
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
File: 472b8477-15d6-33d4-b0d4-4c577d494c08.roa (raw, json)
Hash identifier: SQm/jqTMrXWqkrM8586/KbHa2x0YQkg9FYrRsHrM2nc=
Subject key identifier: 7D:93:A0:BA:A5:4C:C3:59:BC:9D:16:94:DC:6D:22:D1:CF:BC:68:8F
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F4328584D4D5A733197B6BB8845DA8000
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 9312
IP address blocks: 104.245.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:73:31:97:b6:bb:88:45:da:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=e180b0f2-10a1-4b9a-b80a-ab985410d216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:f0:a2:50:60:d1:c7:29:ac:d9:30:16:aa:
9b:01:cb:00:0f:d6:47:bc:a8:83:fb:17:cd:75:a0:
b4:97:ad:56:3d:47:0c:f0:77:d5:53:b7:97:3b:a1:
b3:3c:31:f2:55:e5:8b:86:82:02:9d:6b:1c:1a:f0:
22:6d:79:25:a8:b8:11:92:13:00:f5:b0:49:25:7d:
48:6a:e3:c3:3a:c6:2b:2d:03:88:62:84:7e:c9:34:
3e:b5:97:a0:7b:44:cd:7d:e8:00:1a:a1:88:e7:cb:
bc:d8:0a:b4:e7:9e:a4:69:2b:de:d5:5e:ff:5c:9e:
75:0c:ff:bf:16:2c:11:d1:38:f8:71:89:05:1b:63:
fd:72:4d:70:6a:0e:51:0b:22:f5:19:07:d7:de:5d:
99:9a:86:97:63:a0:7d:a2:95:0c:9f:c3:da:12:bd:
c1:a9:d8:f3:5a:aa:58:81:77:20:a2:72:3c:67:e2:
94:64:38:86:21:bc:8e:9d:67:fa:68:85:cb:19:4a:
09:96:c0:9b:e3:fc:ab:d6:b1:e1:74:3d:32:70:c0:
7b:4c:9b:3c:11:b2:1b:ca:7a:2f:50:10:83:55:9c:
95:97:25:12:b9:11:ff:2f:1c:16:8c:18:b2:da:44:
6c:b8:ac:45:60:34:71:0e:92:5b:73:c0:a8:f0:25:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:93:A0:BA:A5:4C:C3:59:BC:9D:16:94:DC:6D:22:D1:CF:BC:68:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a1:7e:59:fb:b8:f8:96:85:e4:84:e6:af:de:e2:26:53:61:
a8:73:8e:69:6c:4f:65:21:05:c7:aa:ec:1f:e1:0e:6b:89:d7:
57:88:96:d1:1a:66:cf:a5:eb:87:95:ea:b0:e8:78:33:b6:e3:
6f:5e:85:43:d4:38:ab:bd:dc:7c:17:e6:f6:9f:74:30:7b:d4:
49:0b:0f:71:b7:a7:33:43:4c:1c:25:b2:98:b8:62:8f:97:2b:
e5:4b:66:95:d8:90:6f:5b:80:6c:d4:d4:60:d8:d8:c6:a5:e5:
bf:37:7d:24:81:e7:0c:02:78:de:5b:e1:c2:c3:c6:41:3f:4b:
ad:29:38:e4:69:7f:96:5f:e5:e5:8f:2f:7b:41:5a:3d:c2:60:
1f:62:28:1a:22:d6:71:66:ae:4c:fb:36:b4:4f:e0:d4:4e:39:
35:f0:72:4a:e0:8d:cf:39:1b:d2:95:65:a3:42:df:12:9b:c0:
cc:b9:7e:15:83:36:f9:fe:f3:3f:ed:cd:c4:00:bd:c5:97:92:
98:62:ad:d4:6b:51:66:fa:f2:7c:b1:34:bd:4f:d5:85:3c:ea:
86:36:0d:7c:1e:70:01:59:b3:51:7e:ad:ce:4a:44:ae:d1:b8:
4d:1c:59:2f:d6:d1:48:9b:3a:f6:40:94:17:1f:df:83:20:38:
f0:39:c7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 06:51:46 2026 by rpki-client