
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa
File: 3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa (raw, json)
Hash identifier: QYVmcDktmCc+V8Q97KMFPcQmafYhWfjWBwkkAD4LFEA=
Subject key identifier: 4A:61:75:39:11:45:5E:8C:84:75:B1:9E:44:2E:4F:F1:0D:24:95:7C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EAE819D0F3AEEC6BFE095C210
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa
Signing time: Fri 31 Jul 2026 13:00:12 +0000
ROA not before: Fri 31 Jul 2026 13:00:12 +0000
ROA not after: Thu 29 Oct 2026 13:00:12 +0000
asID: 396572
IP address blocks: 216.168.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ae:81:9d:0f:3a:ee:c6:bf:e0:95:c2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 31 13:00:12 2026 GMT
Not After : Oct 29 13:00:12 2026 GMT
Subject: CN=f712830b-4a79-4399-bf8c-ec8bec24e2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:98:b8:6d:78:f6:e6:be:b2:51:00:a0:ba:87:
ab:07:6e:ef:9a:69:72:91:11:de:31:e1:37:39:5a:
6c:7e:45:e8:ae:aa:89:52:b1:b3:ad:44:f5:21:30:
11:4b:d8:43:72:a9:17:f3:f9:65:47:32:f8:4d:91:
74:65:a2:cc:1f:88:6b:b2:31:e8:f4:16:53:9a:32:
3e:6d:61:f2:b2:e6:82:ec:64:d8:53:b9:d7:42:0b:
d6:44:a6:85:87:02:a7:44:22:f8:5d:fd:27:4b:5e:
56:84:8a:1f:3b:37:88:cf:b9:4f:86:85:e4:78:8d:
52:f8:d3:6c:06:79:b0:62:0a:c9:4c:75:70:39:96:
52:a6:23:11:89:2c:71:22:c7:64:e9:66:8e:4d:c4:
0a:a7:17:b3:3c:14:5b:5b:b7:25:bb:0d:65:31:eb:
a5:f0:c1:b7:77:da:c9:26:81:9e:51:11:fc:11:d7:
95:ea:50:a0:d0:dc:b5:40:6e:5a:c6:20:c2:04:21:
cc:66:94:5e:70:fa:86:07:88:b3:8d:d1:df:b3:ea:
58:96:ca:5a:8f:41:b0:00:60:03:08:21:2f:2a:cf:
65:e4:9c:2e:1a:fd:87:e4:90:b0:40:44:c6:f5:a5:
8c:2c:46:af:15:eb:fe:db:89:00:7b:55:0e:49:21:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:61:75:39:11:45:5E:8C:84:75:B1:9E:44:2E:4F:F1:0D:24:95:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:20:82:f0:8b:f4:50:26:93:1f:90:76:6b:55:8c:55:6a:1b:
74:ca:6a:ef:ed:c7:89:e6:57:bf:a6:07:4d:51:82:ea:28:7f:
17:f9:9b:59:d8:16:0c:4d:09:e8:83:7e:7a:74:12:1d:ea:48:
ac:65:77:07:84:4e:3c:b6:8d:d1:df:9b:76:37:58:a4:5a:12:
1d:38:ec:fd:d7:0a:fb:66:3a:c7:cc:15:d0:5b:46:bc:ee:bd:
62:8c:28:86:98:f7:52:cb:39:04:66:33:17:74:53:38:ad:b6:
9f:40:a0:3b:69:2a:0d:61:76:5b:b4:4b:10:1b:aa:81:c5:fa:
8d:45:9c:e6:a3:f7:fc:a6:60:dd:6e:e7:52:3a:a7:3d:a0:ea:
d0:83:4e:58:f0:99:80:af:4f:ae:25:3d:ee:da:eb:8a:76:c3:
03:52:f7:fd:cf:ae:86:db:d1:34:49:eb:24:8d:1d:3e:d4:2b:
43:99:09:fc:13:fe:11:a5:bb:b4:16:99:90:d1:1b:f9:2d:19:
2c:ed:3d:36:59:d8:0a:83:d8:0b:0c:79:32:80:bf:0c:10:84:
af:c0:10:2d:6c:24:97:cb:26:67:90:fc:62:65:6e:cd:b7:af:
98:fe:4e:9c:d6:6b:6c:d2:89:21:d7:86:e9:5e:0e:30:c4:f8:
ec:fd:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:02 2026 by rpki-client