
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/42a18dee-8aba-3bac-84ef-8be341a6bc29.roa
File: 42a18dee-8aba-3bac-84ef-8be341a6bc29.roa (raw, json)
Hash identifier: CQKWEBYbBX7P/JqSxlZ+3lB+cDX0jhsy6a3pHU6yhjE=
Subject key identifier: E0:C3:62:67:B2:E0:41:B4:91:42:14:47:92:A5:DE:C4:83:F8:B2:98
Certificate issuer: /CN=51dcdcba-3766-4509-a479-bbf02514719f
Certificate serial: 010D0C9F4328584D941F64475664999D11E5EA00
Authority key identifier: ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/42a18dee-8aba-3bac-84ef-8be341a6bc29.roa
Signing time: Tue 21 Apr 2026 09:24:28 +0000
ROA not before: Tue 21 Apr 2026 09:24:28 +0000
ROA not after: Mon 20 Jul 2026 09:24:28 +0000
asID: 16276
IP address blocks: 142.249.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:94:1f:64:47:56:64:99:9d:11:e5:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51dcdcba-3766-4509-a479-bbf02514719f
Validity
Not Before: Apr 21 09:24:28 2026 GMT
Not After : Jul 20 09:24:28 2026 GMT
Subject: CN=57c20aa3-0f0c-42f0-90b9-23ed621de318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:3e:85:8b:f4:e6:75:37:7e:99:02:79:33:
6f:58:0a:73:93:f0:bd:84:06:e5:9c:97:c4:a1:ac:
59:9b:1e:e9:3c:8a:29:67:1b:97:94:2d:8a:eb:e6:
3c:70:20:9a:79:57:e1:7e:cb:95:89:02:8c:1d:47:
27:a7:7e:2a:0f:8e:a7:42:50:60:f8:db:71:7f:0c:
f0:b2:15:6f:5c:7d:28:a7:0d:f6:89:cd:55:09:10:
f3:57:aa:d5:21:29:19:b9:25:e2:06:da:69:c6:f1:
56:53:4f:b0:83:bc:ca:4e:b1:04:cc:12:40:9d:2b:
01:60:c1:84:cc:33:9c:31:65:dc:a7:c3:d3:09:cb:
4a:bb:6f:ea:50:fc:8c:3c:eb:06:10:74:bc:3d:76:
b2:31:a2:28:b8:a9:a6:9c:6b:b7:92:ed:a6:24:8b:
a5:9c:fe:78:50:59:85:8c:01:7f:0e:9f:a6:a6:54:
d7:60:a6:38:a4:10:2f:33:50:2c:d8:b3:96:33:57:
90:5e:e6:53:55:68:11:0c:2d:80:a3:50:b0:d7:04:
a4:f7:11:b6:1b:b1:3c:7b:1e:16:d2:29:e6:18:37:
a8:38:10:9a:1c:f3:4c:ae:fa:54:a2:1a:cd:d3:75:
90:ed:99:39:4e:1d:68:ee:1c:3f:12:30:0d:ba:29:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C3:62:67:B2:E0:41:B4:91:42:14:47:92:A5:DE:C4:83:F8:B2:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/42a18dee-8aba-3bac-84ef-8be341a6bc29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl
X509v3 Authority Key Identifier:
keyid:ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
sbgp-ipAddrBlock: critical
IPv4:
142.249.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ce:dc:8b:70:3f:08:ab:34:9b:61:cf:2d:b2:f8:ee:ef:5d:
06:a7:be:3c:8f:5c:2d:ba:a4:c5:c9:a1:97:10:79:7c:fd:c0:
5c:06:21:2c:c7:4f:a3:6e:52:5b:d5:15:76:c0:c8:3e:83:ba:
72:a2:66:04:03:ba:6b:54:e0:de:32:f4:60:06:d1:68:bd:43:
01:2f:f2:f5:b3:17:57:4c:25:73:bf:ab:90:b7:84:60:52:f8:
02:89:3e:63:89:44:a3:cc:6a:96:87:b9:dc:02:9c:5c:6c:8a:
5f:78:cd:dc:c7:50:cf:ec:61:d2:39:b0:57:f8:f5:0a:50:f4:
33:4d:43:4b:38:fb:f9:d8:e6:fd:aa:2b:5d:af:61:71:66:63:
cc:87:8e:28:dd:ad:54:8c:ae:3a:dc:20:b1:02:fd:20:93:7f:
ad:55:bc:dc:78:ce:4d:5c:8b:de:ff:fa:8e:98:b8:2e:8b:94:
10:6d:0c:a9:90:e2:62:75:1a:c3:16:61:4b:ee:bc:44:f5:fd:
e2:a2:e2:be:49:dd:6b:95:97:22:38:4d:8a:71:fa:25:b7:4f:
1a:b0:d6:cc:18:46:f7:77:7e:11:a0:8d:d1:44:47:4e:eb:0b:
1c:91:8d:27:2e:07:44:f6:44:bc:68:20:6f:39:0c:0c:83:4a:
11:03:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 17:26:22 2026 by rpki-client