
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/af7a0a39-92d8-3f36-80d4-2d3c436cafee.roa
File: af7a0a39-92d8-3f36-80d4-2d3c436cafee.roa (raw, json)
Hash identifier: 4r3c7HYN+mW8hzR20EOQ2m2A7DEKeWoOQlQ9WeNaZ4Y=
Subject key identifier: 0E:15:6D:9B:8B:01:15:E2:04:B5:5E:20:D7:20:49:4A:5B:DD:D6:72
Certificate issuer: /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial: 010D0C9F4328584D667A59F654BB5AFE05242760
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/af7a0a39-92d8-3f36-80d4-2d3c436cafee.roa
Signing time: Sun 05 Apr 2026 01:00:24 +0000
ROA not before: Sun 05 Apr 2026 01:00:24 +0000
ROA not after: Sat 04 Jul 2026 01:00:24 +0000
asID: 10361
IP address blocks: 69.191.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:66:7a:59:f6:54:bb:5a:fe:05:24:27:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
Validity
Not Before: Apr 5 01:00:24 2026 GMT
Not After : Jul 4 01:00:24 2026 GMT
Subject: CN=a5a3de75-6ec9-4e64-a8a2-5b6f2fe892f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:45:83:38:8f:0c:6f:a1:1d:1c:a0:0c:4c:
e1:d2:69:ff:bf:3e:3f:ba:cc:03:2f:0f:3a:7a:4e:
4b:1e:b6:9c:f5:74:d5:c2:b9:46:8a:3c:7b:ec:97:
88:98:f4:32:df:c3:a6:36:97:4d:80:03:15:80:a9:
8e:f8:a6:23:69:00:cb:c9:b8:b8:fb:58:be:7d:fe:
98:16:0f:c5:a5:4c:88:1c:13:36:d5:76:c8:2f:01:
14:ea:22:64:12:6b:ea:a0:12:62:2a:88:16:15:01:
65:6d:52:be:27:62:61:e1:27:b3:94:b2:f9:e2:17:
f1:e6:be:f0:ed:56:8e:ad:d8:14:0a:c4:a5:f0:79:
83:af:8c:c2:72:6a:b3:a5:b8:9d:ea:39:eb:46:75:
c2:68:71:9c:6a:c8:26:48:cb:6b:38:e9:84:af:f4:
e9:39:e9:8a:e5:4a:a3:ef:f5:0e:20:e7:bc:60:c9:
e4:f5:14:55:cf:8b:d7:cc:fe:ea:07:91:ba:b7:f9:
43:2b:20:ca:6b:78:42:c8:c2:d0:30:91:da:07:19:
0d:b2:e0:02:a9:2d:d3:08:1d:af:b1:59:f3:18:81:
c3:01:1c:d4:f5:1c:70:f5:6b:cf:6c:d1:a9:12:d6:
44:ab:eb:d9:e9:70:a6:62:1b:28:c6:ed:46:da:8f:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:15:6D:9B:8B:01:15:E2:04:B5:5E:20:D7:20:49:4A:5B:DD:D6:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/af7a0a39-92d8-3f36-80d4-2d3c436cafee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
X509v3 Authority Key Identifier:
keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
sbgp-ipAddrBlock: critical
IPv4:
69.191.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:aa:e3:c2:33:e1:ae:9a:1b:05:4b:7a:d8:f2:a3:ab:3f:2a:
b0:d0:f6:0c:82:ab:38:bc:0c:09:46:f4:b9:2b:72:51:68:89:
74:dc:30:3b:80:1a:13:32:16:b8:81:16:c3:35:6f:d6:65:05:
07:e9:21:cb:d4:4a:a3:87:ce:e5:bd:d0:82:cd:1a:10:17:5f:
0e:53:40:64:01:ed:a7:60:87:d3:29:46:d4:4f:6c:ba:a3:e2:
7e:e5:18:71:53:0c:db:6d:43:2e:c7:f5:20:92:9b:e7:18:75:
1b:81:92:ab:60:a4:1d:83:0e:f5:84:8f:61:13:14:b4:cb:7a:
aa:ed:57:14:f3:7e:e7:ba:e7:4c:bf:cd:c0:2e:e9:c1:f4:78:
ec:26:3f:06:21:1f:03:9d:37:f9:47:d8:b8:3a:7e:8c:17:08:
cd:8e:46:55:c2:db:06:a2:de:ef:10:fa:c1:36:c5:48:4c:db:
87:df:67:88:ca:21:70:6a:51:a1:ed:0e:0c:7f:14:91:24:42:
0d:00:f7:ca:95:ef:32:cd:27:c4:a3:c6:c6:a1:99:75:55:d7:
52:2f:42:72:58:10:e1:d6:5c:bb:1b:59:3d:bc:af:8d:93:09:
e4:38:10:40:24:29:6f:9e:f6:41:dd:0d:37:28:d2:57:ba:21:
0e:9f:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:35:40 2026 by rpki-client