
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/252c2597-4e45-34ee-81f0-3febf529bcc2.roa
File: 252c2597-4e45-34ee-81f0-3febf529bcc2.roa (raw, json)
Hash identifier: pYlCMg1bIHGO6sEAZzpiubOuTUKrob6LP9j+XRBN/Hs=
Subject key identifier: 10:85:79:C1:49:94:DD:91:84:B8:2C:E7:E3:37:1E:B1:5C:18:19:C6
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EAFE7078DA02DD754F046CC20
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/252c2597-4e45-34ee-81f0-3febf529bcc2.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 396606
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e7:07:8d:a0:2d:d7:54:f0:46:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=4a1518e8-334b-45f7-b86a-c4670dca06d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:d1:41:4e:ff:47:ec:1b:21:0b:ea:62:2a:
e4:90:52:92:91:32:03:82:5f:d9:3e:9a:49:03:55:
84:ca:73:63:05:39:c6:55:67:0d:ff:a4:7c:1e:50:
0b:f2:89:0a:5d:3c:6d:59:dc:78:e1:39:a1:bb:e8:
11:41:18:88:48:5b:f1:94:a2:68:4a:86:88:08:8b:
5a:64:67:41:de:a6:ec:bb:9c:e5:f1:70:2f:99:34:
58:59:0f:37:b0:9b:1d:94:a3:79:57:ba:80:19:3c:
d8:ab:ad:6e:08:ef:3b:ed:3b:20:35:25:d4:80:46:
c5:dd:84:23:02:1b:9d:52:c4:a1:db:80:29:ac:40:
0c:f7:cc:c6:4d:d2:1a:ef:34:08:0c:72:29:50:ab:
b7:d3:a0:87:21:d8:19:74:9d:79:eb:54:03:c1:74:
70:88:a6:48:72:1f:de:48:5e:c1:70:67:53:54:ca:
64:3f:38:37:99:f1:8a:d4:a2:e6:9e:c1:c3:c7:a4:
ce:72:08:cb:05:10:2b:bc:51:e2:0a:47:06:f4:5d:
bb:08:42:a2:13:55:b4:76:1a:4f:e1:e7:94:31:39:
90:54:2d:f4:df:cd:78:a9:4c:44:9b:0a:db:eb:59:
b7:bf:d0:13:fb:15:52:de:20:80:db:ce:a4:f6:a0:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:85:79:C1:49:94:DD:91:84:B8:2C:E7:E3:37:1E:B1:5C:18:19:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/252c2597-4e45-34ee-81f0-3febf529bcc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:90:99:62:8f:6d:eb:9d:36:e7:dd:9d:d7:75:a2:fe:83:a2:
8d:e3:ad:f9:27:cb:09:05:3b:14:cf:6e:a0:de:25:1a:ae:4b:
54:8d:8d:8f:9a:12:06:d2:b7:79:1d:17:ca:a3:52:d1:c3:23:
fd:55:79:b2:93:9d:79:80:48:86:89:9c:fa:74:f2:9b:85:bd:
0c:15:b9:5e:b4:d9:1d:fe:e8:40:18:84:03:4d:0f:f4:ea:81:
f4:e9:5a:91:27:95:15:81:cd:68:b1:aa:83:3d:c4:2c:92:e0:
eb:28:bd:0f:39:32:d6:41:28:e6:9d:1a:43:8d:8c:a0:14:a1:
f5:46:7e:7b:97:7c:a3:2e:3e:12:64:f1:83:50:50:d0:4c:08:
ed:54:00:14:43:fe:5b:b2:6b:e7:31:76:8c:01:1d:b1:01:bf:
cb:33:87:3d:bd:4d:6b:9f:44:92:e9:5e:63:06:3c:30:74:e6:
fd:a0:15:b5:03:1c:36:70:50:27:27:06:86:52:39:2b:b2:ca:
d5:b3:c9:05:c0:77:3f:28:b2:7d:7b:3e:db:30:69:2d:a4:e4:
18:da:b3:81:a8:07:f1:ec:fd:c6:9d:d4:1b:43:34:b9:16:10:
fd:71:ca:ba:44:4f:4f:2a:9c:ad:18:4b:90:0f:de:16:34:1c:
12:a1:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:38 2026 by rpki-client