
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7d991db0-d981-34f9-a6ab-360a41c136c9.roa
File: 7d991db0-d981-34f9-a6ab-360a41c136c9.roa (raw, json)
Hash identifier: COIFLpAXAoEI+5qsJfp1OPJT2hSqffXPFapnG2DC0KE=
Subject key identifier: 3A:25:08:3D:C1:D5:A9:86:02:7D:B5:D6:D0:35:60:89:A0:5E:97:B4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584D5B4F8F1E9A67D9B780DC2520
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7d991db0-d981-34f9-a6ab-360a41c136c9.roa
Signing time: Wed 01 Apr 2026 01:00:23 +0000
ROA not before: Wed 01 Apr 2026 01:00:23 +0000
ROA not after: Tue 30 Jun 2026 01:00:23 +0000
asID: 855
IP address blocks: 134.41.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5b:4f:8f:1e:9a:67:d9:b7:80:dc:25:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 1 01:00:23 2026 GMT
Not After : Jun 30 01:00:23 2026 GMT
Subject: CN=5a8c4a94-aecd-488a-9a3a-df42a97cd94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:79:cc:e5:76:0b:f0:76:45:db:45:89:18:21:
5f:fe:2d:71:dd:f3:8e:93:55:da:2d:e7:30:68:4a:
b5:08:53:69:aa:bf:ea:39:39:e9:c6:1a:dd:1a:26:
9b:57:16:44:a2:24:8e:22:09:34:75:f4:b3:90:30:
12:6e:ef:33:9e:33:28:a3:a5:1d:56:d7:c3:50:e6:
de:1b:ad:37:53:b1:3f:7b:cf:c7:58:69:92:20:ec:
12:09:e8:96:de:20:57:47:96:84:47:15:8e:a1:8c:
8e:e3:69:11:32:65:52:09:12:f3:11:ad:2a:40:84:
0d:f1:c5:19:b2:26:d4:43:e5:e9:77:ee:31:9f:9e:
b4:1f:63:00:58:05:14:e1:3e:89:3f:06:e6:b1:e4:
a9:17:91:58:8e:c5:eb:a5:d0:b0:62:25:80:e6:43:
71:75:4b:6d:1e:5e:c1:01:50:a7:48:4c:c1:ef:26:
23:02:2d:d7:a1:d2:e0:20:75:df:5e:b1:77:59:78:
99:60:75:49:eb:30:82:22:37:b0:e8:70:6a:cc:7f:
91:3d:c6:6e:93:34:0b:61:4e:b6:e0:df:dd:1a:43:
37:00:f5:0e:8d:f7:c6:db:8a:92:22:de:98:ae:9f:
ad:6f:0d:cf:69:67:7f:54:4d:37:ba:5c:08:08:c8:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:25:08:3D:C1:D5:A9:86:02:7D:B5:D6:D0:35:60:89:A0:5E:97:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7d991db0-d981-34f9-a6ab-360a41c136c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
134.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:4b:34:53:16:62:43:91:56:88:cf:e6:88:45:7a:27:d8:38:
db:b9:3e:6c:c0:da:bb:3a:f9:ad:01:51:1d:9c:6c:a8:c2:7a:
49:3d:14:d6:e8:ae:10:f7:51:6b:52:2e:fc:7d:48:cf:32:ca:
5a:3e:ed:ee:a9:aa:6a:c6:bb:c9:c9:2a:ed:41:da:06:a9:ee:
7f:da:e5:a7:79:c0:62:3b:dd:cb:8c:e6:db:40:ed:83:5e:c7:
56:eb:ec:fa:48:3b:fb:3a:7c:49:ab:d5:ec:ec:28:92:7c:4b:
8c:90:16:c0:69:df:5f:96:76:3f:3a:bb:df:0a:6b:49:41:a6:
d5:55:e8:13:79:f1:c3:2f:98:72:78:fd:71:60:aa:7f:2b:81:
fe:4f:46:49:1d:fb:28:ab:02:e0:eb:df:1a:e5:32:e7:89:70:
c6:09:83:5e:c8:14:18:bc:ae:9e:a5:06:5a:c8:7f:c9:32:ff:
26:6b:65:17:30:df:a8:7d:15:d9:ab:09:3a:ac:9f:af:f6:31:
83:09:f0:db:8f:c1:8a:05:4e:b0:6d:c4:65:cd:04:a9:4e:90:
5f:0e:d5:19:52:a5:1d:2a:63:0b:be:f5:52:51:49:42:ed:1a:
75:58:91:be:93:ab:30:b3:72:25:7e:eb:4a:5b:2c:52:42:fd:
0a:b9:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:37:49 2026 by rpki-client