
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/749e82b2-2556-3f5e-8ccf-e727b708516b.roa
File: 749e82b2-2556-3f5e-8ccf-e727b708516b.roa (raw, json)
Hash identifier: OboihOJwI+rUdyMlbTbkovfA8pDvUtW6SPzKcQ5oOng=
Subject key identifier: FC:6D:D8:C1:DB:40:B2:22:B9:41:6D:CA:7A:93:3E:B5:E2:11:54:9C
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584D0EA7ADCB30C0B33D50B7E180
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/749e82b2-2556-3f5e-8ccf-e727b708516b.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 11537
IP address blocks: 163.253.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:ad:cb:30:c0:b3:3d:50:b7:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=a2a40ee9-4b9c-47a1-ad3f-64be7cd705bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:72:d0:84:7d:21:ba:30:fb:a2:0c:99:5e:
73:0c:bf:47:d6:38:b3:c1:18:d0:b8:f3:75:20:8f:
30:8b:1b:69:7d:de:33:f5:36:1c:0a:85:52:fb:17:
a2:38:15:1c:5c:e3:75:d2:4b:02:f8:b2:df:a0:c4:
9f:59:2e:33:66:d7:50:6e:0a:68:8a:8f:6d:1d:0f:
6e:d2:62:c1:55:a1:51:f8:9d:c5:8d:e5:1c:73:c7:
0e:29:cf:4c:a4:18:7c:5a:bf:2b:ed:4f:db:4e:76:
77:de:85:3c:c0:e9:29:89:7f:a4:84:34:c9:44:ae:
38:43:ee:5a:1b:95:e5:88:d1:cc:be:4c:19:b2:af:
31:48:3e:c0:51:1c:d5:2a:81:01:04:3a:25:66:d8:
71:64:f2:db:f8:45:b5:88:f7:be:da:07:27:10:38:
fb:1e:91:a1:f7:fa:6e:f0:d6:44:97:3b:73:53:46:
70:95:11:f8:18:09:72:bb:9a:49:6e:27:78:08:e6:
56:dd:6e:fb:1a:be:cb:5b:cc:f9:13:5b:ab:2d:26:
41:ca:60:dc:7a:3f:5d:dd:ce:9c:f1:23:28:8c:48:
71:30:2c:3b:4b:22:f7:63:a1:2b:9d:1e:5d:04:2c:
db:e1:55:04:ee:84:95:a7:ea:59:94:6d:97:90:66:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:D8:C1:DB:40:B2:22:B9:41:6D:CA:7A:93:3E:B5:E2:11:54:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/749e82b2-2556-3f5e-8ccf-e727b708516b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:74:0b:d0:32:06:30:d8:4b:fc:28:03:51:82:99:8d:c5:6e:
25:67:38:e2:06:6b:d0:3c:c9:06:23:30:eb:33:a9:d0:0a:9d:
8c:11:fb:6d:12:27:a7:25:2a:f8:22:ba:6f:37:d2:c4:59:4c:
61:a8:00:a2:4e:19:a7:b7:0b:36:6f:72:2d:75:68:47:35:5e:
f3:e8:e0:e9:6a:49:3e:5d:26:ed:8e:87:2b:8c:2a:10:2c:55:
14:1d:3a:8e:47:54:88:87:c4:a8:ce:87:46:7b:6d:fc:07:f4:
d8:52:9b:29:54:c1:80:61:01:af:f7:d8:01:af:b8:e3:02:1e:
02:3f:18:2e:0a:3c:a9:90:d3:71:be:99:47:c4:e2:90:fc:74:
86:33:1d:fb:3a:15:f5:0f:e8:4f:3a:cd:f1:13:4a:59:d5:fe:
8b:32:7c:ac:3d:35:9f:c8:1a:d5:f2:15:62:30:f2:9b:12:7e:
93:e8:83:31:1e:e0:79:70:12:3c:a8:7e:72:0e:09:39:a6:22:
92:c4:84:78:0e:17:e1:83:bf:8a:3a:25:5a:ad:ba:43:f3:f8:
63:82:14:e4:34:6d:c8:08:18:bc:08:48:a7:03:fd:80:83:ea:
a1:af:13:bd:db:f6:3c:b2:b2:28:7e:a5:2f:89:b4:af:a4:44:
8c:b2:ad:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:15:33 2026 by rpki-client