
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/d1238eab-4c93-304f-ac40-d0c5743782de.roa
File: d1238eab-4c93-304f-ac40-d0c5743782de.roa (raw, json)
Hash identifier: 56iu9EB14xw4LqwBudJPXkDOMJr0hack3kV73wl0ceA=
Subject key identifier: DA:E4:93:2E:27:84:8A:78:B2:68:88:CF:48:12:1A:32:E8:56:45:05
Certificate issuer: /CN=5e580e37-3db1-41d1-ae09-7e84348caffd
Certificate serial: 010D0C9F4328584E5D14AC40437DE7B9E0FABA20
Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/d1238eab-4c93-304f-ac40-d0c5743782de.roa
Signing time: Thu 02 Jul 2026 09:00:12 +0000
ROA not before: Thu 02 Jul 2026 09:00:12 +0000
ROA not after: Wed 30 Sep 2026 09:00:12 +0000
asID: 17207
IP address blocks: 198.59.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5d:14:ac:40:43:7d:e7:b9:e0:fa:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd
Validity
Not Before: Jul 2 09:00:12 2026 GMT
Not After : Sep 30 09:00:12 2026 GMT
Subject: CN=eef27cd4-409c-43dd-9814-53ad39301851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:bc:bd:04:14:6a:a3:4a:19:43:df:87:a6:
71:6d:5a:40:48:ed:bc:27:c9:2d:c3:98:50:6d:a9:
9a:97:d6:ee:a9:2f:38:ee:b1:ff:cc:05:84:51:c9:
73:17:b1:2c:f4:b7:41:34:82:c1:8c:ac:48:53:8b:
a6:51:2b:a3:46:b0:de:db:1a:5d:13:a7:31:20:93:
25:e1:aa:8b:3a:ea:44:bd:cc:b2:d8:d1:e3:5a:69:
8d:a7:21:c5:8d:56:34:1e:bb:3c:66:75:54:2f:b1:
cb:09:3c:d2:a0:94:f0:8b:97:ba:af:a3:fb:4d:68:
f6:b0:cb:0c:35:5a:87:05:c5:10:bc:14:81:1c:96:
1a:fb:93:c3:1f:a5:a6:ed:15:a0:a5:83:df:c6:d5:
c2:66:a6:4a:fa:66:62:04:5e:25:fd:18:b3:1c:4e:
44:fb:4c:0c:f8:c5:a9:a5:ae:8f:9c:ca:e0:07:f8:
5f:46:49:fe:dd:ca:c1:a1:de:a0:3d:d7:8e:43:eb:
95:b2:20:31:cc:63:98:54:29:57:ff:a7:d9:f1:4f:
1e:fc:d6:56:8c:7a:a8:47:ba:4d:3f:ab:79:ea:5e:
e6:cd:a6:d3:00:41:df:ab:a9:e5:9b:c5:34:03:47:
b7:4a:b2:36:ac:b4:93:77:ec:80:bf:8d:67:70:f4:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E4:93:2E:27:84:8A:78:B2:68:88:CF:48:12:1A:32:E8:56:45:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/d1238eab-4c93-304f-ac40-d0c5743782de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl
X509v3 Authority Key Identifier:
keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
sbgp-ipAddrBlock: critical
IPv4:
198.59.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:ad:de:7e:f1:04:10:b4:d8:10:07:be:55:c1:10:47:40:12:
bf:d6:31:12:05:42:13:14:c4:db:7e:e8:41:47:6b:0c:67:72:
9f:78:47:fa:58:d7:6f:48:46:d4:5d:45:7e:c3:17:51:b7:df:
9e:c5:96:b8:da:4c:a1:51:6f:bc:be:3d:75:bf:4e:1e:28:02:
9c:1c:65:f4:ca:d5:8d:fd:25:d2:dc:ef:bd:67:89:f9:77:72:
d7:a1:c0:c6:1b:bb:a9:10:72:3a:fe:6a:18:a3:23:8b:22:4e:
79:e6:0a:78:49:ab:9d:d6:36:b4:a8:45:7a:3e:ca:65:3e:2d:
21:46:3e:61:0f:66:a2:a9:09:56:ef:bf:4a:62:41:a3:62:4d:
1e:73:2f:30:8f:95:31:b9:66:bd:94:f0:97:49:71:ea:3b:e5:
5d:c7:4b:78:95:4f:0a:4e:34:19:7f:44:bb:a9:57:5c:e0:9b:
ff:6d:57:46:4f:a2:c5:89:15:80:22:e3:05:d1:c6:63:61:42:
4b:0b:0b:03:13:5b:71:0b:9a:b8:62:bd:f1:77:87:74:0a:1b:
8a:71:ec:16:50:a6:65:83:ee:f3:ec:41:bb:e4:53:14:bf:28:
78:c2:de:be:68:16:7e:2d:c9:ed:d6:6b:fb:f2:4c:a7:86:c1:
84:70:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 19:53:10 2026 by rpki-client