
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/c9a28bc8-af63-388a-8f85-9abd55015548.roa
File: c9a28bc8-af63-388a-8f85-9abd55015548.roa (raw, json)
Hash identifier: opkS+1srJwE63KYIXkZeaGPf8ujseu7kCR+F2CNF2OE=
Subject key identifier: C1:0C:34:F3:A9:D4:DF:7D:81:19:5E:69:DA:E5:4F:86:BC:05:3C:85
Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial: 010D0C9F4328584D359FD8078EC3ED1A11492F00
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/c9a28bc8-af63-388a-8f85-9abd55015548.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 40934
IP address blocks: 208.91.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:d8:07:8e:c3:ed:1a:11:49:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=ca0e6e82-5bf8-470f-9935-206cd888bff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:4f:93:66:d4:6d:05:72:94:a2:41:41:26:
12:50:99:3c:3b:5c:89:45:6a:bd:e2:87:9d:54:3f:
e7:ed:97:23:b2:0f:0c:c4:47:68:74:7a:da:bc:25:
81:34:e3:ff:c3:60:06:42:99:3d:54:a4:5d:d9:7c:
9b:21:3a:4e:0f:80:d7:f2:ca:dd:18:42:12:71:ce:
85:dd:7c:1b:7a:4d:f2:e5:64:c0:aa:81:3f:65:52:
f0:7f:61:0f:75:18:54:4b:7b:9a:c7:69:b9:f6:f3:
ab:22:3d:bb:1f:0e:47:1a:60:2e:5a:af:a8:76:ce:
27:a1:12:71:83:61:fa:da:c1:5a:47:78:d3:41:44:
e4:f0:4a:3d:50:17:0e:6b:be:4d:e4:d3:3a:9d:4d:
82:7b:86:8b:ab:ea:ed:77:2c:52:e8:50:3d:d7:d6:
d2:d1:e4:b4:62:0e:02:78:00:7c:33:85:39:88:d0:
73:3c:0c:15:21:85:cd:6b:a4:f0:42:d9:e8:79:75:
8a:a6:52:6e:3f:91:d3:db:17:b2:d2:37:7e:de:c6:
be:b6:62:d4:53:11:70:a4:c8:f4:e9:9e:aa:43:44:
05:f0:8f:62:f5:92:56:60:e6:93:ba:52:d7:8b:80:
b5:cb:77:bb:3d:29:90:2b:8d:fa:7d:b7:74:c8:ad:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:34:F3:A9:D4:DF:7D:81:19:5E:69:DA:E5:4F:86:BC:05:3C:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/c9a28bc8-af63-388a-8f85-9abd55015548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
X509v3 Authority Key Identifier:
keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
sbgp-ipAddrBlock: critical
IPv4:
208.91.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:0f:ca:24:94:86:cb:94:fe:d4:79:91:7c:56:af:a6:4b:8f:
68:05:55:fb:a3:e8:49:34:fa:d2:db:1d:10:3e:9a:c4:f6:fa:
61:d3:82:8e:2d:3b:dc:85:bc:bb:87:c0:2f:57:ed:3e:24:7d:
cc:ce:c2:e1:92:b3:f2:53:d3:d8:a2:cb:61:b9:96:1c:70:5f:
e1:ab:41:59:22:e6:c5:de:b7:e6:76:3d:0e:2a:f8:a5:75:46:
b4:15:20:09:63:c3:21:40:0e:06:44:90:17:ec:ef:90:00:ef:
dc:0e:2b:fc:42:66:4b:f7:a8:75:4a:8b:54:57:c0:36:70:20:
ae:9c:d8:a4:c6:5e:a6:b2:a8:a9:70:97:47:c6:d8:fe:8a:3d:
66:a5:98:33:4d:aa:a0:17:4d:a9:79:1d:17:56:a7:62:2c:31:
1e:8b:96:f4:aa:f4:9d:28:f3:d6:b8:a9:ad:bb:08:a7:48:7e:
48:7e:4c:7b:7b:61:a1:85:f1:59:ae:aa:e1:4d:b0:22:15:00:
8d:6e:3e:df:70:32:26:16:b2:7a:17:e7:3b:17:78:2c:a0:7a:
8b:01:bc:87:20:89:3e:1a:f6:a3:49:f1:f7:6a:fc:aa:73:fd:
ee:be:9e:23:95:f7:e0:8a:47:ca:0e:e3:87:fc:04:8d:b1:39:
bd:ac:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:30 2026 by rpki-client