
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4dda0ae1-52d8-359e-8a1f-19dbbac7e048.roa
File: 4dda0ae1-52d8-359e-8a1f-19dbbac7e048.roa (raw, json)
Hash identifier: QJycKsmv3PkwR48stX5bZcE8j9xenXbuUvZXvcm20zg=
Subject key identifier: 8D:7B:2E:25:53:B7:CD:DA:04:83:ED:55:85:CC:3E:AD:DB:AC:A4:FE
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584E0435D63DB4D058BF3D3A7F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4dda0ae1-52d8-359e-8a1f-19dbbac7e048.roa
Signing time: Sun 31 May 2026 13:00:10 +0000
ROA not before: Sun 31 May 2026 13:00:10 +0000
ROA not after: Sat 29 Aug 2026 13:00:10 +0000
asID: 267846
IP address blocks: 154.41.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:04:35:d6:3d:b4:d0:58:bf:3d:3a:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: May 31 13:00:10 2026 GMT
Not After : Aug 29 13:00:10 2026 GMT
Subject: CN=61d6f5a3-88fb-4fcc-9ed6-ae248e368b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:6c:43:60:80:33:3f:17:d4:9d:3a:69:dd:
3f:e9:bc:a1:a4:57:25:18:b8:99:21:5a:09:9b:c4:
db:5e:8c:76:d1:d0:6b:a8:a4:38:6e:84:f8:4a:6a:
3a:4e:cc:2c:76:68:0b:aa:15:cf:94:5e:02:16:d0:
15:a5:07:ff:17:0d:ca:47:8c:40:b9:54:1e:87:2b:
fe:df:0f:72:d1:19:96:07:c9:3c:1f:d0:71:36:72:
90:16:d7:39:93:e3:23:5f:75:10:a9:88:02:74:25:
be:64:d3:af:6a:bc:34:34:f4:47:41:65:12:3c:56:
d2:3b:60:9a:0b:b9:66:d1:43:a2:a2:98:9e:05:f1:
ba:9d:42:6c:e5:69:57:1b:18:d4:1a:84:60:1e:02:
76:30:20:a4:f9:b8:67:73:50:d9:38:70:53:c4:f3:
50:51:12:d8:58:e3:72:e9:00:d3:13:59:af:81:84:
66:8e:66:82:67:94:63:7d:cc:17:e9:8d:4c:2b:98:
b7:98:02:af:2e:69:e1:7a:a7:aa:b0:13:8b:f8:c4:
cf:ab:1d:68:e2:fe:6b:48:e5:2d:a4:af:46:27:a2:
ee:80:4c:57:bf:30:cf:fb:ba:94:34:31:e6:6e:d6:
59:85:c5:a5:d9:81:79:4c:b3:dd:58:21:18:36:5c:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7B:2E:25:53:B7:CD:DA:04:83:ED:55:85:CC:3E:AD:DB:AC:A4:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4dda0ae1-52d8-359e-8a1f-19dbbac7e048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
154.41.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:01:5c:07:a7:ae:0e:1d:6f:72:81:99:41:55:15:4b:f6:13:
14:9e:fa:72:2d:f1:89:c9:2f:23:b4:a8:ec:b2:df:74:49:04:
d3:c5:53:79:16:d0:ca:a0:32:24:89:2c:82:cb:b2:21:95:c4:
44:80:f0:cd:92:43:2e:0c:d8:57:a7:49:ab:53:09:dc:5c:72:
18:65:4b:81:f2:f9:4e:b1:74:f9:7a:e2:36:38:f3:45:75:6e:
1e:1a:12:78:fc:57:ef:2a:fa:3b:ec:4e:dc:29:0a:4a:31:c5:
67:55:44:10:3f:70:01:46:ef:66:36:0e:88:17:f1:db:dc:6d:
18:a2:80:1e:d0:25:bf:22:7f:d1:fe:37:7b:7a:b7:98:06:fd:
c8:ba:14:4f:27:03:cc:0b:cd:b6:cb:35:18:7a:07:87:0a:83:
0f:ba:83:ff:94:16:bf:0e:ee:56:18:d1:1c:d4:95:b4:6d:08:
46:21:1e:2a:28:1f:38:6a:29:c0:7a:6e:46:5c:f0:a9:d4:2d:
bb:e1:56:42:4f:61:b6:35:67:0c:ef:c5:00:c0:ff:11:6f:bc:
f2:7a:6b:91:0d:44:a5:0c:38:9d:42:c6:81:1f:bc:d2:2e:ea:
26:02:07:73:f2:9c:00:1d:01:18:e8:98:ed:d3:50:0c:89:62:
27:3e:39:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:35:43 2026 by rpki-client