
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa
File: 308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa (raw, json)
Hash identifier: J9gdnbhJlrTTzWSQmE1+dvL6q5yE3TMoXNNyLMGZz2s=
Subject key identifier: 58:BB:38:B6:FE:69:DD:76:6C:68:F0:CE:4D:1D:F3:34:D1:97:0C:71
Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial: 010D0C9F4328584D5E1A6E7B23DB121290DE7EA0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 16509
IP address blocks: 207.202.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:6e:7b:23:db:12:12:90:de:7e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=208c91ff-7009-4422-86e7-897db0b08d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0e:79:c8:05:17:4e:8a:4f:54:e7:1c:7d:77:
69:a3:2b:0e:1e:58:52:6b:6e:7c:99:eb:b0:95:9f:
a5:4a:17:6c:bb:9d:3a:d7:40:22:72:37:84:40:37:
ef:e2:17:26:d0:b2:22:60:7e:07:e9:90:9c:2e:2e:
da:eb:b6:2f:0d:f4:d6:84:c6:43:42:62:36:44:66:
a1:18:21:bb:46:86:87:50:62:ab:32:dd:bb:9c:cd:
0b:2f:77:5d:c0:59:af:78:f8:c9:57:9f:9b:f6:da:
0e:9b:dd:9c:08:ac:63:dc:23:88:f2:70:f2:ee:a8:
e1:08:58:3d:c9:fd:cd:15:56:fe:09:72:34:c9:10:
e5:23:ac:f7:2e:49:11:2c:e4:05:de:d8:b6:1f:83:
a3:60:5f:b2:f2:71:75:4e:06:a5:37:97:24:95:a5:
67:60:89:1b:52:25:90:85:3f:1a:bb:e5:10:c7:92:
77:50:35:e1:1c:76:b9:92:0f:da:82:4b:26:6f:c3:
ac:19:e5:3d:0b:82:c9:8e:ff:78:75:f8:8c:41:ce:
d5:d0:26:3b:98:11:a3:1c:c0:38:eb:a5:41:59:3a:
02:6a:e5:f8:66:f6:5e:b8:a1:9d:16:cb:77:79:cb:
c8:64:01:c9:19:32:8e:9a:cf:fa:87:8f:4b:b2:58:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:38:B6:FE:69:DD:76:6C:68:F0:CE:4D:1D:F3:34:D1:97:0C:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
X509v3 Authority Key Identifier:
keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
sbgp-ipAddrBlock: critical
IPv4:
207.202.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:9e:5e:8f:05:27:f4:8d:32:6a:4b:fc:9c:f2:4d:21:f9:8d:
83:fb:3d:b4:f3:ee:67:97:58:d1:e9:b9:83:fe:47:25:45:a4:
a1:1e:c7:3a:2b:e4:d6:1a:2a:72:6f:6c:7d:76:1e:05:2e:b7:
50:5c:9b:14:a9:68:87:d1:84:c6:27:49:5c:b1:b0:40:46:90:
04:c0:6e:dc:d7:94:2d:47:3f:af:d8:6c:b0:3a:9a:77:73:f1:
58:07:10:47:ad:d7:27:30:d1:b3:6a:fe:2e:25:7f:1e:81:9f:
f7:ea:f8:0f:44:fd:81:f6:be:d4:33:4f:4b:d1:26:9b:54:b0:
08:2b:bd:a3:ed:2e:0b:89:52:1c:ea:3b:51:5b:94:1d:fe:2f:
e8:47:0d:3d:82:b2:5e:17:ab:f6:7a:4e:3d:8f:9d:ff:12:28:
cc:b0:3d:4b:8f:ea:61:35:a9:88:ce:97:3e:e0:bf:5e:03:8f:
59:7c:6a:7d:3a:fd:79:66:97:f3:7d:45:cf:78:15:98:c1:ea:
58:c9:80:38:f0:48:c3:69:54:35:69:b0:3b:af:b9:88:8b:0b:
d4:f2:a4:88:4c:76:14:f0:f1:33:51:8d:c0:18:41:f1:2d:ae:
81:72:7c:72:5c:ab:f6:09:7e:84:ce:b6:dd:2d:25:4d:d8:4c:
a5:15:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:44 2026 by rpki-client