
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/1caa057a-5dd5-331e-920c-18a8bc208d96.roa
File: 1caa057a-5dd5-331e-920c-18a8bc208d96.roa (raw, json)
Hash identifier: pcMGjoTJZ3Q0X1VPpIFRC0yikmWZ94oKE2om8OTwpjU=
Subject key identifier: 84:5C:D2:E6:43:75:87:57:84:7B:BF:E6:24:92:BE:1F:11:F9:F3:00
Certificate issuer: /CN=2e08d2f6-4149-4115-a0f1-81e24ff55cac
Certificate serial: 010D0C9F4328584DFA7071F1E7135540C3FBBF00
Authority key identifier: 8D:7D:FF:CE:D0:A6:26:E3:10:E8:96:C3:B1:D2:D4:54:BA:7A:2A:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/1caa057a-5dd5-331e-920c-18a8bc208d96.roa
Signing time: Thu 28 May 2026 01:00:10 +0000
ROA not before: Thu 28 May 2026 01:00:10 +0000
ROA not after: Wed 26 Aug 2026 01:00:10 +0000
asID: 27623
IP address blocks: 198.161.203.0/24 maxlen: 24
2620:5c:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fa:70:71:f1:e7:13:55:40:c3:fb:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e08d2f6-4149-4115-a0f1-81e24ff55cac
Validity
Not Before: May 28 01:00:10 2026 GMT
Not After : Aug 26 01:00:10 2026 GMT
Subject: CN=381494f0-9b80-45de-867b-22514fcadad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:98:f8:5b:ff:58:46:28:ee:80:2a:8e:46:
86:61:c8:76:e7:1a:ab:e5:9b:1e:b2:32:64:dd:ea:
2f:56:19:00:d7:59:6c:7b:bd:a2:41:dd:61:2e:e6:
89:1e:44:8d:bf:c9:5c:fd:31:24:69:77:fd:32:d2:
90:76:3b:8b:84:36:8d:46:b4:25:b1:2e:9d:6a:2d:
6a:f2:51:61:e3:f7:ad:18:29:ac:bb:fc:f0:82:bc:
f4:3f:ea:3d:a6:fe:4b:f5:00:4c:61:17:1c:4e:67:
ef:67:60:87:ce:4f:ac:f3:de:88:8f:bb:e4:47:cc:
59:bf:dd:d9:f0:c7:31:50:a1:46:b6:95:82:52:64:
aa:ec:46:65:0e:b9:d9:00:b7:6d:b3:27:f8:88:d0:
b3:a8:6e:7c:09:0b:7f:d1:5c:d3:2a:31:c7:52:c7:
c4:31:1d:80:b6:93:d6:e3:70:1f:75:88:ea:b2:14:
b4:db:b0:fe:be:85:a9:da:d1:e3:67:04:ec:70:f3:
4c:c5:b5:9d:36:8a:57:b5:4a:82:de:e0:9c:01:77:
a2:dc:4b:5a:6e:d7:df:25:b7:c0:48:11:89:33:73:
51:e5:28:76:bc:35:c7:00:55:cd:bb:1d:bc:f9:54:
90:63:2c:22:ad:bd:ef:84:f2:eb:55:5e:d4:78:08:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:D2:E6:43:75:87:57:84:7B:BF:E6:24:92:BE:1F:11:F9:F3:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/1caa057a-5dd5-331e-920c-18a8bc208d96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.crl
X509v3 Authority Key Identifier:
keyid:8D:7D:FF:CE:D0:A6:26:E3:10:E8:96:C3:B1:D2:D4:54:BA:7A:2A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer
sbgp-ipAddrBlock: critical
IPv4:
198.161.203.0/24
IPv6:
2620:5c:6000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:75:0a:61:a4:42:f9:a9:7a:94:7b:f1:28:f4:d3:75:9e:b7:
2a:75:99:b9:c5:4a:2a:e0:93:23:38:d6:d0:99:a2:5d:b8:f9:
f3:c8:d0:17:30:fe:b1:9a:16:e8:bf:ad:99:f8:b4:f8:e4:7a:
84:91:af:e0:7d:d2:f4:6d:94:5b:f5:45:33:79:f6:15:cb:1f:
0a:6b:35:a5:01:02:6a:0c:04:38:69:73:7d:c7:2b:67:e4:16:
95:d3:97:00:e1:0e:78:89:99:91:80:b8:18:f8:d3:42:f7:63:
91:96:f1:43:d9:7f:73:63:be:ed:4b:d9:dd:42:55:20:a4:d4:
5f:76:be:f6:b7:d2:1a:d8:64:0b:1c:f9:5d:35:22:26:73:28:
d5:0f:0d:c2:b8:08:4e:cc:b1:1e:76:7e:91:4e:23:6f:6d:1a:
cc:41:7b:d6:ef:2e:b1:12:4a:f5:e4:f0:d9:f2:a1:45:b4:7a:
94:50:24:95:45:5b:58:2a:12:94:36:b6:d0:12:ee:27:b6:f6:
71:e2:be:fd:43:2f:01:3f:c4:0c:5a:1d:cd:2b:23:80:c3:c9:
93:6b:22:4a:52:5a:1c:cf:64:c0:c9:66:5f:a7:59:91:ff:7f:
d0:77:f2:41:3c:0b:82:79:cc:fd:77:fd:91:72:f5:23:74:03:
06:a1:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:35 2026 by rpki-client