
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ce5331b6-f6d2-391c-aba6-2d079e20150c.roa
File: ce5331b6-f6d2-391c-aba6-2d079e20150c.roa (raw, json)
Hash identifier: ZI5yzyy5kjlt2YfRj2zgAxOeq2wwQTmUllbmuyXy/p4=
Subject key identifier: 90:B4:12:98:EB:1E:CC:34:E7:30:9C:8B:BD:01:C9:CA:2B:B5:4D:33
Certificate issuer: /CN=58da445d-8c6c-4299-9e2c-45c75e8a6425
Certificate serial: 010D0C9F4328584EA8EC4BC10FD0D79F957A7000
Authority key identifier: 9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ce5331b6-f6d2-391c-aba6-2d079e20150c.roa
Signing time: Wed 29 Jul 2026 13:00:12 +0000
ROA not before: Wed 29 Jul 2026 13:00:12 +0000
ROA not after: Tue 27 Oct 2026 13:00:12 +0000
asID: 14312
IP address blocks: 204.16.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a8:ec:4b:c1:0f:d0:d7:9f:95:7a:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58da445d-8c6c-4299-9e2c-45c75e8a6425
Validity
Not Before: Jul 29 13:00:12 2026 GMT
Not After : Oct 27 13:00:12 2026 GMT
Subject: CN=7a2ec80c-9d94-458e-b3d5-73ba74c892ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:f3:e2:5e:21:78:d1:9b:44:38:21:90:2a:
87:f9:88:56:cc:bc:f7:e1:b3:6c:99:45:ba:27:ee:
98:38:c5:1e:87:36:f3:36:bb:81:1d:06:1b:17:28:
14:77:19:57:02:ed:a7:92:c0:d6:81:ee:84:34:4d:
98:2a:af:ef:f6:1a:63:91:42:cf:00:ee:b6:97:7a:
0a:49:d8:e1:45:9d:ed:d5:1f:b9:d0:f7:b9:97:99:
64:2b:ac:a7:38:46:26:de:30:eb:ef:9b:31:c9:3f:
72:60:38:e4:40:90:10:a2:8e:d2:e7:5e:b0:fe:6d:
08:0e:4c:ac:22:b5:07:40:2c:c3:b5:7f:c8:1b:4f:
d9:6c:7e:01:d7:d8:d6:b8:90:6f:7a:be:f4:37:c0:
99:36:7c:ba:70:54:9d:88:f4:99:60:ec:99:4e:5e:
95:2c:d6:14:f2:62:83:01:6a:48:3c:6f:f2:de:16:
68:66:13:65:16:33:d6:0e:a0:3b:c9:1b:cf:6d:69:
af:fb:15:e8:59:a1:5c:cb:d5:19:62:75:77:6c:ac:
a4:48:cc:67:b4:cd:16:5c:65:ca:19:e4:d9:1a:8d:
da:53:82:d5:2f:31:12:ae:11:00:28:ef:45:e7:f5:
3f:5e:63:11:bd:b3:68:20:c7:91:75:06:2e:09:62:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:12:98:EB:1E:CC:34:E7:30:9C:8B:BD:01:C9:CA:2B:B5:4D:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ce5331b6-f6d2-391c-aba6-2d079e20150c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl
X509v3 Authority Key Identifier:
keyid:9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer
sbgp-ipAddrBlock: critical
IPv4:
204.16.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:b6:a5:74:01:3c:6f:3e:2e:0f:da:8c:19:a9:f8:27:3c:68:
de:bb:4e:51:a4:62:e0:71:93:02:7e:27:bc:e3:1e:01:31:4f:
17:04:fb:cc:7a:10:ee:be:23:bc:44:70:0a:d1:63:19:b2:1d:
b9:de:41:06:67:7a:3c:ee:66:2d:6d:57:e2:41:c3:bf:63:29:
f6:b8:97:67:4f:4a:f6:2e:67:c0:d2:56:8b:cc:2d:91:04:42:
0c:9d:41:90:0d:fb:44:59:71:45:6d:cf:10:fb:a9:8a:a5:a5:
09:92:6f:a2:80:f0:d6:21:43:65:31:62:03:7b:85:b4:f9:af:
85:00:da:7c:20:8d:e5:68:4f:e8:d0:96:bd:62:dd:1b:27:62:
88:53:d9:24:a0:30:dd:0b:c4:f0:f6:4c:9c:7e:30:c9:75:1f:
f2:46:76:5c:ab:e3:83:02:5c:71:f1:94:27:71:6f:c0:5f:8e:
5a:99:5e:65:df:10:f2:9f:3d:52:60:5d:25:95:06:c8:31:7b:
40:10:dc:1f:b3:2b:b9:2c:32:be:f0:bb:a9:e6:45:63:08:1c:
62:08:53:67:83:1e:e9:7c:d2:6c:57:15:74:0f:9b:3b:d8:5c:
e8:a1:cd:f6:75:53:55:0b:75:51:30:dd:f9:04:e3:3f:18:dc:
72:89:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:51:14 2026 by rpki-client