
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa
File: cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa (raw, json)
Hash identifier: ofYv0ABuLrnyCFI4jQwoYRX5BOz9FN4sUpFCvtcU47s=
Subject key identifier: 6D:E7:CA:6F:25:40:EA:20:5E:1B:1E:C4:EC:AA:E3:A1:1E:F4:E3:3E
Certificate issuer: /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial: 010D0C9F4328584DA97AB915A28DA27421BCBF00
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa
Signing time: Wed 29 Apr 2026 01:00:23 +0000
ROA not before: Wed 29 Apr 2026 01:00:23 +0000
ROA not after: Tue 28 Jul 2026 01:00:23 +0000
asID: 393336
IP address blocks: 169.197.160.0/22 maxlen: 22
170.39.172.0/22 maxlen: 22
208.65.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 02 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a9:7a:b9:15:a2:8d:a2:74:21:bc:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
Validity
Not Before: Apr 29 01:00:23 2026 GMT
Not After : Jul 28 01:00:23 2026 GMT
Subject: CN=7ef13a38-ad32-4b9a-8d74-1d5f202a18a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1f:86:d5:ec:e3:c8:57:04:23:a5:df:b9:68:
d9:f7:9c:7e:79:69:20:7d:95:7b:b1:11:3a:27:32:
ca:94:a7:1e:02:68:29:5c:cb:2b:52:cd:d0:d8:4f:
0e:22:66:8c:b0:8c:ae:37:1e:15:80:a8:33:84:26:
de:16:d0:51:8c:5c:01:b3:b5:e8:4b:15:ea:b4:8a:
23:e4:42:83:3e:f2:a9:9e:ab:33:c7:af:9b:76:da:
c8:fe:02:d4:89:64:9f:8e:fc:52:b8:8d:2c:b4:ac:
25:90:64:37:d9:dc:fc:d4:f0:c3:13:0f:c7:34:ab:
f8:16:f8:ee:f3:e2:a8:fb:86:85:06:7b:4f:16:6f:
84:8b:de:33:32:ca:01:44:e6:20:31:4f:c5:e7:61:
70:de:7b:60:05:0f:91:3e:e3:db:ef:1a:58:15:4a:
42:20:e0:d8:88:28:ba:a9:1c:4d:84:fa:6b:d2:9b:
12:ba:c9:95:6b:34:2b:50:84:68:8d:dd:81:6c:74:
2e:62:bc:99:a7:44:a1:66:5d:12:88:7f:bb:9c:f5:
d6:36:53:71:3f:5b:bf:bb:00:18:de:10:b2:b4:92:
c3:b2:ee:52:40:8e:a2:54:d8:f1:8b:6f:bf:18:df:
3b:df:19:7b:2c:87:64:18:6c:22:9f:26:7b:85:14:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E7:CA:6F:25:40:EA:20:5E:1B:1E:C4:EC:AA:E3:A1:1E:F4:E3:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
X509v3 Authority Key Identifier:
keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
sbgp-ipAddrBlock: critical
IPv4:
169.197.160.0/22
170.39.172.0/22
208.65.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:e2:c7:1c:fb:eb:a5:d9:22:36:32:ad:c3:5d:cf:0d:2c:34:
80:20:20:77:fc:35:7e:07:b9:a0:e0:80:dc:8b:d7:e5:00:23:
7f:20:71:c7:27:1e:ce:99:d3:fe:c0:9b:fa:b4:ea:ad:fc:53:
a6:80:bf:f1:44:8a:10:e2:c1:66:42:60:b3:19:89:f6:c1:25:
a1:c7:35:07:ac:07:6f:df:78:1e:0f:10:0f:ec:39:5b:7d:80:
a0:fa:ce:7d:4b:be:47:f8:e5:33:bc:a8:5e:b9:9a:dd:05:cc:
2e:63:35:0b:1b:03:35:b3:d0:d4:97:be:94:af:c7:e9:b8:66:
e7:52:a0:a3:1c:fc:f4:0f:be:45:8b:d4:8c:3b:c6:4a:4e:10:
19:73:76:e5:89:1e:24:c8:53:5b:bc:3a:35:ce:a7:a7:73:e4:
f3:97:9c:c9:05:0b:1a:90:38:48:3b:9b:19:5b:31:b6:54:2d:
f8:fa:a4:86:82:83:90:37:a0:8a:9f:f1:2d:6f:43:a1:6a:85:
94:ce:e5:72:ab:7f:8a:69:9a:16:34:39:07:10:5e:aa:e4:e6:
2e:40:bc:85:e5:46:58:88:5d:c3:fd:5a:a9:6d:67:40:05:ce:
07:d2:e7:2a:6d:67:d3:b7:54:81:3b:67:b1:2b:ac:4d:17:79:
03:16:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 12:54:56 2026 by rpki-client