
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c86adb36-4e6e-3387-9571-1d8eeec36b91.roa
File: c86adb36-4e6e-3387-9571-1d8eeec36b91.roa (raw, json)
Hash identifier: SwjWLNwYpxoViZbw8PXH3dKtArHDqSa59C9kz5DWgxs=
Subject key identifier: C3:9A:60:5F:74:7B:89:DB:A2:08:2B:34:18:58:B3:D7:D3:B0:87:4F
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584D300A2642016B60B125BCCC00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c86adb36-4e6e-3387-9571-1d8eeec36b91.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 54113
IP address blocks: 140.248.108.0/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 21 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:26:42:01:6b:60:b1:25:bc:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=e5a4bd3e-03da-424f-9de9-b7d5dd11283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:94:d5:a6:63:39:80:35:fd:25:87:73:93:
9c:7f:fa:6a:4d:9c:b5:14:dc:eb:9b:bc:0b:e0:13:
b4:0a:b0:63:c4:53:8a:fd:92:80:c5:eb:cb:83:e9:
19:e2:ed:3a:30:6c:d5:a0:08:1e:17:1e:a1:2b:86:
da:47:60:76:18:20:90:5f:90:19:16:fc:8d:e6:ca:
9d:8f:43:f7:4c:e8:be:3f:3f:48:a4:39:e9:3e:ef:
63:b5:86:6b:86:1b:7b:bd:c9:db:c4:31:de:b5:f0:
cb:47:90:d1:bb:5c:65:2e:4c:99:75:bf:99:9b:94:
38:1c:a9:29:9a:50:c2:dd:7a:8c:df:f4:af:88:d6:
1f:b9:17:53:78:ed:9d:ae:77:db:04:87:02:68:c1:
27:90:23:44:79:35:b4:6d:0d:eb:b9:6d:39:de:59:
da:f5:6c:47:d5:77:cf:0a:bc:81:1b:66:57:70:3d:
10:56:dc:6c:97:c5:8e:52:b4:ed:1c:95:ea:0b:bc:
a4:f0:5d:b5:25:fe:08:c4:42:30:12:ff:b8:13:38:
88:e2:53:4e:8d:88:a1:51:22:e4:e0:7c:99:80:7e:
bf:26:bd:a3:74:35:45:ce:57:ee:58:1a:b7:c9:56:
08:e3:c9:a0:79:74:b8:31:a7:94:0f:2d:1d:87:c4:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9A:60:5F:74:7B:89:DB:A2:08:2B:34:18:58:B3:D7:D3:B0:87:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c86adb36-4e6e-3387-9571-1d8eeec36b91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.108.0/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:65:77:42:9c:26:93:63:c3:1a:d1:da:bb:c9:2f:e3:3d:40:
bc:be:2d:d9:60:26:e7:a8:ed:65:56:15:a4:d3:3d:73:75:d4:
dc:ca:c5:81:c5:c4:d7:35:0b:81:de:3a:27:9e:54:b0:3f:f3:
32:b3:55:d1:95:47:58:ae:b8:71:a4:60:62:39:70:9d:ae:a7:
48:b7:47:ea:0d:d2:4e:b9:2d:7a:34:45:0a:29:ef:70:3e:7b:
bb:18:e6:f3:94:95:4c:00:a6:6d:70:fc:e3:88:bf:e3:e9:51:
78:fe:9d:d9:59:52:b6:d4:a5:e7:72:70:5b:a9:8e:5d:d7:a2:
26:5d:5c:70:37:f6:ba:bb:0e:fd:aa:1f:7e:25:71:66:a0:e5:
33:6a:95:38:a9:81:4d:32:51:b5:d1:4b:8d:c6:ed:00:85:31:
16:bb:36:12:5c:41:6d:7a:52:b3:62:de:b3:2b:af:e3:42:8d:
39:de:c1:21:b4:0b:1f:1e:5e:36:82:8f:6c:e8:dd:e7:20:91:
b3:1f:1c:a8:a0:49:c8:0b:05:b5:d0:83:0e:2d:1b:e6:b0:66:
b1:f1:95:62:5c:f7:ca:f6:62:32:8e:e5:f4:ad:72:79:12:df:
56:6b:7b:f5:a2:0d:57:40:97:0e:d2:62:b0:8d:e4:41:a1:58:
57:69:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 09:00:54 2026 by rpki-client