
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa
File: f21189fb-e23d-3eb9-89ca-2076fda69f76.roa (raw, json)
Hash identifier: Rdu9XhUbXNZ4OSdXqciMWqxwNpg9gouXyItS0Roi+OI=
Subject key identifier: 3F:D0:83:73:11:29:D2:22:52:45:69:30:95:C8:BB:F9:72:3A:16:E6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D1F4A5B8BA590CB43DF2F6BE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 396982
IP address blocks: 104.154.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:5b:8b:a5:90:cb:43:df:2f:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=05bac4a0-266f-4311-b56d-05e806267b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:36:ab:3a:e6:8f:55:b8:13:3f:77:b3:30:
d0:70:60:d5:5f:96:cf:14:e6:12:5b:96:eb:b1:dd:
5a:e9:23:92:0a:f1:37:62:0e:9e:25:bf:c5:a4:5c:
e8:30:24:cc:1a:f2:75:63:29:5c:21:eb:fb:86:a4:
87:5b:a9:63:62:80:52:a6:30:b1:a3:fa:fc:19:85:
75:b9:bc:0f:3b:49:d3:4f:ad:27:3d:11:5f:ca:f7:
7c:9f:d7:e0:66:36:37:21:f1:27:07:ea:3d:38:5a:
21:37:ba:6d:5d:98:a0:a8:6f:26:71:53:74:cf:4c:
79:ba:e3:82:aa:6b:56:0e:e6:af:10:24:d5:c4:0d:
5e:24:ed:93:48:8f:6f:96:95:49:13:8e:12:a5:e0:
9e:f5:99:b8:5d:46:34:9d:d7:21:53:5d:df:58:75:
af:0b:f2:0e:21:5b:66:df:14:c9:53:ff:74:bd:99:
51:8f:ff:1e:67:ce:6e:65:3c:31:39:29:b1:53:c2:
85:50:7d:8d:0a:a5:0c:4b:61:1a:85:45:36:ca:1e:
35:33:c7:78:a7:d3:df:22:5f:56:73:5d:58:f9:1f:
76:7d:f0:b2:ae:ca:1a:88:dc:da:e4:8e:0b:48:73:
85:da:7a:2b:8d:fa:19:9c:45:4c:e0:b1:bb:af:d4:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:83:73:11:29:D2:22:52:45:69:30:95:C8:BB:F9:72:3A:16:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:2d:66:53:b2:de:96:6f:22:fa:21:e1:a6:a0:52:00:8e:25:
92:bd:c3:a5:28:73:2c:00:2b:ee:ad:f3:cf:28:7a:47:1f:a9:
22:5b:7f:f8:ca:ab:9d:28:54:48:20:6a:a0:18:8c:a7:05:fc:
36:69:b3:cf:07:50:2a:8a:99:2f:fc:05:59:78:3f:fb:17:5f:
ac:61:b4:90:ee:3f:d4:73:61:c5:79:5b:b8:cb:0e:b5:05:d7:
8d:3f:49:15:ee:36:07:0a:e1:d1:0e:4d:61:e0:cb:d8:76:6b:
7e:3d:94:bb:e5:a4:43:08:04:9c:84:ee:36:80:01:31:90:87:
f6:7d:b9:a5:2c:ac:cb:b6:48:8c:3f:53:00:90:68:59:dc:82:
0a:38:95:a6:30:30:2a:ba:f5:3e:03:76:4e:6c:df:91:d6:a2:
b0:11:c0:8b:90:83:24:3d:43:70:cf:13:c2:11:0c:d3:68:83:
fc:19:49:0e:f6:6f:cc:de:e0:3d:0a:64:73:71:9f:59:4f:b5:
2c:92:a7:e3:87:0a:19:ef:56:e2:f2:da:f4:54:93:ca:68:98:
12:eb:48:8a:f2:75:e9:97:ec:b8:0f:a6:38:7e:19:47:49:e7:
a7:4e:0b:ee:3f:4c:aa:5f:9d:53:5a:f4:b5:cf:d5:3c:a8:c3:
ee:77:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:10 2026 by rpki-client