
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/36265df2-79b1-30b0-aba4-66f8c13fe609.roa
File: 36265df2-79b1-30b0-aba4-66f8c13fe609.roa (raw, json)
Hash identifier: +venhkULpnMeMFPQTwZzGK+DdF0spIOr1RQQBOUCA8I=
Subject key identifier: 8F:AF:F0:7D:2A:A0:09:21:DD:09:4A:40:AC:3D:39:87:D5:86:17:AD
Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial: 010D0C9F4328584DE9B089C5D8864D6975F3EC20
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/36265df2-79b1-30b0-aba4-66f8c13fe609.roa
Signing time: Fri 22 May 2026 01:00:24 +0000
ROA not before: Fri 22 May 2026 01:00:24 +0000
ROA not after: Thu 20 Aug 2026 01:00:24 +0000
asID: 395567
IP address blocks: 198.73.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 24 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e9:b0:89:c5:d8:86:4d:69:75:f3:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Validity
Not Before: May 22 01:00:24 2026 GMT
Not After : Aug 20 01:00:24 2026 GMT
Subject: CN=53cf46be-ad7e-4cd3-b45c-2057f48be2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:4b:0f:42:d7:1e:ca:f6:ef:4e:1b:80:c2:
fb:36:86:1f:14:3b:1e:5a:07:ea:0e:26:89:c7:8c:
1f:e2:c1:44:c4:83:2a:43:e5:3e:57:5f:bf:1a:56:
e5:bb:b4:02:00:da:f2:e2:55:14:d0:7e:65:3f:1b:
ea:27:0b:41:04:1c:be:17:5d:a0:70:8f:cc:b9:c0:
56:66:37:06:01:39:83:f2:c5:18:23:d7:f1:1d:16:
37:fb:fc:f1:e4:a8:22:9b:10:19:32:09:84:47:4f:
db:4b:28:2b:88:4d:69:13:04:91:21:c6:c4:16:34:
76:b8:76:8d:09:59:4c:31:86:be:19:fe:43:bb:fb:
4d:ac:da:b0:c1:46:0d:9f:c7:9a:be:c0:91:87:ad:
1a:6a:c5:f8:9e:b7:95:cd:7d:aa:19:0a:44:09:a0:
5e:95:46:92:91:8d:44:e0:56:8e:87:6d:5c:ea:f4:
0b:ca:b5:4d:d0:6e:ed:d0:37:11:bb:47:64:1c:5c:
4a:2e:d0:ac:0f:cf:b2:50:1e:83:24:aa:f5:e2:ba:
25:15:31:75:ab:35:c1:cf:db:58:7f:2d:39:6c:e2:
bb:cc:9c:18:1b:bb:fa:8d:65:4f:5a:84:f5:64:88:
d1:a7:24:61:a8:03:7e:2f:67:cb:d3:b3:2f:13:e1:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:F0:7D:2A:A0:09:21:DD:09:4A:40:AC:3D:39:87:D5:86:17:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/36265df2-79b1-30b0-aba4-66f8c13fe609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
X509v3 Authority Key Identifier:
keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.73.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:78:e6:f4:89:35:25:cc:dd:36:03:08:c3:37:f7:53:cc:da:
c7:2a:d5:50:51:91:3d:2d:d8:c3:bc:03:03:7a:28:60:af:fb:
e4:f0:77:66:1c:39:1f:67:0e:69:ea:a3:c0:8d:ae:42:f3:20:
0d:ad:8e:90:8c:06:16:f5:3f:16:39:d0:9e:c4:e1:fb:52:5e:
6a:5d:8c:c9:63:4a:70:ec:0b:dc:d0:10:ef:bb:43:99:24:72:
de:e2:f6:54:18:a9:ba:84:8d:18:41:4f:cd:ed:71:9c:db:69:
93:44:d0:91:2b:81:78:7c:c9:a6:dc:7a:0d:e9:fe:31:37:fe:
27:ee:e4:78:8c:e4:e4:a3:ac:ea:19:b4:ad:86:e5:3f:2b:af:
00:17:b0:83:77:8e:b9:1e:63:06:ca:3e:43:cb:cc:fb:56:41:
2b:29:2b:41:a3:7f:33:f4:a6:e4:49:74:5a:d1:ef:cd:4e:c9:
5a:20:2f:33:6b:5b:14:e0:ab:30:36:d0:e5:80:be:a6:7c:14:
42:5c:42:00:43:b9:ec:4e:75:31:1b:a6:52:0c:77:9b:4c:f8:
fd:2c:5d:8c:db:86:11:71:4d:2d:c3:2f:7a:c4:ae:8d:28:fa:
af:8f:99:52:ec:a3:bc:ad:d6:55:9d:7a:9f:90:54:7d:c9:1e:
2c:99:14:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 17:29:47 2026 by rpki-client