
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c1013b0b-a48b-31db-ad5f-184709524207.roa
File: c1013b0b-a48b-31db-ad5f-184709524207.roa (raw, json)
Hash identifier: xMdMFo0PY4klLs2/YVNjf6ITKETM5bN7wAKiK7uApq0=
Subject key identifier: 8F:0E:C2:8A:0A:D4:79:8B:4B:DF:D4:03:BA:D3:9C:5A:A5:F5:0C:02
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328584D1F4A75CC9CEA0BD14B4E84A0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c1013b0b-a48b-31db-ad5f-184709524207.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 36040
IP address blocks: 104.237.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:75:cc:9c:ea:0b:d1:4b:4e:84:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=c2491bff-2529-4087-b1da-15e4c34923b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:22:fe:60:59:76:e8:69:2f:fd:54:d3:16:
6c:4c:26:6d:7e:81:14:92:d0:3d:24:77:ac:65:40:
76:c1:c7:00:75:a9:63:87:85:fe:88:d4:16:8b:2a:
d8:90:e8:7b:77:8c:4d:c8:1f:2c:6b:2d:c1:b5:70:
6a:c3:96:74:97:af:a1:bb:ff:68:3e:e4:94:1b:20:
7b:18:bc:45:e0:8f:48:30:81:2a:a5:a3:93:d1:dc:
af:5d:99:dc:e5:eb:54:cf:a9:60:3b:8f:f1:d2:d4:
e1:14:a6:98:09:4e:43:f0:df:5c:b6:c9:d9:c0:cc:
59:f8:98:ad:a7:0f:80:08:77:14:11:64:0a:3e:d8:
63:d4:c0:2a:7d:9c:4a:57:20:81:89:22:10:0a:d4:
bf:dd:25:e1:15:7e:81:bc:89:bc:14:13:73:65:f2:
ac:1a:9b:a7:62:d0:28:f4:87:1e:18:ed:d6:2a:ee:
30:7c:3a:1f:67:0e:5b:92:47:b1:54:af:fc:ee:27:
3e:a3:d2:ac:3d:a7:8b:7b:8b:17:24:54:12:7f:c9:
28:91:22:0f:a4:5d:fd:3f:a6:bd:90:c4:90:6d:68:
43:5b:aa:50:f9:ce:1f:c3:12:89:50:ac:fa:5d:ed:
41:a1:5a:46:08:15:ea:da:80:ce:80:ca:e0:7d:1d:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0E:C2:8A:0A:D4:79:8B:4B:DF:D4:03:BA:D3:9C:5A:A5:F5:0C:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c1013b0b-a48b-31db-ad5f-184709524207.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:0f:10:3a:86:c6:e3:bd:c9:af:0a:b5:d2:31:4a:07:b8:5d:
13:d8:ee:c6:c8:47:d6:90:a5:ae:c6:8d:31:b4:20:cb:e7:1e:
48:9c:94:f6:35:89:e6:62:5f:5d:fc:e2:aa:72:f9:49:0c:5b:
10:58:82:76:d6:8e:80:4a:d9:1d:a3:53:f5:99:c1:8c:45:d4:
d3:76:86:18:59:de:c0:e7:58:fe:a6:41:f1:f5:46:65:bf:80:
a6:c2:e5:65:9b:f0:87:b3:a6:a8:82:4a:f6:cd:0a:70:a3:61:
01:2b:3f:7c:c0:eb:f2:56:c9:61:ad:63:b5:93:91:59:f0:62:
8d:9d:f4:ea:57:a8:fd:d7:c6:19:62:d5:15:fd:4f:b4:60:fd:
20:ea:d4:72:5f:9d:5c:ed:46:96:65:0e:25:16:c4:3b:ae:09:
64:5e:16:32:03:75:4d:db:ee:ac:8e:4e:20:28:91:c0:e2:cc:
64:19:aa:82:fa:0f:16:36:37:a7:90:0c:db:13:83:05:32:27:
0d:55:1b:4d:b3:4d:0e:28:15:80:9d:16:c3:60:76:76:6c:22:
e9:5f:6b:7a:d4:6d:a3:40:f3:59:e8:10:69:ca:02:c1:89:20:
83:83:7e:53:03:c1:ad:00:13:88:9e:cf:53:1f:73:bf:90:60:
ab:42:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:57:37 2026 by rpki-client