
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa
File: 3c829a11-727a-3693-9413-1dbca27bc52c.roa (raw, json)
Hash identifier: +gWCSfIMKoX0slm/zSBVYI0GRS14kU8a5B8KRcJm2DE=
Subject key identifier: DA:AE:36:4A:D4:29:FC:DD:40:62:B0:5E:C5:6E:2C:E3:BE:10:39:62
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F4328584CD99CCC055C9E34AE7A11D560
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa
Signing time: Fri 13 Feb 2026 14:00:41 +0000
ROA not before: Fri 13 Feb 2026 14:00:41 +0000
ROA not after: Thu 14 May 2026 13:00:41 +0000
asID: 14618
IP address blocks: 208.73.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:9c:cc:05:5c:9e:34:ae:7a:11:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Feb 13 14:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=a7cb9b48-9a87-4d48-8424-042346c7f841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:f4:4f:7b:1e:df:eb:b9:31:90:e4:37:61:
8a:7c:fb:95:58:1d:15:0e:b3:db:6e:f3:3d:11:9a:
7d:c9:fa:65:2c:8d:bd:3f:e9:be:29:43:99:13:0e:
a6:95:68:98:b6:47:fb:d9:0a:25:d9:12:aa:46:90:
e7:c4:d8:1a:9e:15:ec:02:62:da:67:30:67:1f:5e:
25:e3:7c:af:c8:34:ef:c8:81:64:8b:8d:f9:97:21:
c1:3e:98:33:f6:89:f9:c4:52:42:f9:74:fb:06:3f:
3b:18:1e:8a:0b:9c:3e:47:02:87:74:bc:a9:cb:fd:
64:d4:de:11:d7:cf:32:dd:e9:52:26:2b:eb:94:a6:
7b:3a:bf:66:fc:82:38:f0:4a:32:ec:d4:74:8d:c8:
20:c3:02:5c:4b:8f:06:b1:68:ed:bd:16:a0:27:29:
28:5b:3f:24:a7:ae:47:01:2d:81:5e:e3:dc:c0:b0:
b4:79:41:10:e4:a7:25:d3:10:af:6b:1d:39:65:9b:
5f:9d:0b:56:ae:85:d0:7e:85:3a:15:09:3f:8e:b3:
23:07:8a:82:4c:ca:48:4c:32:5b:f3:9f:ae:34:8c:
b0:00:2f:96:43:d9:ce:6f:56:ea:d5:72:ec:87:06:
cf:f5:2d:dd:b5:a1:27:ab:58:82:8c:72:86:27:73:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:36:4A:D4:29:FC:DD:40:62:B0:5E:C5:6E:2C:E3:BE:10:39:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
208.73.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:18:e5:d3:f8:60:0e:b7:7c:73:a3:75:d1:c0:49:37:d6:a4:
6a:14:d6:fa:00:1e:f8:58:0f:a1:94:05:fd:73:b1:85:4b:bc:
98:33:a8:b9:66:e6:50:50:c1:61:8b:13:33:05:bc:7a:1e:f2:
a4:f6:a3:8d:e1:33:6c:23:66:2e:56:17:b8:ba:13:33:e9:10:
e4:4d:75:6d:d0:c0:22:0b:da:1a:ee:81:f6:c6:d4:28:7d:a4:
bb:90:70:89:ed:4f:87:28:65:d1:0c:9a:d1:d2:27:49:dc:c1:
ed:53:07:79:4b:b1:75:ac:59:2f:7c:5d:97:c6:23:d9:ef:2b:
45:4f:10:48:09:29:fe:aa:b8:f2:ef:51:b6:56:e2:42:27:81:
60:1b:68:af:cc:5f:ac:91:ef:fb:14:83:78:af:42:43:54:95:
17:66:4e:72:f3:b5:55:ed:50:ab:75:ed:ca:aa:22:1e:51:ab:
56:6c:51:67:95:0e:9e:67:01:ae:91:84:ac:de:29:a5:a5:ec:
a9:b3:df:49:25:bb:2f:31:1a:e2:e7:57:cd:ca:1e:aa:5e:c5:
02:5d:31:e6:e5:ee:54:07:4b:75:bd:f0:f7:1e:1f:e9:cb:03:
88:3f:71:14:cd:75:31:77:22:dd:00:5f:f4:29:8e:12:ee:6d:
c5:d3:e1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:19 2026 by rpki-client