
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/14516a78-5003-3ee4-a230-723f4f86845d.roa
File: 14516a78-5003-3ee4-a230-723f4f86845d.roa (raw, json)
Hash identifier: kMt8Nfbb1eT8uTWGgt4lpWK4jJN45kcgGC5xcmOqUas=
Subject key identifier: AD:B5:56:56:8F:A2:9E:85:6D:A6:02:42:B3:95:CB:CA:C1:B2:FA:9D
Certificate issuer: /CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470
Certificate serial: 010D0C9F4328584DBBA040183D21808273A9D028
Authority key identifier: A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/14516a78-5003-3ee4-a230-723f4f86845d.roa
Signing time: Tue 05 May 2026 13:00:31 +0000
ROA not before: Tue 05 May 2026 13:00:31 +0000
ROA not after: Mon 03 Aug 2026 13:00:31 +0000
asID: 36231
IP address blocks: 199.231.233.0/24 maxlen: 24
2606:f240::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bb:a0:40:18:3d:21:80:82:73:a9:d0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470
Validity
Not Before: May 5 13:00:31 2026 GMT
Not After : Aug 3 13:00:31 2026 GMT
Subject: CN=e41264c8-6056-456d-ac81-e7862616d82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:6e:5e:f4:e5:1f:c9:36:d1:ec:d9:5f:93:
67:e4:0d:2a:4a:eb:7a:5e:93:eb:80:29:a3:cc:75:
f8:6d:f8:fc:98:62:0c:f6:90:95:43:f5:25:d7:16:
c3:30:bf:14:bb:4f:b1:f2:34:4b:81:21:29:99:61:
79:22:3a:f5:41:67:5d:da:d5:be:5c:9d:c4:ec:43:
09:22:86:c4:f9:b3:87:33:66:2b:01:41:ef:26:2b:
02:98:5b:ad:41:ff:27:cb:5e:a9:38:2b:89:61:35:
d7:50:31:19:3b:5e:8a:05:61:94:3f:4c:a0:44:d2:
18:2e:83:e1:e8:60:a9:31:1c:8d:e3:3f:8a:8e:35:
ad:3f:86:6a:11:4c:95:f0:e6:65:54:93:97:55:45:
e5:c1:b5:89:10:5d:48:08:66:37:92:21:af:c8:24:
b1:1c:71:04:a9:6f:76:72:9e:75:bb:0c:25:46:f8:
18:db:ce:65:b7:e9:36:06:d2:10:be:0c:69:1b:4e:
87:e4:4a:0f:79:5e:9c:a7:d6:dd:f5:37:38:99:ed:
9f:a4:b9:31:75:db:d8:6f:1a:46:0a:d7:3c:13:cf:
ed:38:1f:e5:35:cb:56:50:09:8f:c2:87:5f:3e:85:
c0:bd:a5:36:b1:e2:36:6d:3f:41:9f:5f:c7:0c:5e:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B5:56:56:8F:A2:9E:85:6D:A6:02:42:B3:95:CB:CA:C1:B2:FA:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/14516a78-5003-3ee4-a230-723f4f86845d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl
X509v3 Authority Key Identifier:
keyid:A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer
sbgp-ipAddrBlock: critical
IPv4:
199.231.233.0/24
IPv6:
2606:f240::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:45:64:e0:4d:bf:14:f7:b7:78:92:26:58:44:1f:91:0a:37:
81:c5:11:25:7e:4f:2d:e3:f8:f6:ee:45:38:46:73:3c:2f:03:
ef:1c:97:0e:71:f5:43:01:c6:06:5e:9d:6d:2a:3a:e6:69:a7:
70:b0:a3:28:02:71:1a:d1:16:e0:a5:aa:cd:5e:b9:bb:4c:62:
53:6d:7a:b3:57:01:c2:4b:4d:9f:05:53:a8:7b:d4:41:32:c2:
34:28:8f:fe:81:b3:8d:e8:b4:4e:b4:23:0c:77:d5:a6:b5:5d:
f0:88:ae:6c:0e:20:65:d4:1a:ad:2f:c3:be:a4:1c:fb:0b:3e:
03:64:ec:54:61:72:17:2c:89:4c:8a:59:29:23:33:7e:78:3d:
2c:13:21:c9:f1:a2:fe:a6:f9:83:14:16:fa:3e:3d:2c:f3:a2:
c7:9a:1c:25:19:e1:f7:75:8b:df:2c:2e:de:2c:bb:e3:84:be:
2d:1e:59:ba:b1:d6:a7:4e:63:c5:c8:7f:13:66:9a:41:5d:48:
e3:cc:55:ad:30:4b:89:9c:48:14:70:fc:14:9b:57:bf:f9:9e:
09:e4:92:0e:ee:1a:6e:26:f2:0b:de:7b:ee:c9:be:ec:dd:dc:
8b:1e:57:79:5c:fd:02:26:2f:8f:71:a6:4e:fe:2f:7a:1a:1d:
0c:94:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:23 2026 by rpki-client