
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e32cd41d-1062-33a0-a9ac-25e2e65086af.roa
File: e32cd41d-1062-33a0-a9ac-25e2e65086af.roa (raw, json)
Hash identifier: T3EIZOuXQOUZKEwafrZvQo+GEFTpJPOjxxhm8gF8HCI=
Subject key identifier: D9:00:3A:18:9C:C1:96:38:9B:52:FE:EC:71:67:90:AE:99:FC:81:92
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584D4D5A6D0B4ACBCBF5AC0CD3A1
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e32cd41d-1062-33a0-a9ac-25e2e65086af.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 152111
IP address blocks: 206.54.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:6d:0b:4a:cb:cb:f5:ac:0c:d3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=2d9572bf-a885-40c5-8c16-303ad5441a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:06:50:f2:e1:ca:99:f3:18:e3:18:71:0d:
f9:37:c1:2d:16:42:98:bc:df:dd:9d:0a:8c:e0:64:
58:9f:78:46:c9:e9:82:2f:57:54:0c:1a:cd:93:3e:
5d:ce:98:6d:7c:db:d1:86:8d:13:eb:1a:b3:ab:cd:
2e:ed:b5:17:e6:20:7e:65:19:e5:78:03:cd:ca:6b:
16:46:70:0a:89:dd:fe:9d:0d:f6:e9:07:4a:4e:f0:
4f:90:32:7c:19:4b:fe:3a:a9:e3:8a:22:f6:9b:e4:
0c:24:7e:16:2d:7d:f5:6c:7e:18:55:00:bd:a6:4b:
f2:06:f5:1f:23:e4:86:7b:67:90:16:c9:a6:d5:c8:
71:d0:3c:f5:8f:ba:5a:1c:0e:de:f0:bf:7a:12:5a:
1a:99:57:e1:ce:e0:0b:c8:8e:c5:87:76:d5:af:a5:
5e:2b:c1:a3:a7:61:c1:a1:18:ee:53:80:9b:38:cf:
c9:0d:a1:be:b5:60:66:79:ea:fb:a9:2f:7e:f8:60:
94:98:3e:f9:ca:64:14:33:95:12:aa:35:a4:92:1e:
f0:de:62:0b:1a:eb:3c:a6:70:44:5d:68:4b:58:68:
91:0e:a6:72:d2:ff:9b:f7:15:35:d9:bc:67:04:89:
b2:80:9d:1f:12:ad:ea:43:0e:21:f0:c4:2c:c0:02:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:00:3A:18:9C:C1:96:38:9B:52:FE:EC:71:67:90:AE:99:FC:81:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e32cd41d-1062-33a0-a9ac-25e2e65086af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.54.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:75:ea:a6:97:53:e8:8e:f0:04:25:23:24:7d:68:b3:05:7e:
08:91:39:38:2b:51:cd:76:af:ad:14:fb:06:c7:71:41:17:65:
2b:90:4d:bf:e0:f4:83:1a:09:78:eb:51:13:a5:b9:7a:f8:ca:
2f:c6:2b:cf:37:88:b0:6e:44:07:14:9b:e7:8e:5f:bd:1a:e5:
54:78:0e:54:ef:22:7b:7c:d7:98:d3:91:4b:a4:1b:f9:99:a2:
ed:5e:b0:aa:cc:0d:35:65:66:5b:82:dd:49:be:9a:2e:95:28:
00:0f:01:7a:e1:b6:73:72:c3:3c:e8:26:1b:35:dd:f3:65:76:
80:af:a3:f8:a4:b5:47:4a:67:b2:3c:8f:1c:ec:43:82:27:91:
c0:3c:6a:d4:65:90:fb:2b:c7:a5:7c:25:6c:f7:c0:6f:bb:0d:
01:08:34:92:5f:7b:b3:d6:bd:80:b6:86:46:9a:47:7a:2e:7e:
c0:8d:18:49:b4:b1:59:65:6a:3e:c3:7a:5c:da:df:49:c7:3b:
3a:34:0d:ca:8d:12:af:3e:55:f7:af:ba:f3:c5:52:e6:3a:35:
9d:0f:6e:08:88:4d:68:44:49:ff:ac:40:05:bd:93:01:62:4b:
94:9d:8a:35:aa:04:ef:4b:80:d3:88:5e:c2:bc:b7:75:dc:dd:
6d:2a:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:14:01 2026 by rpki-client