
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa
File: 4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa (raw, json)
Hash identifier: K4gcBJWqZKGKH1lqPx5zjJeJAI63shZDD7naru2vJsw=
Subject key identifier: 07:BE:E8:FB:7B:73:45:5A:5F:74:87:18:07:A5:0F:E8:0D:1D:61:7C
Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Certificate serial: 010D0C9F4328584CB6B71FF8937DED9F5176B700
Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa
Signing time: Sun 01 Feb 2026 02:00:32 +0000
ROA not before: Sun 01 Feb 2026 02:00:32 +0000
ROA not after: Sat 02 May 2026 01:00:32 +0000
asID: 1403
IP address blocks: 204.48.0.0/22 maxlen: 24
204.48.4.0/24 maxlen: 24
204.48.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b6:b7:1f:f8:93:7d:ed:9f:51:76:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Validity
Not Before: Feb 1 02:00:32 2026 GMT
Not After : May 2 01:00:32 2026 GMT
Subject: CN=8ed816be-71d5-43b6-86eb-b71f1a0d5bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:bb:4b:af:1d:03:0b:a7:74:c1:8f:51:9d:
3a:46:d3:47:fe:ce:1b:96:65:1e:0e:6c:bd:d9:27:
2f:02:a6:7b:ae:c0:6d:b9:4e:3f:7b:41:66:d5:c9:
e6:49:b9:72:c8:63:9b:cd:53:5e:a9:83:96:0e:98:
c0:4d:e0:51:3b:35:55:96:3f:f4:61:86:52:46:9a:
b7:ba:53:e5:a4:f1:d2:d5:b6:bb:6e:a2:16:b1:3e:
ef:c5:1e:2f:1a:c2:2b:03:f0:14:e9:b4:de:65:70:
e8:80:71:39:61:97:e4:81:3a:ad:f5:7e:ee:e9:a5:
da:c5:a2:75:21:a8:49:78:c8:f4:7f:12:4a:9b:50:
14:3a:4d:37:c4:fb:10:32:f1:15:8a:ff:54:e5:cc:
64:c0:39:c4:60:10:38:97:93:22:55:84:27:9c:a0:
c8:af:71:b8:e2:0d:55:d0:7a:cf:47:4c:65:b2:a0:
7c:6f:7a:b1:1a:ca:6b:56:d7:18:b5:1c:3b:51:e6:
10:1a:9e:e4:e4:38:ac:d8:c5:a7:91:56:f6:7e:d9:
4f:5c:e4:23:3e:dd:a4:a3:5f:d1:30:b7:51:75:c3:
d9:5e:89:07:ec:5d:e4:97:41:f8:fe:54:03:5c:2b:
0e:84:4d:83:da:bc:92:52:c8:4f:24:56:15:61:39:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BE:E8:FB:7B:73:45:5A:5F:74:87:18:07:A5:0F:E8:0D:1D:61:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
X509v3 Authority Key Identifier:
keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
sbgp-ipAddrBlock: critical
IPv4:
204.48.0.0-204.48.4.255
204.48.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ed:23:2e:25:0c:da:32:00:a9:c4:92:e2:28:ca:69:93:62:
4e:94:c5:2e:1a:29:0e:21:91:0e:d0:19:19:51:e8:53:14:d7:
43:4d:24:56:2e:cd:5f:6c:fc:65:fd:d5:1d:72:9a:d8:a6:ba:
1e:ad:67:ac:54:ca:a7:2e:98:38:85:b2:50:60:06:ec:46:f1:
68:f8:88:1d:91:d6:d0:f2:a2:e1:52:94:4b:d1:f4:a9:1b:5b:
8c:53:9d:e4:73:1f:bc:2b:b8:6a:f5:21:91:22:75:1c:1c:59:
fa:0e:b5:0d:70:ba:74:b1:e1:5c:a1:bd:c1:bd:43:c0:76:0a:
7e:41:8c:1d:fb:2c:99:b6:15:61:ef:83:d7:c2:72:a3:30:42:
43:c6:cf:09:52:a9:be:c3:27:f2:26:4f:dc:f9:fd:04:7d:25:
fa:3b:5d:af:0a:94:e0:5b:6e:56:9a:ae:d2:93:39:04:64:a8:
d3:9a:d4:7d:34:2b:63:70:05:7b:72:90:a0:05:09:9b:07:37:
ca:b4:bc:e6:37:49:64:e2:b9:38:bc:0f:38:2c:8b:fd:57:56:
ad:0c:d9:ad:81:08:2a:4e:44:00:45:fa:78:5a:81:0c:2a:d6:
bf:98:16:92:08:d4:20:95:96:46:d5:5f:97:d5:2e:64:ce:0d:
92:96:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 12:40:27 2026 by rpki-client