
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ddaf04d4-9457-3b81-8980-050f77953123.roa
File: ddaf04d4-9457-3b81-8980-050f77953123.roa (raw, json)
Hash identifier: gThYRpaTkEreospCkQCEvI+jrMLdmkp2SqMCo+mMSMw=
Subject key identifier: 41:57:CD:FB:0A:0C:E1:1A:5B:14:E1:ED:4A:2F:8B:47:EA:6E:60:C5
Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial: 010D0C9F4328584D55BCB5C06D43C3B0F9E8C400
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ddaf04d4-9457-3b81-8980-050f77953123.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 16509
IP address blocks: 131.229.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:b5:c0:6d:43:c3:b0:f9:e8:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=50581605-66aa-4eb0-84ef-56256820c7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2f:62:da:1a:b2:aa:d9:94:0e:d5:22:82:cd:
a1:89:6f:b1:70:99:fc:3e:33:d1:26:c6:53:ce:8f:
7e:96:03:95:5c:07:f0:de:4f:6d:3f:21:31:97:f5:
18:65:2e:be:bb:9d:16:07:43:83:8e:9d:9e:53:24:
79:34:15:1e:2e:05:02:fa:9d:78:d9:78:61:a1:9c:
70:14:fa:57:15:de:88:30:6a:27:4d:88:bf:f5:a3:
8a:92:7e:27:42:87:a7:79:b9:6e:11:6e:70:67:d2:
76:d5:76:f3:0e:60:34:13:1d:e7:37:be:38:2f:29:
c3:e8:a1:9b:60:9d:e4:20:7a:01:75:0a:ce:c7:2e:
6c:8c:72:42:5e:06:51:6f:3f:8e:25:d9:f1:c0:7e:
2a:ef:11:1e:d7:16:6e:fc:68:b8:71:e9:fd:bd:7d:
77:df:5b:f3:9d:5c:ba:e4:80:10:65:69:67:d1:b4:
24:0d:ec:18:19:b7:cc:e8:29:ef:cf:e9:24:12:45:
25:4c:a3:44:1b:54:87:e9:f8:bf:2d:33:77:26:be:
67:b4:c3:03:99:38:e8:b5:c1:a9:42:99:05:51:34:
02:66:5c:43:ec:70:80:ba:8f:3d:65:12:73:10:32:
54:51:77:67:44:0c:53:cf:36:fb:e8:41:eb:07:49:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:CD:FB:0A:0C:E1:1A:5B:14:E1:ED:4A:2F:8B:47:EA:6E:60:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ddaf04d4-9457-3b81-8980-050f77953123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
X509v3 Authority Key Identifier:
keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
sbgp-ipAddrBlock: critical
IPv4:
131.229.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:01:ff:74:c9:ef:09:64:67:f1:57:82:08:98:2b:1c:a4:6a:
3d:a1:08:ad:e6:c2:e3:8e:65:ed:7a:2c:03:d6:e7:ae:6c:dd:
08:1d:8e:99:b8:e7:91:fd:ed:4e:ce:ae:cf:91:08:7c:99:06:
af:1f:b7:32:e1:80:b0:60:64:2f:6a:ac:42:37:21:3e:b3:08:
d6:30:5d:a0:3a:1c:9d:0d:84:90:59:67:33:0b:56:3c:37:7b:
55:4c:22:a3:aa:a4:90:9f:b3:cb:1f:94:75:10:93:22:2d:6d:
96:79:e4:a5:8f:bf:64:30:93:bd:50:32:09:5d:d4:1a:08:a5:
48:e1:0f:95:dd:1f:73:43:98:13:5b:13:10:d3:f4:12:22:34:
de:55:71:48:1a:77:3d:f0:2d:db:dc:3a:de:47:a6:21:f0:69:
32:67:93:49:8a:60:61:82:ac:86:de:16:2c:7b:9c:f1:44:1d:
a8:a1:4e:45:47:1a:05:6e:08:37:bb:a5:13:f4:2a:ec:00:a0:
a9:ec:76:86:3a:b2:c4:a5:dc:e3:1b:16:b7:95:b2:4a:0a:f0:
27:70:c8:4b:26:3b:34:98:ef:45:a2:32:d4:ec:eb:ef:3c:46:
3c:2e:6c:c7:dd:6c:14:d4:4d:a1:4b:69:f4:d6:ce:03:1e:1a:
e7:fe:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:18:12 2026 by rpki-client