
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa
File: d99b52cf-3f59-3923-9d2f-f64a1233a235.roa (raw, json)
Hash identifier: N+9S8qe2QBhLWpluFfv7TsuuBftEgeJiQAyfzsI/cTE=
Subject key identifier: 5C:70:2B:81:AC:80:6D:A7:38:37:AA:B6:C5:7C:45:E7:58:E6:B0:4A
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328584D24E0E2C61D4ED8A4F446EB00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 36040
IP address blocks: 208.117.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:e2:c6:1d:4e:d8:a4:f4:46:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=3287c11f-ec25-412f-8e5b-5a9cc3839b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:87:a5:4f:8b:14:ce:86:0d:06:3a:15:d7:
4d:af:b0:b4:4a:b6:66:18:bc:7d:4e:4e:58:6d:73:
68:e7:f0:6c:95:a7:00:0c:45:73:bf:4f:e6:6e:09:
78:6b:67:e3:6e:b6:18:eb:ae:c6:c0:a4:82:76:2b:
99:b9:d3:7e:1d:60:6d:83:34:0d:bf:6c:21:c3:60:
d2:e2:5f:6d:5f:bd:d8:be:96:e3:7a:20:ef:12:1a:
72:78:ae:e8:28:65:82:b8:2c:ce:9c:a6:93:a3:ee:
d9:bb:d8:92:9d:89:17:dd:78:01:25:a9:5e:0d:d9:
a3:84:08:87:06:42:75:ed:4a:aa:96:eb:90:2b:61:
f0:26:8d:f4:1e:3d:91:78:30:7f:66:36:e5:8a:43:
74:a1:47:55:1a:4f:9a:5f:5b:4a:67:fc:b7:50:39:
b1:20:f8:bb:f3:66:1b:20:3d:d0:02:41:5a:7c:47:
b6:bf:7d:ff:2b:76:2c:a8:de:7b:37:62:76:2d:8b:
bd:00:0b:bf:af:8e:ce:a2:2d:6a:ec:be:7b:21:ed:
c9:fd:45:7d:7b:95:97:94:49:71:6b:e0:2d:78:ea:
24:47:15:8a:ed:27:06:a7:ea:ba:83:05:e9:d0:b2:
bd:2d:cb:13:ea:b1:fe:14:ca:c3:ec:eb:11:11:db:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:70:2B:81:AC:80:6D:A7:38:37:AA:B6:C5:7C:45:E7:58:E6:B0:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:99:7d:57:e0:8a:13:1c:8f:8c:24:75:08:54:86:4a:1a:7d:
1b:4a:3f:de:35:e8:58:9e:db:3c:d5:ed:5c:a8:5e:a2:d3:b2:
2d:df:f9:f8:e0:7c:12:13:f8:a2:cf:a9:92:5a:a0:65:03:5f:
6a:fd:89:49:06:9f:ed:85:54:04:7f:ae:8a:5c:7b:e2:b9:3d:
3c:c5:68:41:d5:c0:12:a4:a3:46:c2:f4:cd:b7:7c:9f:ef:e0:
4e:5b:68:b4:4a:a9:b5:e7:31:aa:d9:07:68:e2:25:1a:a9:a6:
6b:c2:db:9b:19:e7:44:c1:0d:e2:1b:96:5e:57:c0:fb:d6:12:
08:16:9a:30:a0:18:66:22:c7:21:d1:d3:ec:d0:50:ec:38:0b:
29:f0:e9:56:e2:22:77:b2:9c:9f:cf:c1:dc:e1:f1:63:44:77:
1f:59:f4:64:ac:51:57:24:62:6a:52:c3:9f:80:91:3b:f7:a3:
88:9b:a8:c3:e8:ed:23:13:28:49:a2:e4:82:80:7e:ec:b3:4b:
4c:e7:da:ea:15:d3:87:77:23:28:e8:b4:1d:e0:33:55:f7:b1:
64:69:d8:07:fb:8e:f2:fb:1b:ae:b3:81:68:9c:e5:50:71:75:
ef:ff:8d:31:82:22:56:ca:b3:9a:88:b4:33:72:8c:c6:b9:2c:
84:c2:2e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:58:18 2026 by rpki-client