
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/08c1e8a8-d92f-339c-b4a8-5e94c183a473.roa
File: 08c1e8a8-d92f-339c-b4a8-5e94c183a473.roa (raw, json)
Hash identifier: CHsMqhjzAJzywJrVftGOSZVltVGcnUqPF2+ypsGnXbs=
Subject key identifier: D5:A8:8F:48:96:4F:AB:4B:B5:FA:2C:EA:C2:99:F9:7F:85:17:91:F4
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584D60E50BF7792C8C397EC1ED80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/08c1e8a8-d92f-339c-b4a8-5e94c183a473.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 30058
IP address blocks: 50.7.144.0/22 maxlen: 24
50.7.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:0b:f7:79:2c:8c:39:7e:c1:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=fec40482-b95b-46d1-8e79-f459563ff1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:d0:61:1c:65:72:ce:df:da:d4:ab:dc:a4:
fc:8d:42:d4:2b:0d:a8:11:28:95:df:95:00:ac:59:
77:e9:92:70:be:48:59:62:13:5b:6f:78:3f:6b:ab:
d2:34:d0:ed:97:22:b4:31:aa:4d:a1:f4:20:66:80:
8d:12:42:cd:0e:66:a6:8b:64:bd:0f:91:2a:ae:d9:
13:13:5d:f1:c9:26:08:5e:03:98:ab:f1:f1:16:18:
76:80:78:6e:2e:ff:3c:0a:12:f3:83:59:98:65:6e:
d4:27:b5:ef:56:65:80:ad:8e:f5:45:50:a0:20:da:
e7:1e:97:e3:c1:59:b9:53:ce:59:33:12:7a:39:19:
4e:1f:f5:a4:a9:c1:d1:4c:1d:d0:cb:7f:0a:5b:c4:
cb:9c:f7:40:10:2a:80:b2:2a:31:a9:06:ea:43:33:
a0:93:f2:13:e3:c5:39:f3:5e:93:f8:69:b6:cc:d5:
8b:7c:94:09:61:0e:e8:51:32:44:b0:ce:c5:70:e7:
07:27:15:c0:82:83:d6:1c:08:31:4f:b4:df:b0:7d:
ec:6a:fc:13:52:a0:a7:cf:d3:4d:f2:de:29:5f:66:
4e:9c:73:75:fa:00:52:b6:cb:54:f1:5f:d0:6d:f6:
18:93:2b:d6:a1:30:f9:cb:d2:42:6b:48:36:40:c3:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A8:8F:48:96:4F:AB:4B:B5:FA:2C:EA:C2:99:F9:7F:85:17:91:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/08c1e8a8-d92f-339c-b4a8-5e94c183a473.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
50.7.144.0/22
50.7.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:ee:a0:3b:4c:b9:34:73:5c:a1:07:2f:53:1e:29:ed:4b:44:
5d:7c:2f:3e:bd:25:04:44:a1:05:01:81:8e:ce:d1:05:b9:af:
06:70:fe:d2:8d:b6:63:50:d0:f7:ee:93:41:8c:bc:8a:53:00:
b4:4f:05:f7:e3:50:39:2b:43:1f:04:24:22:af:84:52:b8:4e:
50:59:0f:92:6e:af:ce:85:12:54:cf:a9:3f:09:c4:dd:a7:8a:
04:a3:39:b6:e5:56:32:67:1d:2d:3c:1b:b0:45:de:3d:79:40:
bf:fd:14:a8:a8:17:7f:29:e5:0a:b9:dc:5d:e2:21:e0:f7:fb:
e6:cb:b6:40:95:ef:f2:75:24:0f:b0:2e:29:78:1a:7b:f1:34:
5e:20:b5:50:66:b4:94:d1:32:9f:6c:6c:48:36:ba:e7:80:ed:
3a:0f:06:e6:1b:f5:6a:90:5b:be:5d:a3:c9:d8:b1:0a:d7:40:
b9:01:f0:14:4a:a4:4c:10:80:10:98:25:6c:cb:88:14:b9:0f:
c0:8c:45:7d:64:97:70:11:45:53:c6:8d:be:75:10:16:b5:aa:
f8:2c:6b:05:da:a1:18:fe:0d:c6:7a:12:26:f9:ea:95:60:42:
1b:a2:51:1c:69:e8:0a:22:34:70:45:f9:3d:25:05:d2:2b:ed:
6a:95:8f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:33:29 2026 by rpki-client