
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa
File: 789da6a0-2c7a-3a3d-9143-50da694cacaa.roa (raw, json)
Hash identifier: fx8b4H/krWuKXjX5lgoTghxEUBvAQAoJzpwqaHB+zuo=
Subject key identifier: 70:49:17:A3:F5:FE:2E:8E:64:A0:56:EA:35:1C:37:90:D0:7F:A2:06
Certificate issuer: /CN=e2311284-478e-4111-8d73-27148a01fa21
Certificate serial: 010D0C9F4328584DE2B5E9B1F37FB457809C2400
Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa
Signing time: Tue 19 May 2026 13:00:32 +0000
ROA not before: Tue 19 May 2026 13:00:32 +0000
ROA not after: Mon 17 Aug 2026 13:00:32 +0000
asID: 17056
IP address blocks: 199.168.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e2:b5:e9:b1:f3:7f:b4:57:80:9c:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21
Validity
Not Before: May 19 13:00:32 2026 GMT
Not After : Aug 17 13:00:32 2026 GMT
Subject: CN=73865acc-0cfb-454e-99ee-6f0a7c302797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:5e:ea:84:1d:ef:aa:d0:8a:fa:a4:38:ac:
07:47:cd:c4:49:60:40:b4:35:b4:e3:f9:d7:30:ca:
94:f9:8a:d6:98:a8:8d:bc:9d:34:eb:e2:87:1f:49:
0d:1f:1e:5c:26:c4:b1:2e:0c:b4:e4:2a:36:0f:99:
7c:a6:7b:bc:ee:f9:cd:e1:64:33:8c:cc:dd:79:b7:
55:01:62:b5:0d:7a:34:b1:03:ad:90:53:0c:8f:92:
23:42:52:10:b2:1f:37:e9:18:e5:60:8e:df:ea:31:
da:01:6c:1e:a9:13:50:b0:69:72:04:d0:a0:53:6d:
6b:64:10:d3:8d:39:8d:70:7b:9d:ba:64:02:cb:6b:
21:56:b0:ad:c0:9b:89:60:6e:24:a4:2d:5f:00:cf:
a6:e7:0c:c6:1b:d7:23:37:a4:a7:b9:cc:0e:bc:48:
ac:8e:92:a0:49:42:25:c8:2e:63:53:36:a0:8c:e0:
c3:7b:55:75:da:4b:f1:21:55:0a:11:c6:7a:46:0d:
52:c5:48:c3:2a:3c:92:20:73:53:f5:2a:97:cd:a3:
e5:64:ac:ae:30:b9:e9:11:04:2a:ad:12:5b:42:2b:
63:2a:f6:c1:5f:b6:a1:48:72:e6:0a:6a:f8:ba:42:
78:13:5e:55:e8:86:47:a1:d5:a7:c6:ab:66:f0:a8:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:17:A3:F5:FE:2E:8E:64:A0:56:EA:35:1C:37:90:D0:7F:A2:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl
X509v3 Authority Key Identifier:
keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
sbgp-ipAddrBlock: critical
IPv4:
199.168.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:63:a5:e0:64:2d:fd:69:42:bb:c2:ad:2f:d9:1d:c3:90:54:
07:3e:3e:43:68:e3:cd:fd:57:14:ea:01:57:81:c2:fe:3a:5b:
a6:b8:3c:8d:49:5d:e4:dc:4e:17:df:ee:c5:74:42:61:c8:51:
f5:66:b3:44:5a:52:66:2b:da:e7:1f:7b:ef:2a:c8:e9:1b:e2:
43:26:4b:4b:91:dc:7f:a0:55:37:19:f0:56:c7:62:ec:f0:ef:
4b:2d:d9:f2:07:bc:f5:da:81:bc:64:01:aa:89:66:bd:79:90:
7c:88:a9:e4:97:0d:da:a8:c2:d5:1c:06:11:f7:01:a9:02:e5:
c0:3c:d2:cc:35:c0:9e:ad:81:41:58:1c:0b:bf:96:b6:f0:f0:
b3:df:d3:7a:d4:12:c4:d8:fe:01:1b:b4:1a:88:9b:3d:3f:dd:
f8:19:6b:54:82:8b:f9:2c:88:4b:7f:ee:9c:66:78:be:51:95:
c7:ab:18:58:a0:6b:cc:3c:06:4e:c2:47:f3:50:ff:35:9c:80:
ff:9b:ce:7f:9f:3f:aa:1f:64:e2:7d:3c:04:9c:16:9e:a9:ca:
fb:e9:3a:4b:29:e5:a4:e2:44:5b:21:ff:c8:2f:2e:00:00:44:
9d:93:c9:01:69:68:b3:7c:a4:e8:b9:c0:f7:4d:2d:18:f5:7b:
3e:5e:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:32:34 2026 by rpki-client