
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa
File: 2511b1ae-2332-3985-bdcc-82984672479d.roa (raw, json)
Hash identifier: OMV9Tp0ecdNZxHX3DzFmOKac9hZ0b+Z+rPY8o4CKubY=
Subject key identifier: 49:9C:82:24:36:3B:19:69:A4:0E:44:39:B8:8D:A9:F7:81:7C:0E:D1
Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e
Certificate serial: 010D0C9F4328584D4A8F9234B60920EF39213500
Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 16509
IP address blocks: 192.152.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:92:34:b6:09:20:ef:39:21:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=ca0bb268-86f7-4691-9216-428c5ebd84d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:6d:3c:ad:a8:23:87:07:f1:03:aa:de:a5:
23:9b:fb:0a:95:a5:88:2c:36:37:da:e1:80:c4:d3:
96:8d:aa:b6:58:04:68:94:f4:dd:aa:28:60:36:fa:
68:f5:c5:6e:b7:66:52:64:19:ca:fd:d1:28:78:d0:
8e:20:d9:53:9e:88:ce:42:02:06:97:67:b8:98:61:
5a:4a:0c:c4:d2:ca:6f:b8:61:a2:c0:22:4f:81:b6:
71:a2:b5:f8:da:40:03:b4:f2:40:0a:e6:ab:62:72:
b5:f3:0f:16:48:87:35:01:f9:6b:40:c3:6a:8e:58:
9b:1a:fd:dd:16:63:20:e5:de:0f:03:d8:47:42:34:
48:ad:5b:1b:a7:fa:af:9a:22:fc:a1:cf:2e:c2:d3:
42:b3:8a:de:bb:26:1e:c1:96:4d:c8:c0:06:1a:a0:
13:90:ed:16:22:c1:1d:c4:51:40:64:af:df:e0:2b:
b2:dc:0f:7f:9a:83:1e:79:cd:a3:64:ea:3a:27:14:
a5:8d:1a:93:2f:c7:62:56:3b:b5:8c:78:cd:ac:7e:
f1:a6:66:6a:77:48:90:07:c6:84:13:cd:97:e7:f6:
4d:7f:f9:85:a4:3c:4a:c1:e0:47:18:69:08:5f:9b:
fc:59:9b:63:61:f5:f5:0f:55:74:77:54:dc:b1:31:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9C:82:24:36:3B:19:69:A4:0E:44:39:B8:8D:A9:F7:81:7C:0E:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl
X509v3 Authority Key Identifier:
keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.152.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:21:8a:e7:41:89:5a:33:5e:1f:bd:88:20:b8:eb:c0:41:b2:
87:6c:a5:cc:17:b1:c4:a8:28:8a:0d:22:4e:4f:f4:9b:3a:3f:
5c:a5:7b:4e:61:0f:4a:1b:4e:cc:9f:a2:68:dc:23:88:37:b4:
01:18:02:39:a5:b3:b8:fa:6a:87:01:cc:27:13:21:f3:8d:20:
d2:1e:d7:6a:28:10:a1:7f:81:58:05:50:a2:92:ca:c3:ec:7e:
05:fd:09:66:f3:13:eb:8e:da:d3:0f:9e:e5:4d:30:d4:d4:c6:
fa:f1:d5:f6:3e:02:41:9d:71:57:1e:10:07:fa:7f:bf:f6:3a:
9d:1d:e0:57:f9:65:c6:0a:fb:94:8e:eb:e0:c6:fc:bd:07:24:
ab:7a:a3:9d:c3:9a:52:56:98:63:18:bc:f4:0d:4e:31:de:98:
84:63:03:19:1f:22:7f:6f:57:33:e0:78:12:30:e3:85:b9:47:
cf:f7:0c:ac:30:85:8d:8a:71:b1:41:29:13:1d:1b:90:61:86:
21:c1:51:5c:55:da:f0:3c:f3:d5:db:f3:eb:e5:d2:c8:6f:54:
6b:36:07:98:39:61:9d:35:d7:e1:23:9f:f1:43:36:91:e8:46:
8c:a2:25:a6:92:2c:f5:71:5a:76:61:f1:4b:8a:a0:70:0b:72:
83:94:17:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:55 2026 by rpki-client