
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb5f0a64-867e-3738-aa1a-78498f5db63a.roa
File: cb5f0a64-867e-3738-aa1a-78498f5db63a.roa (raw, json)
Hash identifier: XVnudhxgLRGw8kkrYhXBGiT35uV3ttOjaoKnPUzyDgQ=
Subject key identifier: F7:7E:7B:01:5F:86:A9:BD:01:2F:68:53:A1:E7:7C:B6:B8:A9:3D:A6
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328584D1F4A74CE63990F154ED40D80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb5f0a64-867e-3738-aa1a-78498f5db63a.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 36040
IP address blocks: 104.237.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:74:ce:63:99:0f:15:4e:d4:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=f31267da-3e06-4ca8-b48c-26f17c63c33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:47:11:e4:db:8c:b7:66:e2:cc:88:e2:c7:
84:90:9d:7f:1d:74:1c:46:e4:76:bf:5d:f7:b0:b0:
c2:82:0c:3c:ce:dc:f4:d0:26:da:c2:2e:54:6b:8a:
51:f0:be:e7:03:f2:25:5c:d4:63:7f:46:77:f5:84:
fe:b5:f2:40:8c:1e:bb:e0:f6:8c:5a:8e:d5:a6:be:
ad:f9:84:f3:83:62:f5:49:ab:d7:36:99:b4:27:ba:
da:6d:81:0a:b1:4b:05:46:79:39:e7:92:3f:c9:a1:
e6:e7:c6:15:25:7f:db:fd:ee:e9:d0:5f:a7:83:63:
46:e4:9a:a3:b4:22:6e:17:c0:cc:1f:f0:fd:9f:00:
39:30:ae:35:05:83:41:40:28:e4:c0:53:a2:30:aa:
f8:6b:db:e4:ab:8f:82:5d:1b:37:f7:68:f3:8b:11:
54:9b:94:e7:1f:2c:7f:29:e0:15:00:b2:31:3f:7a:
c8:06:bd:0f:38:0f:3f:19:de:46:dc:0e:9b:d6:c7:
b1:0b:33:a1:30:7d:a4:8a:27:5b:6d:b1:a0:da:5b:
58:0c:02:11:8d:90:75:6a:4c:10:e2:2e:28:fd:39:
25:b7:e6:c1:a4:97:34:52:ba:fe:95:4c:6d:0a:16:
cd:a1:87:bc:81:b7:df:f9:0e:b1:b4:5a:2e:6d:a3:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7E:7B:01:5F:86:A9:BD:01:2F:68:53:A1:E7:7C:B6:B8:A9:3D:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb5f0a64-867e-3738-aa1a-78498f5db63a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:8f:9b:d2:b2:19:1d:8a:5f:ca:9f:98:1d:07:13:9c:be:a8:
22:22:5d:bc:62:7d:8f:a9:5e:d4:eb:08:82:c3:a5:dc:94:4b:
08:6c:36:e9:74:2b:86:b1:88:ad:87:0c:4f:07:d7:a3:05:04:
36:16:33:5e:9c:b3:7a:f5:82:76:61:43:a5:b0:de:ea:22:da:
9e:4e:35:02:af:bd:d0:ed:20:da:27:e2:49:53:c1:09:04:b6:
fb:a8:a0:26:ba:41:1e:e1:e9:64:6b:3d:e6:35:ab:75:11:51:
00:6a:f7:39:d7:dc:a7:6d:08:59:f2:fd:48:8d:48:79:1b:c7:
bf:89:9e:80:94:9d:55:76:d1:a5:a6:a7:ee:3d:e2:34:5c:16:
12:a8:0c:38:b5:86:b5:39:57:0b:7c:18:b2:b2:d1:9d:7a:cc:
ed:ee:7e:98:7d:6d:4e:af:bc:23:3b:d5:14:29:51:71:5d:04:
95:9c:09:a9:54:d2:e4:8f:36:9d:f6:3a:64:64:e8:cb:6d:7a:
ad:64:33:42:e1:8b:c5:4d:19:bd:3e:f4:83:8c:6a:f4:e6:21:
f1:d2:fc:25:6a:01:50:6c:2b:06:e8:b1:35:8f:eb:d9:08:bd:
b9:3f:1c:f9:ff:c5:c5:72:4b:69:dc:0d:15:57:d6:ba:00:25:
c5:5b:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 02:00:01 2026 by rpki-client