
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4520ff35-80b5-371c-8c31-855451bc1dfc.roa
File: 4520ff35-80b5-371c-8c31-855451bc1dfc.roa (raw, json)
Hash identifier: MaHushDx+i/82/NE53oO/H36r68+pBJS3KG6c4F0w4E=
Subject key identifier: AC:9C:77:74:9A:69:DA:D5:33:18:55:71:00:47:0F:0D:28:63:3D:99
Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial: 010D0C9F4328584EC03FF481B062F8B2C30ACAA0
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4520ff35-80b5-371c-8c31-855451bc1dfc.roa
Signing time: Thu 06 Aug 2026 21:32:35 +0000
ROA not before: Thu 06 Aug 2026 21:32:35 +0000
ROA not after: Wed 04 Nov 2026 22:17:01 +0000
asID: 46432
IP address blocks: 208.88.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:3f:f4:81:b0:62:f8:b2:c3:0a:ca:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Validity
Not Before: Aug 6 21:32:35 2026 GMT
Not After : Nov 4 22:17:01 2026 GMT
Subject: CN=45b8c5d9-818e-4288-915b-967f40485d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:da:cb:5d:8c:1a:ed:5f:75:dc:8e:ed:50:
f3:17:ca:1a:75:10:9f:b4:07:fe:96:7d:fe:40:52:
cc:80:7c:9c:80:4b:68:a9:42:0d:50:dc:9e:aa:17:
66:08:be:b9:04:36:18:01:ab:b3:8a:6b:3b:c0:35:
8a:ce:02:bf:0f:70:0b:e8:9b:bb:8f:d0:91:4a:66:
c4:c2:ff:42:09:68:9b:78:74:37:00:56:1a:53:ea:
29:5a:6a:f4:43:ed:02:11:3a:4e:14:9f:e1:f4:d4:
cf:1b:31:2c:96:18:45:f2:11:66:a5:1a:ac:ef:05:
13:d0:88:74:01:54:c1:a9:d8:92:0d:cc:27:0b:e3:
f0:36:b3:69:06:9e:36:f4:88:e4:e4:fa:83:db:1d:
3d:68:b5:af:37:1b:24:2a:2e:b3:66:15:da:8d:4c:
f7:07:ba:23:63:83:b1:18:1b:68:c4:f6:b0:08:75:
1f:81:e1:ee:4d:04:9a:c2:f6:0b:21:d9:25:a1:8b:
b8:e3:3b:70:40:5a:7c:be:13:ad:6a:20:a5:62:18:
c0:c6:f7:e7:2a:bf:fa:ba:25:d1:67:ae:e8:25:34:
c5:b4:df:1d:5e:0c:b4:4d:1c:6f:e8:4f:28:aa:28:
9c:a1:bb:cb:b9:c5:04:28:d4:61:ab:e7:b2:d8:77:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:77:74:9A:69:DA:D5:33:18:55:71:00:47:0F:0D:28:63:3D:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4520ff35-80b5-371c-8c31-855451bc1dfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
X509v3 Authority Key Identifier:
keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:88:28:78:bf:27:dd:b0:e3:51:75:3f:da:24:2e:02:80:dd:
c7:64:81:cd:2b:d6:14:49:1f:e6:ed:a1:3e:ca:56:3f:de:76:
e4:64:37:8c:d8:82:6d:d8:39:d4:bc:fc:e9:a2:3b:9e:68:fc:
07:c2:3c:8e:ce:17:36:54:56:90:81:ca:3e:be:96:03:36:52:
a5:ec:aa:3c:95:ce:b1:fc:d0:52:c4:ba:0a:47:0b:c6:bb:86:
1c:8d:65:03:f4:6e:a1:85:b5:9b:b9:80:e3:a9:73:90:6d:a7:
6e:ed:26:4a:43:56:53:59:ee:47:da:fa:ce:07:4c:78:e2:78:
74:94:71:6a:da:98:de:11:e5:97:5b:f2:e5:89:10:29:bd:2e:
b6:84:94:5d:47:45:51:02:52:79:f4:e3:ce:be:ce:9a:c4:fa:
92:05:10:4a:4a:3c:3b:43:0c:3f:71:50:de:7b:0a:8c:7a:28:
6a:3f:73:33:a1:b7:13:05:e3:4f:93:e4:84:5f:c4:cb:02:ac:
4f:5a:09:27:91:7a:46:05:45:40:37:0a:9c:6e:52:d7:b0:3a:
48:f5:b9:3f:44:98:5e:e6:60:1f:36:d4:31:d5:df:57:63:96:
dc:ae:9a:ec:34:35:50:7f:b5:81:e3:05:d1:0d:88:f3:18:d8:
50:d9:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:42:36 2026 by rpki-client