
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dac441ec-5103-3851-93e2-75fce09ef980.roa
File: dac441ec-5103-3851-93e2-75fce09ef980.roa (raw, json)
Hash identifier: JX7GmnRo0R521ORhJQFm/aIz0qsZ+IaG3+dLkM17OhE=
Subject key identifier: C5:7B:D2:92:78:72:2B:DF:B7:EE:E8:AC:E6:03:CA:54:30:22:FC:72
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584D0EA7E152A9D9094C2136D100
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dac441ec-5103-3851-93e2-75fce09ef980.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 54113
IP address blocks: 172.111.90.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:e1:52:a9:d9:09:4c:21:36:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=f2f1aa13-ee24-4336-8898-7ae8765cdfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:2c:29:0b:ae:bf:80:58:15:d1:36:cf:7d:
e1:d2:84:3c:09:6c:b9:bf:35:a1:1b:4b:52:02:00:
13:16:e3:21:21:5f:75:0e:f5:c1:73:b2:d9:76:cb:
6e:62:d3:f8:b9:7a:7a:17:d5:ae:88:6e:76:4c:92:
b0:b1:83:72:3a:56:a2:74:b1:50:52:ca:e4:19:9c:
be:ab:4b:ee:44:06:b3:69:a4:1a:c0:36:3c:20:2b:
7c:5a:4a:be:5a:40:c7:7d:24:71:94:ca:1a:81:a9:
c4:66:fa:bb:1e:08:e9:bf:c0:d4:2c:84:a6:c7:71:
bd:aa:ab:72:8c:47:bb:3c:50:79:39:33:1a:96:77:
d4:18:0c:0d:ee:d0:05:88:bd:a9:ac:f3:af:4c:9e:
04:83:4c:b6:f5:72:55:ba:c6:49:22:b4:b9:3d:5e:
5b:81:59:ef:56:94:65:11:28:d7:aa:29:10:90:51:
70:90:da:31:b5:bf:f5:5f:87:07:4f:2d:ff:b8:96:
ab:40:16:ac:d9:18:39:fd:04:1e:2b:a5:1e:a8:46:
4d:2c:93:01:59:19:d1:8e:75:61:37:cb:7d:e7:95:
5a:df:29:ee:19:7c:3f:5a:39:e9:68:7e:f3:2f:c7:
a7:ae:5a:25:7c:de:96:c0:58:e0:19:cd:32:75:58:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7B:D2:92:78:72:2B:DF:B7:EE:E8:AC:E6:03:CA:54:30:22:FC:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dac441ec-5103-3851-93e2-75fce09ef980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.90.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:f6:f4:da:f5:a0:19:a5:26:0e:33:cf:15:e7:5b:60:a1:64:
12:de:d6:6a:78:7f:cd:e6:29:5b:7e:9e:ba:4a:44:60:a7:e5:
d1:5e:ca:8e:c0:38:a5:4e:4a:54:e1:e5:74:e0:02:a9:5b:9f:
60:67:26:5c:70:49:7a:cc:0c:ed:7a:5a:e3:b4:a0:33:f6:04:
02:56:c5:29:25:21:11:34:e1:bb:48:27:82:b9:ac:41:9d:30:
5e:2d:b2:5a:c3:71:03:8f:88:54:2b:1c:13:fd:12:5b:6e:09:
1d:0e:f3:3c:75:9a:2d:64:38:30:93:45:7c:44:b2:e7:6f:35:
66:59:15:5b:12:e2:f4:eb:04:23:f5:1a:8b:1a:0e:3a:8b:5a:
91:96:1a:11:5d:ae:3c:75:f0:cb:10:fd:63:e2:2f:dc:2b:f1:
3c:69:27:e9:eb:7e:60:46:ee:2c:6f:87:06:b6:60:d2:9e:8d:
cd:6d:f2:75:b1:cc:3b:4d:76:50:95:32:aa:6a:44:7b:45:54:
b3:c0:aa:e0:04:8a:55:8a:2d:5e:87:6c:3c:bc:b6:44:f1:19:
7e:13:54:63:00:68:c2:9b:46:e9:17:21:52:f2:4a:8f:b7:fb:
4f:86:18:d4:bf:9d:db:13:87:db:f0:d1:89:95:f8:41:ca:ef:
50:f4:91:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 18:02:56 2026 by rpki-client