
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa
File: 58cb281c-c134-3300-b62f-7a82f33f8b29.roa (raw, json)
Hash identifier: Tzpe7KpqfFVXz3RTNXqfQ0TardZO897yMAYhlugCVzM=
Subject key identifier: 2F:9F:16:86:20:E7:12:51:B7:3D:B3:C8:59:35:8B:B6:F7:7E:68:63
Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial: 010D0C9F4328584D4D5A72DADB50A3CCD131E480
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 56274
IP address blocks: 198.208.133.0/24 maxlen: 24
198.208.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 05 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:72:da:db:50:a3:cc:d1:31:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=2ce556f2-7e7c-4cbb-93f8-152fe3ce5c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:fb:09:d4:c4:c2:6c:19:3f:28:ff:c5:b9:
ed:b7:0a:df:76:ba:01:dc:5d:55:58:7b:9f:af:a7:
be:72:df:10:52:fd:07:34:f2:7c:65:7a:f6:63:83:
ca:d0:33:fb:03:7b:48:77:73:70:df:bd:6a:ad:04:
10:8b:ee:58:72:09:8a:d0:f3:d8:fe:fe:45:9f:06:
40:21:60:0e:0c:68:ab:5f:a4:b1:96:41:1e:24:17:
53:65:26:bb:36:b8:d0:f0:05:40:5c:64:18:cc:67:
8c:30:ff:87:80:97:98:d0:3a:5d:7e:19:7f:5c:25:
05:43:00:9c:82:6d:a8:fe:c1:0d:fb:a1:53:58:ef:
31:40:35:8f:02:8b:cc:2f:8e:81:20:0e:24:a3:81:
51:93:c4:12:e1:5d:1f:30:48:10:f9:c0:d8:5b:86:
fa:ee:27:fb:6b:7a:b9:2c:a3:2e:91:1b:3c:fd:4e:
87:6f:4c:cc:57:98:08:12:b6:ee:3b:13:48:4f:33:
01:a8:62:15:73:15:ae:8f:89:1b:44:62:04:df:e4:
40:ce:30:e7:87:03:df:fc:47:23:71:60:3a:40:af:
83:d1:f1:b3:52:8b:9d:33:ed:37:6d:d9:96:80:a7:
51:b3:e5:11:1b:65:28:fb:1b:80:ea:fb:41:e5:06:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9F:16:86:20:E7:12:51:B7:3D:B3:C8:59:35:8B:B6:F7:7E:68:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
X509v3 Authority Key Identifier:
keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.208.133.0/24
198.208.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ef:1a:30:d3:99:9e:c1:36:a2:8e:cd:61:d1:3e:8b:98:de:
da:cc:a3:bd:f2:c9:de:18:c2:92:03:9e:95:2a:b0:4d:84:ba:
a0:75:44:67:b7:da:f4:46:5b:0e:72:b2:ed:a4:72:0f:64:60:
09:b1:5a:52:a1:82:bd:74:4f:14:d7:34:5d:cd:52:e5:23:3b:
e8:93:aa:09:40:46:55:1b:73:fd:89:1b:a4:b6:c2:54:be:91:
88:dc:b2:d7:7e:f1:68:77:c7:1c:d8:70:56:6c:b9:fa:0e:55:
4f:05:11:f1:92:d9:cc:a7:be:7f:cb:7b:c7:a1:b9:d4:dc:d2:
40:8d:f0:1c:04:c4:7f:f5:a8:27:d9:8b:04:52:64:31:58:ca:
d2:e4:46:ac:b7:ed:ee:9e:b7:5a:b2:30:a2:fd:df:6e:ee:00:
ea:b5:a1:79:d6:54:7c:27:0c:4a:40:f4:be:f7:49:7e:df:99:
2e:81:6e:c3:c5:03:13:3f:3b:ea:e9:55:95:39:b3:b4:42:59:
a4:aa:03:53:db:7b:93:df:71:32:b6:74:09:fe:8f:c1:9f:01:
9a:b6:44:c9:60:11:db:dc:2f:76:39:bd:b6:8f:ae:25:36:7b:
9b:19:f7:40:6a:2f:03:45:2a:12:d8:ad:52:12:bd:e1:a6:b3:
c8:a5:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 17:58:04 2026 by rpki-client