
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa
File: d08e2bc4-06d0-35bf-9749-f8eff9086892.roa (raw, json)
Hash identifier: k5QyxK9z9UvFrDhCsj6SRQLvfFM5E4LFEy1819DISrI=
Subject key identifier: 4B:19:FB:04:D9:89:34:76:70:A2:6E:CE:21:3B:39:75:8F:52:5D:1C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584E5084AB451606F40945832F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa
Signing time: Sat 27 Jun 2026 21:00:12 +0000
ROA not before: Sat 27 Jun 2026 21:00:12 +0000
ROA not after: Fri 25 Sep 2026 21:00:12 +0000
asID: 7342
IP address blocks: 216.168.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 29 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:50:84:ab:45:16:06:f4:09:45:83:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jun 27 21:00:12 2026 GMT
Not After : Sep 25 21:00:12 2026 GMT
Subject: CN=35f17e77-9348-4a32-a9c7-403059c5ec0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:c3:29:8c:77:86:a9:20:cd:4d:fe:1e:56:
bd:23:3c:34:c0:f8:c2:60:f3:a4:3c:66:0c:9a:07:
6c:ef:c2:c4:3e:af:b4:fb:a6:c3:a9:e3:30:d6:57:
95:8c:d7:e7:37:1a:d5:64:4f:64:79:5f:b2:b1:69:
2d:59:7f:99:a0:ec:c9:67:00:56:a5:fb:fc:ef:9b:
e4:23:80:4d:b9:a9:3e:fc:66:cb:da:d4:ab:29:63:
a5:49:72:81:c4:86:65:d0:79:40:de:6c:af:d7:55:
b9:60:36:4e:ce:5b:f4:da:a0:0b:67:45:c9:a8:d0:
89:a9:90:4c:b9:73:46:f8:39:01:2e:c6:12:18:ee:
52:3e:e6:61:43:37:85:37:d9:d9:74:97:57:b3:23:
df:71:21:f1:70:e5:db:09:54:4b:0a:8d:17:5c:55:
dc:1b:7f:b5:82:64:21:2c:d0:04:03:a9:68:a3:89:
bb:87:f4:d0:f0:f1:2b:67:80:32:91:50:83:d2:b3:
0b:c7:4e:2c:32:53:c3:a4:f6:0a:cb:ff:2c:79:48:
77:99:7f:8b:5f:cb:5e:af:73:3e:9b:31:4b:c3:86:
51:86:47:24:4f:6f:ed:d0:17:f6:d3:4f:73:7e:a6:
47:cd:c0:f5:96:74:66:c9:41:3b:25:bf:e7:e7:85:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:FB:04:D9:89:34:76:70:A2:6E:CE:21:3B:39:75:8F:52:5D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:51:6d:fd:78:c3:64:51:b2:8f:08:c3:dd:0f:6b:4a:61:0d:
f8:c6:70:2e:29:81:74:ee:75:6d:c9:8e:34:8c:24:24:98:92:
04:00:51:cf:73:3d:9c:06:e8:70:ec:d8:50:38:9a:94:c5:e5:
93:76:1b:94:26:86:8c:62:ca:4e:63:81:d9:ae:58:8b:9f:f2:
2f:9e:40:66:f5:ad:c6:b1:07:44:64:d9:83:e0:b3:fb:51:40:
a2:e4:ea:63:68:13:cf:aa:af:42:32:e2:e0:0e:50:ad:08:7f:
f9:de:0f:6d:98:74:46:54:97:6d:93:1a:91:4b:09:10:97:a5:
ca:cb:6a:06:bb:df:89:62:85:cf:b1:2d:c2:cc:e3:de:00:4a:
71:e3:32:2a:6e:2c:eb:5d:0c:33:6d:58:d7:bd:db:2d:fe:9f:
d4:c1:b9:8d:f1:3d:bb:d1:93:16:1f:f9:d1:69:33:3f:95:98:
53:83:19:f1:8f:41:1c:53:fb:71:d8:f9:1d:b3:9d:b5:d5:70:
3a:b5:5f:de:33:47:1c:32:29:74:18:2f:ba:bf:19:5a:bf:43:
a6:66:bf:eb:21:21:7a:c2:40:95:d8:34:ac:aa:fa:95:40:29:
db:17:05:4b:e6:c6:08:a4:19:e1:10:77:a7:ed:07:f4:df:f7:
c9:10:f2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:21:18 2026 by rpki-client