
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d4a8c4b-a05d-332c-a66a-b08bf799e456.roa
File: 9d4a8c4b-a05d-332c-a66a-b08bf799e456.roa (raw, json)
Hash identifier: OG4bccLbPmeDt8lNSbdT34l7vK8C1wxhucPdjL6/jWY=
Subject key identifier: 23:CB:12:BE:E0:56:43:C5:D3:10:FA:6B:33:DF:AE:68:36:E8:03:01
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA797EB628049EF59D149F500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d4a8c4b-a05d-332c-a66a-b08bf799e456.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 36622
IP address blocks: 198.41.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:eb:62:80:49:ef:59:d1:49:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=26e37764-e2b9-4b6f-aa06-3b981a386edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:65:5e:a8:85:32:15:99:98:a9:cf:d6:7e:
92:a5:86:12:ed:df:5b:d6:e8:a0:de:5b:cf:e7:62:
5a:57:70:50:bf:fa:93:4a:7c:77:57:a0:94:54:57:
13:ee:6b:bc:f6:5a:f2:cb:11:4d:47:83:ef:c1:37:
84:eb:7e:8e:05:c9:ad:3c:56:0f:0b:92:6e:0d:df:
98:5c:2f:f4:ee:a5:18:d3:c0:0c:7a:0d:ff:16:ca:
f6:ef:1a:51:b1:ef:43:64:0b:bd:3c:c9:d2:c6:ed:
92:88:45:f7:59:d6:5f:44:b5:7b:aa:b0:91:e9:18:
18:d1:45:24:a9:d9:e8:13:56:ae:ed:f0:b5:65:0d:
e5:3d:b4:7e:4f:71:e4:46:5b:19:22:c1:a2:42:32:
f1:18:56:e9:aa:67:30:dc:ce:5f:1a:bb:03:93:2d:
8f:fe:5a:08:1f:40:a1:71:a9:c0:99:fa:99:99:70:
26:de:e2:1f:d9:58:d9:84:d6:ae:e1:25:1a:be:da:
c1:d1:90:71:39:af:96:1b:27:81:11:dd:52:4d:77:
a1:73:a2:3b:6e:4a:41:91:8c:61:3d:6c:15:01:8d:
17:6b:9d:65:88:f6:47:d0:8a:f3:ff:1d:b6:87:35:
f8:f1:2b:ae:b8:36:f7:35:d2:98:36:24:ed:e3:e9:
3c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CB:12:BE:E0:56:43:C5:D3:10:FA:6B:33:DF:AE:68:36:E8:03:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d4a8c4b-a05d-332c-a66a-b08bf799e456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:97:e0:e0:4e:87:4c:c5:45:19:49:ef:59:17:f7:d4:f3:7f:
db:62:a5:cc:6f:11:f1:47:1d:7e:5a:ea:af:19:f6:aa:4f:fd:
46:05:84:e1:62:f8:06:54:5a:3f:a2:b3:a9:68:94:48:f3:d5:
a6:a4:a2:2f:7c:1a:a8:6d:f8:c2:23:42:28:46:06:f1:dd:c1:
7c:ff:cc:96:09:58:65:f7:f2:39:c5:fd:8f:30:69:48:c5:31:
c3:f1:a3:e7:06:0b:40:f2:ac:d6:03:75:7f:5d:8e:3f:30:a1:
9c:25:1b:63:e1:03:ff:02:0e:9a:43:65:09:7c:90:9b:70:d5:
07:20:9f:7b:31:12:22:ba:5f:b9:a4:bc:42:ec:48:bf:19:b3:
d0:aa:1a:5a:16:57:a1:b2:44:47:88:13:13:7f:6b:be:d8:5f:
c6:13:e6:e5:1a:3c:8e:b3:93:a6:d8:65:3a:dc:6f:96:0f:27:
3e:5c:70:d9:52:38:f4:57:a5:9e:b2:5b:8d:17:86:ed:a1:5b:
62:4b:b3:6e:89:a6:09:58:dc:69:21:91:31:b3:68:2a:81:2e:
bc:55:6b:3f:46:7d:0a:27:5c:44:3b:36:51:b6:44:d0:3a:3e:
cc:13:a9:65:d0:51:18:13:dc:9c:12:f5:04:33:e8:b6:39:3f:
b7:a5:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:54:36 2026 by rpki-client