
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa
File: 2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa (raw, json)
Hash identifier: e5jVpjtwQ//3XF5UJB/rwiHWiikaxTywDmABQOx62Pw=
Subject key identifier: E9:4F:3A:3C:93:B7:DF:70:ED:F3:C0:F9:9D:2D:64:29:A4:21:14:2E
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DA8157F87B825E878710FE4E0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 202
IP address blocks: 192.25.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:7f:87:b8:25:e8:78:71:0f:e4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=b623a1f5-c703-46a7-b6cd-fd2cf7d333c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:df:6d:10:ee:bd:36:8e:ec:90:1f:4b:66:
ae:a8:13:4b:82:7b:e0:03:56:cc:40:c3:69:d0:83:
ef:88:88:5d:00:20:15:6e:3e:d6:cc:52:94:e5:c8:
eb:84:e3:bd:6b:5e:e7:5e:45:55:75:59:e5:5f:91:
9a:48:65:06:d2:ae:c4:0f:45:31:6e:53:fe:7d:16:
99:7c:4a:66:d0:27:65:99:bc:71:54:5d:fb:26:cd:
2e:04:3c:4a:16:8c:9d:e7:0b:28:9d:4b:c9:91:e5:
2e:4f:20:c8:4e:af:b5:88:45:48:70:bf:26:8f:b0:
ae:1e:c0:78:8a:97:82:4c:8d:d6:0e:de:d2:12:06:
09:ee:d7:4e:09:50:ea:f1:c8:fa:0e:df:23:32:30:
66:f7:e0:e3:b5:3c:b1:8e:f7:38:fc:02:8a:c3:6b:
8f:d8:bc:1f:65:65:81:24:ad:72:0f:da:90:7e:be:
07:0b:b2:cd:60:6f:11:64:68:da:b7:0a:26:0c:8a:
54:1d:b4:1b:79:7d:cd:4d:ff:53:c9:dc:11:a5:de:
84:01:10:b8:0e:62:b0:86:ab:1d:69:e4:63:b7:52:
28:8c:4c:91:8b:ec:6d:3c:a8:17:16:2c:73:06:77:
e6:38:91:84:c4:15:d7:cb:94:f2:4c:77:79:76:64:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4F:3A:3C:93:B7:DF:70:ED:F3:C0:F9:9D:2D:64:29:A4:21:14:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
192.25.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:95:44:05:17:97:68:9c:e8:4a:2b:b5:e3:3d:e0:25:9f:a8:
f5:26:83:eb:cf:73:49:c2:85:b1:c5:bb:6c:38:28:62:38:0c:
2b:b0:02:7b:61:f3:05:fe:e8:18:14:cd:41:12:a7:57:23:2f:
7e:03:82:6d:f9:2e:3d:f2:cb:11:56:23:4e:5b:20:8c:6e:5d:
ac:64:52:f4:5e:25:2c:ce:86:5c:19:bc:e6:8e:c6:b7:f7:fb:
7e:d1:fb:f0:db:24:77:c3:7d:78:bf:2f:34:9c:fa:d0:95:4e:
b4:38:c1:ae:4b:a1:44:99:b4:d6:cc:b2:bb:d3:41:4b:81:8d:
53:41:9a:9f:b6:b0:cf:08:2d:d6:9a:5b:0e:61:6a:eb:cb:f0:
5e:0f:45:f1:df:26:ab:96:c0:f3:eb:86:bf:55:8b:66:f1:cb:
36:af:a6:97:c9:d2:a7:82:7d:5b:d7:fe:40:49:4d:27:a6:e3:
f3:c5:67:60:08:3e:70:84:ce:bb:52:cf:1c:70:c0:57:ce:cc:
5c:59:8d:15:7a:e3:d8:27:85:4b:e9:bb:1d:1f:39:b8:ed:16:
75:bb:3d:8a:14:87:4d:7d:15:7f:47:7d:34:97:48:f9:3e:56:
09:4a:9e:d2:11:7b:53:28:07:37:59:a8:7d:d9:d5:df:ba:0b:
f1:e1:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:08:38 2026 by rpki-client