
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
File: 1b223cca-1417-3066-b397-805664ddda0b.roa (raw, json)
Hash identifier: 3ufFkXGHARPalm2CxwaSX2flCO6uQNUAScOiWIsSZ+A=
Subject key identifier: 2D:86:36:8C:1F:18:F9:67:92:B5:DA:A5:98:BC:37:A0:BB:CD:29:78
Certificate issuer: /CN=836bd820-5504-47bf-baac-f0d3a943c97c
Certificate serial: 010D0C9F4328584D0FB541FBAC31E7FC1D242B80
Authority key identifier: 45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
Signing time: Sun 11 Jan 2026 14:00:39 +0000
ROA not before: Sun 11 Jan 2026 14:00:39 +0000
ROA not after: Sat 11 Apr 2026 13:00:39 +0000
asID: 36419
IP address blocks: 64.239.0.0/22 maxlen: 24
204.10.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0f:b5:41:fb:ac:31:e7:fc:1d:24:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836bd820-5504-47bf-baac-f0d3a943c97c
Validity
Not Before: Jan 11 14:00:39 2026 GMT
Not After : Apr 11 13:00:39 2026 GMT
Subject: CN=4c6c4549-96cd-4aaf-b273-645b1e21af84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:52:24:be:44:4c:1f:2d:2a:3c:e5:83:2b:
d8:26:32:69:24:f0:68:19:4a:90:9d:e6:3c:8e:05:
71:de:ce:0d:eb:61:04:f9:63:5d:18:51:58:c6:b4:
00:b7:52:e5:9c:42:07:eb:98:ac:d8:5d:3d:2c:a3:
3c:19:f5:b3:18:86:58:14:48:be:fa:bb:9c:c0:36:
22:2e:fd:3f:cf:33:da:ed:7a:60:aa:a6:4a:38:d4:
88:6b:fc:46:e3:35:0c:6a:c3:3a:15:79:5b:be:ca:
a5:40:7a:12:4c:c3:ad:fa:f6:16:2c:39:5b:c0:b1:
f2:d0:ef:98:7c:ad:93:90:f2:80:e2:0d:cd:d7:03:
10:43:36:4c:2d:e1:ee:c9:ce:59:20:35:52:91:e2:
56:1c:fb:80:51:d8:2b:ea:00:fa:53:d6:c2:31:2b:
a5:c9:a9:62:d3:c5:7a:5e:fe:19:5b:ff:43:99:c1:
45:41:83:fb:68:46:96:64:06:b4:ef:c8:93:50:16:
43:27:35:ce:b9:0f:4b:c5:23:b4:60:66:14:ba:dc:
48:e0:f0:77:c6:a6:10:62:a4:71:1e:b1:14:91:f8:
bc:29:48:e1:c6:4e:9b:cd:4c:47:fe:5e:71:9f:38:
f1:87:12:67:8b:01:f5:f8:c9:94:ee:e5:ab:15:3c:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:36:8C:1F:18:F9:67:92:B5:DA:A5:98:BC:37:A0:BB:CD:29:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.crl
X509v3 Authority Key Identifier:
keyid:45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.239.0.0/22
204.10.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:0e:33:02:6f:77:f6:66:e2:66:97:26:c9:aa:c9:f5:f8:1c:
2b:bc:f7:0b:fa:19:88:f2:81:1e:3f:c2:4b:e4:33:83:58:49:
d1:d3:73:b7:e4:b2:57:13:cf:b9:87:40:3c:40:c9:e8:7f:90:
f2:45:48:04:bf:b4:41:14:6a:e9:1a:3c:0d:7c:52:de:e7:84:
a6:a8:db:db:05:28:00:2d:0b:38:fb:01:95:43:6d:73:b6:5d:
ec:b0:d5:56:8a:c2:d6:aa:46:82:1a:e0:8e:02:a3:62:9a:9f:
ec:3c:48:7b:60:1b:6a:25:ec:9d:49:5e:b2:70:95:1a:41:4d:
99:45:97:ec:21:39:04:fb:b5:8b:98:14:83:f7:5e:eb:8f:cd:
2d:f5:c4:da:51:3a:e5:56:af:53:24:4e:fd:03:1c:f6:4c:4e:
fb:b0:19:e6:26:a4:5c:25:54:8d:4f:dc:87:32:ff:ef:35:08:
80:6f:90:76:a9:73:89:21:9c:02:98:47:25:df:22:f2:e3:da:
d9:46:ce:a1:6d:e4:fa:2c:f8:98:85:40:eb:82:67:b0:e9:3c:
24:92:59:f6:11:e7:ac:50:8e:3b:3d:cb:9a:97:57:3f:5a:cf:
5a:b2:1e:78:e8:6b:5d:02:8a:37:b4:3f:f0:27:fb:02:8f:34:
f9:de:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:23 2026 by rpki-client