
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a189c-7b29-340f-ba67-4b8d052017b8.roa
File: 396a189c-7b29-340f-ba67-4b8d052017b8.roa (raw, json)
Hash identifier: Y+7rdzwckYQuWBmWjmLJ3JJkKP477aKij/nE8buh59A=
Subject key identifier: D4:12:34:62:D9:92:5C:85:73:82:94:FD:2C:14:08:F5:E0:63:8F:12
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA7903894A114A4CE09D393C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a189c-7b29-340f-ba67-4b8d052017b8.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396611
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:38:94:a1:14:a4:ce:09:d3:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=049489a4-b190-4454-88fa-476161d27b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:ef:fe:98:9d:0e:81:f2:26:37:b6:15:b3:
a0:fc:b8:30:a8:53:e9:72:d2:0d:9e:da:cb:76:b1:
db:b8:22:3b:c6:c1:f2:96:97:5d:e3:16:17:74:85:
58:66:ca:ac:fc:70:da:21:a3:b2:f1:73:f7:4d:96:
cd:4d:e4:da:f3:b4:83:03:89:cf:34:46:7a:5a:e0:
fd:86:3a:d3:7b:ab:8a:9f:60:03:4c:f4:8e:13:c1:
57:f8:44:30:1f:f7:64:0a:6a:b4:e6:52:a8:8e:c6:
dd:73:4c:c2:56:6f:bb:ea:d6:20:60:81:80:3c:71:
4d:5f:84:11:80:00:87:84:ec:13:cd:2e:f1:2b:20:
27:d6:f6:28:dc:f1:e5:6c:dd:14:f0:fe:64:78:a7:
b8:43:4c:d0:3b:d2:0b:bd:86:2e:41:7d:f0:9d:6b:
80:fc:eb:11:27:b5:44:84:a2:90:5b:23:cc:9f:87:
4b:68:87:ec:17:03:52:57:6c:5a:72:d5:ac:d0:8c:
21:8a:32:48:e7:17:ed:20:7f:df:45:7e:87:f6:41:
67:43:2a:88:6a:08:6b:04:c1:1d:b6:82:59:d4:21:
80:17:f9:b6:0a:67:79:8a:81:e0:27:dc:f1:df:62:
c0:cc:eb:9f:7f:fb:a0:e9:2e:94:de:50:d3:bb:b9:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:12:34:62:D9:92:5C:85:73:82:94:FD:2C:14:08:F5:E0:63:8F:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a189c-7b29-340f-ba67-4b8d052017b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:2a:44:9f:08:c4:c2:ff:92:39:7a:99:dc:1c:0a:25:92:a8:
97:ab:99:e2:58:25:ca:ed:79:a7:84:2e:3e:59:24:d3:e0:5d:
60:d8:71:11:5d:8b:90:47:00:bc:72:3a:68:52:5b:9c:20:8c:
24:9b:b3:a2:ab:fe:6d:56:6c:89:5a:32:a6:db:f2:27:60:f6:
56:7a:35:42:3c:db:30:84:af:8e:af:5b:c1:48:23:bd:e9:bf:
a2:6c:75:cd:e3:94:4f:45:08:38:0f:bc:f2:ed:93:e4:94:ea:
9b:df:55:41:d5:57:7c:a4:02:97:40:b7:e9:96:a6:cb:a7:3d:
70:e9:78:62:7b:bd:f3:fb:28:8c:f7:02:d2:18:c4:8e:0b:a1:
59:fe:4b:84:d8:0c:e9:f7:72:86:dc:e5:f5:1c:8e:5a:68:90:
59:2e:91:b7:a7:4c:6a:22:c4:da:c5:dc:11:68:9c:12:a6:cc:
39:f5:34:ee:61:2e:12:1c:03:37:7d:3a:89:98:eb:01:b8:7c:
db:7e:17:fc:80:62:68:6b:89:54:6e:5e:6a:46:cf:7b:3d:8e:
11:1d:83:97:17:59:22:6d:cc:dc:b8:71:6b:35:be:02:68:4f:
d7:d0:8a:3e:6c:07:9a:94:56:5d:24:cd:76:65:de:fd:03:b6:
bf:51:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:56 2026 by rpki-client