cf:03:a5:c2:07:b7:2d:ad:78:e5:
d7:28:6c:11:7a:49:34:3e:f3:96:7f:1d:6e:72:85:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EE:45:3E:DD:E1:BA:D6:49:E3:74:2C:58:11:12:09:6F:49:E3:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl
X509v3 Authority Key Identifier:
keyid:72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.161.0/24
IPv6:
2602:f79a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:6b:9c:c9:8f:cd:98:ba:ac:4c:6f:21:a9:13:80:fe:6a:25:
09:95:25:5b:31:81:b4:50:89:17:f1:86:86:a4:3a:a5:24:84:
ff:00:b0:33:b9:4a:dd:09:bb:1a:33:6c:12:12:ff:49:93:88:
df:d6:36:a0:e5:28:11:a3:a6:07:41:89:27:03:2e:fc:4f:52:
7b:86:91:cb:86:4f:39:14:18:dd:81:5c:f3:ef:60:7c:ba:c6:
9b:d6:fc:22:f7:27:fe:80:27:13:90:5d:46:53:e0:ea:eb:fa:
8d:4d:cb:2e:36:1f:35:b9:a8:4f:ca:5f:a9:95:9d:a0:16:d8:
da:5b:b1:9d:72:c5:e8:71:31:24:00:bf:cc:ee:c7:a7:3e:4d:
5b:9c:2a:b2:f2:77:b6:40:a7:7a:d2:0f:6f:f8:51:db:73:f4:
25:a1:ba:e6:5d:8f:0d:27:ff:22:6f:d0:fc:9c:86:2e:c1:2d:
11:6e:c4:54:ab:fd:b4:49:99:ac:77:3d:88:d4:5b:99:3f:e3:
b2:72:99:7b:1a:be:4c:b1:ad:c9:7d:3d:50:33:60:de:66:4d:
d8:4f:b0:0a:e7:3e:24:a1:90:5a:d6:92:8f:50:54:0e:23:2b:
4a:1d:da:d7:97:22:55:65:99:17:61:47:55:cc:bb:af:13:49:
13:31:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:01:36 2026 by rpki-client