
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa
File: 436d215e-6d6e-30c3-b32d-eedeac625ace.roa (raw, json)
Hash identifier: 6/ONmqkKw7pQ79FSxaEQSvxg/ob7KyOVMMPh4iDge8c=
Subject key identifier: E7:6D:1D:67:07:52:0A:F8:A4:DB:B3:79:F3:D5:B9:78:58:B0:30:3F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584DFBD5EC7206498C98FD621E40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa
Signing time: Thu 28 May 2026 13:00:12 +0000
ROA not before: Thu 28 May 2026 13:00:12 +0000
ROA not after: Wed 26 Aug 2026 13:00:12 +0000
asID: 9009
IP address blocks: 45.74.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fb:d5:ec:72:06:49:8c:98:fd:62:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 28 13:00:12 2026 GMT
Not After : Aug 26 13:00:12 2026 GMT
Subject: CN=1383aadc-b5b0-4c1d-baf1-43ec88f94d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:89:24:a3:91:78:78:07:f5:81:37:58:85:b8:
93:a2:d9:85:c9:de:87:72:c1:ea:33:43:95:26:19:
dc:47:ad:fb:ea:95:38:85:86:4c:18:8d:d3:c8:df:
9e:00:f5:18:55:6a:c3:ef:57:d4:3b:fc:0a:bf:4b:
ab:6e:ac:38:2b:8b:b4:23:6e:6c:a4:93:31:6e:2d:
17:f7:8e:49:ee:8f:e4:4d:a3:44:89:35:46:df:ca:
ff:4d:6e:4a:36:cf:b1:99:ae:71:9a:0a:28:44:fe:
6c:f3:7b:bd:b4:8c:01:65:51:61:9f:c1:87:74:f1:
27:cd:41:e0:25:34:ef:92:28:7c:fa:1a:a7:f1:83:
4d:2e:3f:e4:c3:1f:02:84:5f:93:23:b6:9a:e2:7f:
ef:87:32:e6:89:43:ba:39:be:0f:6a:4b:a5:c1:df:
1e:43:d4:13:73:bb:6c:07:b7:04:bf:8b:81:91:2d:
16:dd:6b:bd:07:e2:45:59:59:6f:84:66:5d:6e:bf:
12:4b:d8:b1:e1:61:65:94:d5:be:ad:6d:c6:61:c8:
97:1d:1a:1d:4a:22:d3:11:86:01:de:e3:38:c7:ae:
f5:32:f3:58:1d:00:72:40:5c:1f:1e:a0:70:29:f8:
69:d8:e8:a5:79:f6:37:1c:df:eb:33:6e:53:1c:6d:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6D:1D:67:07:52:0A:F8:A4:DB:B3:79:F3:D5:B9:78:58:B0:30:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:7c:ab:8e:f5:60:db:7b:80:7b:e3:86:27:7f:66:c8:da:f0:
14:f0:ee:77:e1:df:a2:9c:f7:fa:6a:b7:31:ad:75:dd:dc:47:
3c:e1:ac:39:ee:36:70:6a:a9:25:99:64:24:2c:02:93:ff:81:
9a:8a:47:aa:d0:9f:af:17:8f:32:9a:ab:ff:04:60:69:62:aa:
00:2c:45:c8:c1:4a:20:a1:60:8e:58:68:29:c4:81:f5:e7:02:
bd:a7:28:69:a2:cf:ed:d6:c2:d6:98:d2:92:28:37:de:72:5c:
cd:fc:7e:d0:86:9b:af:82:8b:74:34:49:97:b9:b4:7d:c4:1e:
8c:77:e2:db:bc:d6:08:0f:d0:12:bd:72:fb:d7:e1:dc:3e:17:
89:49:a9:51:b0:b1:94:98:84:f2:0b:2d:ea:18:cd:58:19:e9:
95:ea:e7:18:a0:ad:e9:98:72:d1:43:f5:5c:b4:13:e1:1e:49:
5b:ff:d9:9b:42:64:3b:96:6e:9f:cd:6b:7d:f4:43:55:df:ab:
52:56:cf:70:a9:81:75:70:72:31:c4:05:0c:e6:02:95:f5:35:
9f:e7:1e:d6:23:bb:49:0d:a3:18:b7:9c:8d:3b:30:df:8f:e1:
be:04:c6:47:ea:6a:16:d2:01:a7:7c:ca:97:a6:95:78:dc:27:
a1:ee:94:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:26 2026 by rpki-client