
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5255ff42-ae4e-383b-b219-da19441621d2.roa
File: 5255ff42-ae4e-383b-b219-da19441621d2.roa (raw, json)
Hash identifier: COEVjXJ8EDyLP5SCqGYL5HyaOLE7yEw+pZQsxd2DBjc=
Subject key identifier: DD:88:DE:15:7C:59:4E:69:8A:43:46:77:CF:DA:76:77:2D:19:89:56
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F4328584C76816F3E436B267DC82FC240
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5255ff42-ae4e-383b-b219-da19441621d2.roa
Signing time: Fri 09 Jan 2026 02:00:31 +0000
ROA not before: Fri 09 Jan 2026 02:00:31 +0000
ROA not after: Thu 09 Apr 2026 01:00:31 +0000
asID: 54994
IP address blocks: 205.252.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:76:81:6f:3e:43:6b:26:7d:c8:2f:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Jan 9 02:00:31 2026 GMT
Not After : Apr 9 01:00:31 2026 GMT
Subject: CN=21ee550d-145f-492a-b112-4d42da8acf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:56:80:30:07:df:83:1a:1d:fc:53:41:9c:
c2:ab:00:0f:9e:81:99:f5:f4:be:51:6f:53:c6:23:
90:c2:4b:8d:96:94:65:cd:f5:4a:59:83:d8:9e:c5:
2d:00:9b:9f:cd:1a:92:eb:b8:ab:d9:b3:02:ed:d4:
65:04:67:da:47:ff:fb:74:2c:e0:52:bc:46:ff:31:
81:f0:5b:ae:e3:aa:0d:37:f0:06:a2:aa:ea:f3:eb:
bd:02:1b:aa:11:02:85:eb:ec:33:70:b2:3d:f7:30:
64:90:8b:56:75:bf:ab:bb:43:a1:20:7b:94:68:5a:
ef:ae:8c:b9:17:f8:7c:f3:bc:46:19:82:e1:a1:b3:
b4:30:72:54:e1:ec:47:f5:89:ac:73:a2:db:07:43:
63:1f:05:7a:de:54:27:58:c5:78:a2:72:00:c8:2d:
aa:65:2f:a0:61:c0:7e:18:1a:8d:57:cc:f9:3c:24:
53:7e:c2:2c:19:41:03:8c:98:68:6b:bd:ab:5c:91:
69:85:d8:e3:57:f6:b7:42:ae:7f:6d:74:78:5c:62:
1f:04:61:9c:70:ec:91:71:65:a6:a9:50:28:47:fb:
58:74:34:8b:0b:81:20:19:19:a7:64:d1:a3:88:91:
39:d4:90:2b:04:2e:a8:a5:18:f8:b8:da:fd:1a:64:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:88:DE:15:7C:59:4E:69:8A:43:46:77:CF:DA:76:77:2D:19:89:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5255ff42-ae4e-383b-b219-da19441621d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.252.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:b9:9f:69:61:6d:90:1d:dc:4f:c3:02:c5:58:96:db:fc:8e:
48:fa:5d:44:dd:13:14:05:e3:f6:f6:01:87:28:42:62:43:27:
2f:b4:53:7b:bb:ac:e8:56:e2:1e:02:28:5e:0a:2c:f9:59:21:
3f:2c:de:fb:8a:ef:6b:1c:b4:59:89:51:bb:fa:92:22:57:0f:
97:35:e8:80:db:1b:0b:85:b5:32:c0:91:8e:ac:64:00:e0:b3:
f7:21:94:70:b9:d6:51:82:ff:47:43:1d:f6:1d:27:82:03:b5:
ba:1d:5a:e7:14:02:11:4c:c6:24:62:b9:a0:7d:03:89:13:47:
7e:14:b1:02:9d:ce:7b:fa:5d:44:20:1e:d6:0a:01:ce:6f:02:
ab:2e:eb:ae:95:51:c6:2e:5d:0e:87:4a:41:d5:e0:f0:72:bf:
7a:6e:1f:d6:55:ae:92:3c:20:6e:d8:59:2d:92:41:00:d1:14:
7a:19:8e:16:89:c4:50:4b:73:df:26:c3:fd:5f:8e:d2:b9:f6:
01:0a:7d:ed:12:09:fd:b7:7a:ed:8f:a2:cd:74:3f:50:1a:5b:
4d:06:da:72:ce:04:ad:7c:02:4f:43:f8:4a:51:44:b0:87:9f:
8b:6f:01:50:8b:68:e6:ef:c9:7a:1a:54:f5:45:9d:22:7c:97:
44:64:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:34:51 2026 by rpki-client