
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa
File: 7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa (raw, json)
Hash identifier: MxNYI+4wxp4iom1fz8JDzc9DI4dL/xCb3l9MG++MXT4=
Subject key identifier: 4A:BC:8A:B2:7E:35:3E:19:4F:AC:06:F0:43:5D:0B:23:E6:07:D4:EC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D1F4A7D227875E61C735FCD00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 396982
IP address blocks: 108.170.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:7d:22:78:75:e6:1c:73:5f:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=8e79668f-0e7a-4a1f-a9c6-9baff738b925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:c8:9a:df:3b:53:bf:80:5e:73:45:71:42:
80:04:d2:5f:a2:75:13:4b:64:ef:17:ec:a2:a7:d4:
fb:75:18:b1:83:42:a6:2d:c8:ad:4d:a9:67:53:58:
f2:5c:78:9b:10:5e:41:5e:3b:cc:b8:21:e3:cd:52:
1e:c4:5f:0e:9a:4c:2f:de:87:d4:54:31:0a:49:29:
db:00:eb:56:12:63:67:e8:4e:66:7d:6a:27:e4:b6:
2b:a0:fb:0f:3a:73:09:57:f1:81:bd:19:dd:bb:c9:
11:db:bb:69:37:fa:d5:06:d2:ae:77:cc:5c:30:73:
47:0d:20:50:d8:e6:71:cd:d8:97:32:90:04:d8:98:
72:52:ba:16:04:0b:ad:1e:b0:c2:75:5e:4b:a4:1d:
89:10:17:96:ac:51:97:5f:3e:df:cd:39:39:99:63:
06:45:43:21:d7:6d:0c:13:9a:68:f2:01:08:ca:eb:
a0:1d:ce:c9:f4:e8:d4:a9:14:c2:99:81:40:7d:ac:
8a:ad:c3:ce:62:cc:3c:65:42:62:9d:37:9a:b8:3a:
6e:4a:ab:f1:ed:80:69:67:bc:9f:10:09:65:23:60:
e6:b3:0e:f0:97:94:39:08:ce:7b:dc:e5:15:70:13:
98:55:7a:41:76:d4:59:c6:26:7b:5e:9e:0b:df:2a:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BC:8A:B2:7E:35:3E:19:4F:AC:06:F0:43:5D:0B:23:E6:07:D4:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:00:29:05:89:07:cb:be:94:e0:2c:eb:ef:31:73:55:d2:1c:
82:53:e9:80:de:39:12:fb:16:08:c7:16:af:dd:97:3f:1a:9d:
b3:ec:ed:e0:a5:cf:f7:66:10:e6:65:62:d6:df:88:ff:51:bd:
5b:69:7a:7a:9f:5b:ea:d3:a8:e9:f3:be:d9:82:03:5a:c7:be:
81:f3:85:88:c1:3d:ab:1c:3e:b7:ac:39:42:c4:58:06:89:61:
4d:f1:85:a6:3d:fa:fd:b9:09:c2:c0:32:2b:ec:92:c4:eb:36:
ff:37:a1:ed:9d:a5:7f:ec:49:c0:94:c5:95:82:89:87:7f:07:
eb:d6:ec:a9:6a:7f:a2:96:b3:d0:b7:02:2e:9d:ff:be:d8:10:
0d:b2:a1:dc:e6:7b:aa:17:20:0c:7d:0c:6b:3a:6f:e2:17:3a:
88:d1:95:66:68:67:7b:9f:5c:fd:4d:f6:8e:22:2b:54:42:71:
10:4c:9f:16:f7:e3:6f:71:69:b3:15:00:fa:49:59:72:b1:09:
de:28:a6:5a:ce:34:2b:bf:63:b5:5c:86:0c:e9:39:33:9c:d5:
63:b4:3d:65:ea:dc:3d:2f:a8:1a:94:5b:5a:9d:d2:05:55:22:
0c:34:7d:cb:1d:f2:4e:15:45:9b:9b:13:34:41:4d:7b:20:0c:
ee:96:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:31:11 2026 by rpki-client