
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/628c5d61-8309-334d-aade-3672888d9fa7.roa
File: 628c5d61-8309-334d-aade-3672888d9fa7.roa (raw, json)
Hash identifier: 5KnnOs5IvadHkD8S/yvw5GAVGIuio40izo1ZwtT1jjc=
Subject key identifier: 5D:C8:BC:F8:5D:D8:5F:F1:EC:0D:09:D6:05:2E:92:2D:30:54:9B:F7
Certificate issuer: /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
Certificate serial: 010D0C9F4328584DD4C08046B708D31F5037D100
Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/628c5d61-8309-334d-aade-3672888d9fa7.roa
Signing time: Thu 14 May 2026 13:00:31 +0000
ROA not before: Thu 14 May 2026 13:00:31 +0000
ROA not after: Wed 12 Aug 2026 13:00:31 +0000
asID: 16509
IP address blocks: 185.224.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 24 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d4:c0:80:46:b7:08:d3:1f:50:37:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
Validity
Not Before: May 14 13:00:31 2026 GMT
Not After : Aug 12 13:00:31 2026 GMT
Subject: CN=4731caec-ba2f-4e65-95b9-c33a40516935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:84:c3:24:64:55:b8:13:83:1c:82:8d:c9:
e3:6e:ac:29:56:62:c1:59:6a:3f:7d:61:bf:6f:09:
ce:4f:3a:0d:da:c9:aa:d1:67:bf:44:d6:3b:da:8a:
ac:af:f3:ab:21:5f:b4:8a:e0:61:c7:8d:64:49:a8:
bc:1e:ff:bd:6e:73:b6:31:3a:31:6d:d3:2d:86:02:
8e:79:6d:0e:1e:02:d2:9c:3f:c3:0c:a2:1e:3e:7f:
3d:71:2f:16:30:b8:60:ef:d5:54:7a:e3:69:90:9e:
9d:7b:24:61:26:06:c2:17:61:c9:7c:99:a4:c6:6c:
87:70:5d:47:98:9e:2f:aa:2c:d8:35:16:13:ac:92:
4b:71:24:b1:f9:80:55:52:03:aa:2e:59:76:8d:f1:
d4:48:b0:58:de:45:5a:73:0b:b4:21:9f:90:86:a3:
90:06:91:0b:f5:7c:5c:00:e0:f8:b8:a1:d6:a1:40:
99:1f:aa:a3:cc:02:c9:d6:de:73:73:f8:5d:0b:f0:
b1:66:a7:09:2d:b9:cb:92:41:e7:e7:f9:0c:89:b9:
76:cf:63:a6:5a:2e:00:27:9f:a4:da:bf:da:29:0e:
8d:ef:fb:02:92:f7:24:11:c0:d9:b7:d8:21:24:12:
98:61:b2:f2:6e:a3:a3:80:b4:0f:16:6c:58:42:10:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:BC:F8:5D:D8:5F:F1:EC:0D:09:D6:05:2E:92:2D:30:54:9B:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/628c5d61-8309-334d-aade-3672888d9fa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl
X509v3 Authority Key Identifier:
keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
sbgp-ipAddrBlock: critical
IPv4:
185.224.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:fc:d3:b3:0b:fa:a4:d0:06:70:da:58:b0:e6:c3:5e:18:a9:
ef:04:34:be:7c:37:a0:f9:c8:ff:12:51:49:73:5f:73:ff:b9:
38:28:b0:b0:20:4f:c7:2e:0c:d9:71:76:ac:e3:6c:ca:31:03:
a1:c0:06:05:ea:13:75:4c:ee:20:7f:3d:97:ed:c8:44:30:ed:
2f:7d:1a:3b:c9:1b:01:b9:02:d4:a3:b6:37:c9:5c:7a:01:77:
ed:d4:fe:32:3f:d8:93:1c:a2:8d:8b:3b:8e:cf:13:1a:c7:ba:
e9:dd:38:98:49:ce:29:4f:11:b8:1d:30:71:b6:52:7e:2d:6f:
47:20:7b:83:e9:54:b7:a0:95:e8:03:bd:b0:f2:fb:6d:d0:b9:
7c:bf:e7:04:97:47:65:59:0f:73:03:dd:e0:c9:6f:e6:22:5d:
f2:dd:57:e2:74:39:08:eb:00:07:e2:84:d7:1d:96:11:6d:fd:
cb:bc:de:77:9a:a5:0d:0e:fb:af:e9:ca:2e:cb:f3:11:3e:ca:
64:f1:78:74:4a:97:05:3a:36:85:be:a4:f3:9a:0e:d2:95:0d:
2d:4e:80:e6:57:85:64:8f:ba:9b:a0:3a:6e:35:87:04:8a:01:
ab:88:6c:de:08:14:44:cf:d1:03:47:fb:19:2e:14:f3:fb:a1:
65:b9:33:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:55:44 2026 by rpki-client