
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa
File: 5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa (raw, json)
Hash identifier: CfJ3fOPaICmQVOWkbVLdleXw2LRG5TQzyo7hT05MGQk=
Subject key identifier: F9:D1:62:E9:C6:D2:AE:CE:F7:84:06:3B:24:2C:9D:12:A9:0C:65:4F
Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial: 010D0C9F4328584DEDE09868F5EA0DC05139A500
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa
Signing time: Sat 23 May 2026 13:00:31 +0000
ROA not before: Sat 23 May 2026 13:00:31 +0000
ROA not after: Fri 21 Aug 2026 13:00:31 +0000
asID: 36298
IP address blocks: 209.166.148.0/24 maxlen: 24
209.166.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ed:e0:98:68:f5:ea:0d:c0:51:39:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
Validity
Not Before: May 23 13:00:31 2026 GMT
Not After : Aug 21 13:00:31 2026 GMT
Subject: CN=1123b5bf-49d2-493b-bc92-98be65e7ac1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6d:fa:5c:09:a4:83:0f:5b:b5:dc:c6:90:e4:
0f:1c:9c:aa:1c:b3:45:ab:9b:29:6c:d0:01:53:0e:
19:63:83:bd:dc:60:67:03:5a:16:27:71:09:95:c6:
9a:3e:b3:ee:5f:7a:5e:37:d4:fc:d0:f8:b3:19:98:
c0:c5:ea:d9:d3:cc:53:a2:cb:7f:ab:52:0d:71:27:
33:bc:cf:dc:12:97:20:a0:59:1f:a7:93:85:d4:c7:
ca:c4:3e:18:22:20:b3:16:c6:ec:18:06:97:3e:fb:
64:3a:24:d9:7a:69:82:ad:11:35:3a:72:a9:7a:71:
67:9b:c5:49:6b:4b:94:b3:f7:e5:fe:de:76:39:c4:
c2:7f:f4:74:a4:4f:bd:ef:8f:73:ad:85:45:fc:b6:
da:f6:b4:67:1b:49:28:e6:60:02:2a:7b:12:52:a5:
f7:ef:3a:95:a8:b4:b9:13:22:4b:af:37:72:8b:a2:
a8:32:59:c5:1d:b2:d1:a0:52:60:bd:07:1e:bd:c8:
f0:2b:43:ec:bb:69:f1:d7:d2:93:2c:1f:23:11:0b:
16:47:99:c7:34:7c:8e:e4:2d:f9:c1:95:be:20:b5:
1f:8c:65:4f:21:1f:63:b1:11:86:09:6f:14:13:48:
73:cb:dd:c0:29:28:b7:9d:17:bb:e9:62:41:1a:18:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D1:62:E9:C6:D2:AE:CE:F7:84:06:3B:24:2C:9D:12:A9:0C:65:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
X509v3 Authority Key Identifier:
keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
sbgp-ipAddrBlock: critical
IPv4:
209.166.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:28:86:1c:bc:a9:12:0d:97:5c:7f:94:47:48:6c:69:25:0f:
b3:84:a0:75:c2:69:45:59:1c:9a:44:ed:8b:8a:5a:4a:b8:b9:
39:36:4f:ba:47:21:64:cf:7a:8c:f2:fa:5c:81:30:d4:53:0d:
84:b9:40:a5:29:fa:ca:fd:2e:cf:27:93:14:39:f2:1d:4a:88:
ea:00:86:2f:eb:00:3c:f7:64:07:ab:3d:16:97:45:d5:cd:f8:
c2:f6:35:8b:c4:c0:90:a3:ec:00:03:3c:5d:68:2a:12:d6:b9:
2a:d2:9c:5a:98:1c:9d:d5:5d:0c:58:3b:a8:db:57:aa:c6:fd:
06:bb:3b:41:06:7a:d3:6a:ac:be:c6:b7:cc:b4:41:ab:34:8e:
18:3d:1f:ac:82:ca:3b:9f:6d:ac:2e:1a:c7:7d:e4:c4:79:67:
10:9d:3d:51:83:28:c0:b1:d1:f5:9b:5a:fc:2b:c5:f4:81:87:
13:ce:07:4f:c2:d8:ff:c7:0a:84:fd:66:de:5f:35:a8:11:d2:
01:2f:71:8c:e6:e8:41:10:ef:d9:9c:f5:62:f6:18:83:5d:10:
a8:6f:40:29:78:80:33:56:1e:48:cd:5a:76:f1:8e:58:9e:d9:
2c:67:0a:8d:24:e1:26:a3:1a:ff:92:16:44:cd:1f:28:e8:27:
db:61:e8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:41:44 2026 by rpki-client