
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8e45914f-51e5-3e68-a302-1375b40ef034.roa
File: 8e45914f-51e5-3e68-a302-1375b40ef034.roa (raw, json)
Hash identifier: cKFjg9pFIgS5fj5SfGPcKv3lrqZ8hwVGUaXjipclAbY=
Subject key identifier: A2:E2:84:E2:5B:A4:32:25:44:7F:90:27:33:F9:59:FD:D3:D1:43:A6
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584D2A74BE0AD51DDC356F1CAA00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8e45914f-51e5-3e68-a302-1375b40ef034.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 22652
IP address blocks: 199.244.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:be:0a:d5:1d:dc:35:6f:1c:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=debc0f57-10dd-4d36-8c0c-8de3a11e7f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:43:6b:04:34:66:e0:b6:4c:47:a0:70:89:
38:0e:85:29:cb:4d:d2:e6:90:14:17:e1:af:57:a0:
01:27:d5:21:62:93:e3:94:31:2f:4a:96:23:91:be:
26:7c:c6:06:89:e3:61:23:ba:97:01:0b:a3:a9:79:
f7:97:d5:ca:dd:13:a3:27:a4:75:2b:ab:60:87:60:
bb:3a:92:be:71:86:cb:6c:8e:c8:79:f1:8e:e0:2c:
24:5e:d8:eb:87:8f:2d:a8:7e:e5:d9:0e:02:c1:81:
65:03:b6:c5:80:6b:bf:ba:d2:e2:1f:f9:91:9c:82:
89:c1:4d:d8:c4:65:a7:89:db:9f:a2:fc:54:99:3e:
e8:30:13:c2:7b:da:ec:6c:c3:5f:03:60:08:fd:1d:
bb:23:46:36:1c:74:f9:2f:e6:11:e4:c9:45:ca:39:
03:18:11:26:3d:aa:31:52:76:b8:5b:a5:c0:f3:48:
a3:01:8a:4b:9e:df:4d:0a:f4:e7:2c:f7:5f:43:ae:
44:34:07:0d:a2:ab:f5:7a:83:9c:b8:48:17:f6:c7:
5a:52:2e:42:62:3b:f9:b6:32:3e:59:f1:96:2a:13:
7e:a3:2c:2e:1a:99:ee:ec:b5:1b:7a:8a:0a:d8:53:
7c:49:3e:e7:cc:ec:68:60:ea:f1:e5:4e:06:e9:19:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E2:84:E2:5B:A4:32:25:44:7F:90:27:33:F9:59:FD:D3:D1:43:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8e45914f-51e5-3e68-a302-1375b40ef034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
199.244.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:4e:a0:3d:04:63:d8:c6:35:d8:49:dc:e2:be:d8:99:0f:f9:
f0:57:5a:9a:56:e6:c8:e1:47:22:62:b9:3c:63:07:6b:4b:93:
92:90:53:d0:bd:bd:6b:d9:f8:b4:a6:f9:62:6b:49:67:78:79:
f9:ed:90:b0:4a:2c:de:bf:4b:fa:2e:39:0a:74:fd:29:2a:79:
eb:4a:56:ac:ec:f4:28:74:4b:ba:31:e2:fe:cf:fb:3a:c6:d6:
c0:8a:8c:29:49:56:2e:8a:63:ea:e7:f7:90:f6:66:c3:51:fd:
e1:93:bd:e8:02:d3:38:be:25:cb:54:bd:0f:78:62:e4:9c:75:
c0:65:f5:64:a5:9a:ef:8c:b7:15:04:7b:86:82:cb:12:a6:01:
ad:9d:22:00:6f:be:e7:8e:2c:8b:dd:7f:ca:ca:cd:ff:74:a4:
13:7b:cc:16:63:8c:a0:41:a0:fa:03:00:93:fd:e0:ce:ed:e8:
1f:0c:6a:ba:d3:2f:6b:f1:e0:f1:d2:c6:3e:7b:bd:82:f9:71:
34:12:08:b2:8a:3a:ea:e0:e8:4b:2f:a3:65:5d:22:91:35:ae:
31:60:bb:88:96:9a:93:79:b2:6e:63:2d:1f:5e:a0:1d:a6:a1:
d8:25:54:be:e0:53:6f:09:44:34:9f:38:d0:51:85:b2:06:77:
5d:17:52:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 10:06:24 2026 by rpki-client