
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa
File: dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa (raw, json)
Hash identifier: ii20TzYIbMEr+IlgbRThavJbKEh9b+044vowPVIAS0c=
Subject key identifier: FC:EE:D5:89:1C:73:8A:22:A1:7E:3E:83:59:72:70:75:6D:F2:F0:D6
Certificate issuer: /CN=b18324da-6458-413f-b067-6f50e625e3dd
Certificate serial: 010D0C9F4328584DA3E56353F5CC1E6582FABC40
Authority key identifier: 1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa
Signing time: Mon 27 Apr 2026 01:00:24 +0000
ROA not before: Mon 27 Apr 2026 01:00:24 +0000
ROA not after: Sun 26 Jul 2026 01:00:24 +0000
asID: 25715
IP address blocks: 184.94.224.0/20 maxlen: 24
192.40.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a3:e5:63:53:f5:cc:1e:65:82:fa:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18324da-6458-413f-b067-6f50e625e3dd
Validity
Not Before: Apr 27 01:00:24 2026 GMT
Not After : Jul 26 01:00:24 2026 GMT
Subject: CN=313a7bbd-6e39-4b32-a4d9-8de2ba50e136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:80:24:d1:79:43:74:e1:9d:27:ac:3e:4c:ee:
c8:32:cc:fb:59:91:a0:39:a8:e1:d3:2e:5c:10:d3:
62:68:e5:22:cf:e9:cb:2f:a4:2e:93:93:77:d7:97:
95:d6:c9:a1:77:6a:7c:ca:c9:7a:14:b2:1b:67:b6:
40:25:82:68:1b:24:fc:f2:81:54:a4:c2:36:bd:28:
18:41:9c:38:7b:34:05:58:d8:b4:e2:8c:18:01:43:
94:e7:9f:de:0d:7a:e1:47:46:ed:22:c4:b0:22:7d:
cf:ca:c0:86:2f:8b:9e:e2:b5:23:86:7e:63:0e:b0:
fd:c8:c5:31:8b:09:78:0c:e9:d3:93:b6:fc:37:f4:
10:74:8b:89:32:0d:7d:94:10:62:4a:86:39:32:2f:
df:5e:75:79:7c:98:3f:6a:94:fd:a2:55:c8:d1:76:
2a:d4:93:49:e6:16:24:fb:91:bb:a1:8d:b0:96:94:
a9:7a:08:66:fa:74:01:87:8e:16:a6:9c:a3:ae:45:
c3:30:c0:ff:f7:eb:34:01:20:7d:19:81:82:b4:ee:
99:f9:9e:ae:17:9b:f5:2a:02:3f:82:3f:f3:75:ce:
b7:92:27:6a:a0:37:56:d1:56:bd:49:db:9e:fc:4c:
20:8b:ea:e2:40:46:70:e6:e0:7f:15:ce:18:0e:aa:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EE:D5:89:1C:73:8A:22:A1:7E:3E:83:59:72:70:75:6D:F2:F0:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl
X509v3 Authority Key Identifier:
keyid:1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
sbgp-ipAddrBlock: critical
IPv4:
184.94.224.0/20
192.40.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:00:a8:43:e0:2c:a8:a9:d6:7e:1e:ed:6f:dd:43:c8:c5:fd:
47:f6:84:1c:c9:da:71:d3:f1:c7:2b:42:27:10:4a:6b:32:70:
86:0c:78:26:b3:bb:ca:47:77:05:d3:c4:c8:fd:e5:cd:f3:09:
e6:c8:2c:07:d2:84:49:5c:59:02:eb:29:5b:de:1b:4f:53:7a:
84:5e:cb:40:4b:0c:b4:ff:bf:8a:89:b8:9a:a7:73:bd:84:a5:
8f:c9:d4:ab:39:46:96:c2:63:76:c8:a7:cd:aa:fe:df:b1:12:
68:33:c3:b3:f0:d3:c7:e4:25:b7:90:90:c5:94:32:67:03:a6:
f9:f9:3e:d8:37:7e:cf:7d:32:e2:e7:2e:85:6f:0e:a7:82:e2:
e2:cb:42:07:45:31:9d:1a:df:2a:49:52:79:50:61:39:e1:ff:
3f:ce:e6:65:99:66:d0:56:55:3e:9e:98:de:bc:51:7a:35:8e:
e7:9b:b1:c3:84:c6:3b:a6:db:0f:24:6f:68:bf:58:45:df:61:
f6:d1:56:89:ee:be:be:61:71:ed:29:22:74:fd:9f:48:9a:2f:
6d:a1:86:26:44:70:3e:98:4c:bb:a2:e6:c2:43:bb:86:2b:c7:
33:2b:2a:30:9f:7b:a0:76:28:45:59:a6:7a:ac:b0:f9:83:1b:
f2:77:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:34:52 2026 by rpki-client