
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa
File: bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa (raw, json)
Hash identifier: 69O1W1syDdYPoLLW5knWt+wwGeW3ccvRAlRFe2nAeu8=
Subject key identifier: 12:A3:D8:20:9B:6E:21:AA:94:F4:C7:13:25:0F:5C:B4:BF:7B:08:A2
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DA8157F6ECEC569D5D005AB40
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 3360
IP address blocks: 192.25.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:7f:6e:ce:c5:69:d5:d0:05:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=b2e2fb6d-f42d-4d0d-910b-5884934a79c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4f:54:25:52:87:ac:b1:93:b8:36:ee:5a:09:
ee:e9:31:1d:40:dc:4f:80:17:a5:c7:e6:21:6b:6a:
34:0c:fb:13:6c:4b:45:8a:f8:49:92:9d:50:b1:d6:
9e:f0:ac:eb:40:f6:6a:ae:5a:ca:41:e6:56:15:50:
5f:2a:c9:75:50:35:34:72:60:42:01:dc:ce:bc:10:
70:fc:cd:78:7b:c2:79:33:3c:41:80:ab:fa:af:7b:
a3:50:53:12:23:6c:66:fb:47:bf:be:d3:ed:bb:00:
e0:15:0f:cc:a8:d5:c5:be:95:43:cb:ee:83:97:49:
4b:ef:25:0a:61:ba:16:34:96:47:1c:3f:d6:24:5a:
e3:7c:dd:ba:23:ba:a4:91:51:ce:25:44:f3:59:a4:
38:ba:c7:51:ad:26:2e:a7:3b:be:48:4d:56:f8:a7:
37:35:6a:ce:68:b7:43:a5:99:1a:45:c5:1a:eb:2a:
6b:35:16:86:e4:4a:a7:58:81:79:54:3f:d0:6c:7a:
68:c5:d9:27:bd:bf:f1:bf:b2:3b:3f:8f:3a:36:f1:
c1:5c:8f:26:1a:fa:aa:35:a1:1e:d9:b7:0a:71:99:
14:5a:22:17:c2:38:06:fa:e2:e8:6e:3c:9c:92:db:
fc:55:51:2f:1d:80:83:90:1c:f2:89:1a:af:31:2f:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A3:D8:20:9B:6E:21:AA:94:F4:C7:13:25:0F:5C:B4:BF:7B:08:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
192.25.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:fa:c3:29:f4:df:59:e2:06:29:19:7b:d7:ea:69:4b:15:7d:
bb:23:97:e9:1e:9b:db:86:73:03:ef:d1:5a:4d:f7:02:96:42:
e2:f7:e5:b9:d8:ee:25:a1:04:1b:88:bf:bd:08:70:76:d9:1b:
ae:d2:31:56:69:d9:f7:88:12:b0:25:82:fc:27:4c:c5:6f:cf:
d7:c6:44:0a:a7:d6:bf:4e:bf:82:c2:65:af:84:58:ce:bb:ea:
69:67:ad:6a:ca:6f:e4:44:1d:1c:9f:d2:dd:85:dc:73:0a:89:
58:8e:5d:05:a1:79:21:45:bc:9a:2d:8b:06:d2:c4:37:1e:cd:
c9:30:39:db:e5:a9:ef:77:bb:9c:a5:00:c4:20:57:c0:d4:fe:
c7:59:8f:9e:03:7f:c4:8c:3f:12:97:bb:76:12:da:12:97:e9:
0d:a1:66:f7:4b:8c:51:db:c4:9e:ac:22:f0:25:21:ef:a0:3c:
ab:14:77:e2:6e:c6:10:b2:df:4c:c6:0b:f6:cd:d5:48:5b:67:
59:f5:6e:a0:0d:42:ac:68:58:fc:bc:07:ff:d5:07:1d:d1:7d:
bc:7a:8e:97:82:06:c8:60:1e:70:9a:07:3f:18:ef:12:f7:49:
d1:45:6d:37:ea:c1:f7:ff:c7:0f:55:48:5d:a3:47:4a:71:ac:
7a:18:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:58 2026 by rpki-client