
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ba5ae14-e5f7-3b3c-9cce-eabb8e347920.roa
File: 4ba5ae14-e5f7-3b3c-9cce-eabb8e347920.roa (raw, json)
Hash identifier: mXtAPvkyM7J46EV7iL07cligqYffUqtCmW0DwfFHaN8=
Subject key identifier: 88:1B:4F:D5:AB:F9:5C:43:32:C2:D0:31:28:EE:E9:DB:CA:D3:F6:EF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D869572C1B7722C8B7C48C8A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ba5ae14-e5f7-3b3c-9cce-eabb8e347920.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 16625
IP address blocks: 104.103.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:72:c1:b7:72:2c:8b:7c:48:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=2d26c9c7-1668-4223-9276-2dc2e29965ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:71:9d:ce:15:3c:6a:f0:87:5e:26:9a:19:
0e:db:93:83:ef:93:f5:a0:26:3b:e7:19:2c:cf:ed:
02:bd:dc:81:ef:6f:f9:b8:21:46:ef:90:89:e8:85:
ba:c0:26:3f:c4:bd:11:6d:54:a8:f0:6f:22:76:9d:
30:5b:3b:67:1b:76:02:df:d6:eb:52:d6:8e:c5:ac:
9c:db:b9:4a:4c:81:6f:ae:3d:93:65:16:87:e1:c1:
ee:c0:c4:7f:8e:6c:1e:7e:f0:74:de:e2:99:5e:9a:
28:8f:93:db:be:d6:1b:53:93:57:5c:0a:ef:5c:da:
51:17:bb:f2:b9:04:cf:f6:0e:36:8c:24:ae:6a:c9:
ea:e2:c0:d1:a9:98:b6:a9:16:29:2e:eb:0d:d6:02:
57:fc:8d:f2:41:2d:bc:fb:e1:84:78:1b:c8:f5:e1:
aa:98:35:63:ec:2f:bd:93:cd:a3:03:7d:f6:ef:4d:
17:62:8c:e1:81:58:29:80:e6:c1:44:e0:ac:28:3b:
3d:43:66:a1:7b:36:34:37:f0:f3:4c:2b:4d:ec:27:
ac:df:13:4f:f4:33:c6:bd:04:eb:d6:7a:99:7f:e8:
b2:cf:d7:56:c7:0f:cd:67:b6:f7:86:16:1f:5e:e5:
1e:38:dc:fd:e9:e5:41:ff:37:e7:9d:91:bb:39:5b:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:4F:D5:AB:F9:5C:43:32:C2:D0:31:28:EE:E9:DB:CA:D3:F6:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ba5ae14-e5f7-3b3c-9cce-eabb8e347920.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.103.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:07:f7:dc:50:c0:2d:80:cc:dd:92:eb:6a:db:7a:fe:d8:56:
b6:1e:e5:f7:a2:89:30:ed:4a:5b:3b:2a:ee:6b:4a:46:75:4a:
20:d0:ec:4d:79:b4:00:78:09:0e:1e:d1:ed:b7:01:b3:55:bf:
bf:73:e8:91:16:a3:60:13:09:74:1b:64:98:4c:f4:70:bf:9a:
65:8b:54:a7:d4:7c:e9:d0:f6:57:c5:c7:a1:90:7e:99:fa:48:
e3:3c:ee:5f:91:f9:d8:9a:53:59:12:25:34:cc:1e:3b:95:e2:
b7:a8:49:ff:75:cb:8a:bc:d2:f6:52:d4:48:cd:9a:ec:e0:42:
41:73:75:87:7a:8e:e9:9f:e0:a8:94:3f:9f:b5:91:d7:38:7c:
a5:69:dd:0e:7c:4c:8d:3c:b0:68:a8:dd:d5:ac:e6:e4:77:64:
3e:1e:6f:e5:3e:eb:cf:92:b2:6c:ce:e9:ba:61:d3:7e:52:56:
90:64:34:97:2a:b6:4c:ca:eb:bc:49:01:9d:56:16:15:a4:17:
06:83:00:05:ca:f0:dd:c1:fe:cf:a8:9b:e2:6e:e8:6a:f9:61:
67:cb:35:00:4d:e3:00:28:17:7a:c7:18:11:e2:f6:ed:3c:44:
4b:c5:33:cd:cc:ef:65:c7:fc:e2:d8:77:77:c2:37:20:07:6a:
ea:49:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:44 2026 by rpki-client