
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa
File: b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa (raw, json)
Hash identifier: KxwoOW2r9TzJA2rQI5cYy+8gjWCjqn9WHQacGAFxB8o=
Subject key identifier: C5:6F:32:E1:4C:12:DB:D5:FF:C2:6E:47:59:EC:5C:9A:BB:D3:4C:18
Certificate issuer: /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial: 010D0C9F4328584D4CD96ED34965FF641B401700
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa
Signing time: Thu 26 Mar 2026 20:41:07 +0000
ROA not before: Thu 26 Mar 2026 20:41:07 +0000
ROA not after: Wed 24 Jun 2026 20:41:07 +0000
asID: 394352
IP address blocks: 104.224.32.0/22 maxlen: 22
104.224.32.0/23 maxlen: 23
104.224.32.0/24 maxlen: 24
104.224.33.0/24 maxlen: 24
104.224.34.0/23 maxlen: 23
104.224.34.0/24 maxlen: 24
104.224.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 16 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4c:d9:6e:d3:49:65:ff:64:1b:40:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Validity
Not Before: Mar 26 20:41:07 2026 GMT
Not After : Jun 24 20:41:07 2026 GMT
Subject: CN=8abe0803-dc78-44de-ab76-6611a2c58606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:78:3a:9e:a1:6f:8a:76:bf:e3:54:85:59:
8c:e4:8c:15:44:44:1c:3b:d7:96:d2:a6:9e:c5:bb:
87:43:db:5c:e7:f3:b0:c4:d3:8b:75:55:f7:97:8c:
f2:35:a7:55:0d:3c:54:ad:82:c9:63:f1:5f:3f:7f:
7d:a7:4e:31:df:0f:0a:86:29:e8:04:25:98:e1:a8:
a3:60:a3:68:a3:4d:a9:11:8f:2b:58:68:03:1a:54:
56:13:ee:e3:cc:a0:a2:ca:6c:ad:68:6b:a7:32:9d:
d0:b8:ff:f4:78:7b:28:6b:52:18:36:0c:fa:12:9b:
dc:3e:5b:10:3b:18:7a:c0:2d:d5:62:03:ac:a0:24:
1a:1c:e7:4f:3a:49:59:02:d5:3b:40:64:2e:69:57:
bc:17:cc:65:2e:72:d8:43:cc:01:12:71:ce:35:4a:
bc:98:0d:5e:c9:16:15:62:51:08:d3:b5:1f:2a:3a:
3d:9d:22:74:2d:7a:40:73:01:7a:cd:6e:34:9e:76:
e0:80:26:6c:89:5f:90:fa:2a:62:c4:9b:67:d5:80:
1e:dc:d2:1b:30:24:d7:3a:e0:9f:33:2e:1c:c3:79:
75:29:2b:1d:f8:36:30:3e:54:e1:2f:bf:34:15:bb:
cb:33:21:1e:98:f8:a4:fd:2d:5e:da:7e:54:e5:b0:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6F:32:E1:4C:12:DB:D5:FF:C2:6E:47:59:EC:5C:9A:BB:D3:4C:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
X509v3 Authority Key Identifier:
keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
sbgp-ipAddrBlock: critical
IPv4:
104.224.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:65:75:6e:1f:81:7f:80:74:1b:6f:78:c8:db:03:17:81:e5:
7a:9b:50:63:08:a3:97:d0:01:85:eb:0c:62:ad:e2:74:36:d4:
43:91:5e:ec:bd:7f:88:9a:18:ef:a2:00:b5:ec:f2:c6:78:19:
61:61:72:39:29:cc:34:df:4d:8d:d4:2a:94:57:ff:28:55:a4:
a7:0c:f5:ff:31:59:23:8b:10:04:b3:a7:a2:70:9d:9d:33:89:
44:24:00:7b:70:ac:44:7b:83:ed:81:25:83:93:78:37:72:41:
55:ee:82:80:2c:35:f3:6a:69:7f:2c:3f:fb:d4:f3:86:57:92:
4c:be:5d:56:fe:54:d4:73:2d:b3:c6:67:d8:f2:26:69:43:87:
3c:77:01:a0:45:b2:10:cf:a0:6d:9c:48:b1:77:07:85:23:25:
5a:06:f2:59:db:ac:93:25:9c:86:e7:1f:ad:b7:82:fb:5e:d5:
df:7c:6e:f9:7e:9c:fb:ea:86:0d:76:2e:fc:fd:f0:2e:fa:f8:
32:25:e7:70:0b:e3:65:33:a3:9c:5d:2e:cd:8b:eb:aa:b5:c2:
7d:0d:62:ea:bb:a0:93:fa:4a:28:04:41:c7:90:76:08:71:be:
52:e9:14:85:24:af:11:5f:41:49:95:f2:b3:ad:dd:7e:2f:d4:
c8:b7:d2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 16:00:47 2026 by rpki-client