
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa
File: b343567e-a49e-3300-8a5b-72a22b6d70aa.roa (raw, json)
Hash identifier: /h1LJCKCUWCcxDSF52BA4E5PeCje5gDQjjTjB3Tf41o=
Subject key identifier: 45:67:DF:A8:2E:C0:E3:B2:5F:6C:E2:A3:10:30:C6:1C:D3:AB:3A:91
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F4328584D09125E2D0EEB581816D7CF40
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 1239
IP address blocks: 172.84.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:5e:2d:0e:eb:58:18:16:d7:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=e5689df3-3be5-4d83-bc24-4621b6fdc1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:88:8b:1f:3d:b3:18:92:48:c1:75:5f:4b:
37:83:0c:e1:9e:8c:6c:14:58:a3:7b:ff:a2:ef:06:
48:15:b6:65:b4:25:29:70:65:5f:91:1d:c1:a9:26:
0e:fc:b4:0a:63:e8:12:58:9d:05:76:48:3c:8c:05:
e4:91:66:24:be:46:60:09:65:c1:d3:c5:94:21:ec:
2d:60:e8:e2:79:15:b6:d7:38:b1:26:ea:f5:0b:9a:
b0:ff:68:6e:ba:65:85:25:40:c0:44:08:95:aa:28:
63:86:85:33:90:e2:3d:45:8d:84:97:bf:ea:52:a9:
41:1b:4f:07:5c:d3:32:66:1d:0a:9f:b9:39:13:fd:
79:80:92:0d:a6:22:5b:42:af:2b:b6:86:6d:62:97:
ae:30:d9:b7:5e:97:d7:ed:9f:a4:fe:81:98:db:99:
96:0e:d9:66:f7:44:70:29:19:21:ec:59:5f:75:cc:
4c:64:d6:1a:84:64:89:f8:7b:93:8f:6d:a4:10:a9:
06:da:6d:5c:20:37:b0:dc:ad:aa:dc:81:58:15:60:
e9:4c:09:dc:73:95:17:7c:00:a1:cf:0f:ce:aa:da:
45:70:f2:4a:41:ad:b6:92:77:06:0b:87:af:af:f3:
ba:97:84:4b:02:92:35:b4:71:db:6a:f8:70:09:45:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:67:DF:A8:2E:C0:E3:B2:5F:6C:E2:A3:10:30:C6:1C:D3:AB:3A:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
172.84.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:00:c7:82:71:45:ee:da:d3:50:2a:2d:4a:36:9b:d3:7b:48:
e8:11:b2:09:11:25:00:c8:ba:1a:8e:1e:55:d3:07:25:65:97:
f4:46:bb:e2:fa:4f:14:65:55:cf:c5:68:17:20:b1:e9:df:59:
69:92:57:28:3d:92:f0:16:f1:10:44:6d:9a:05:9b:4e:84:dd:
09:b0:52:9e:c6:52:78:e7:f1:11:70:2d:4c:36:85:a6:25:2f:
e9:86:07:8c:38:7d:db:50:f8:fb:79:6b:ff:0f:d4:c8:c9:bb:
2b:97:b6:65:a4:98:a1:44:41:d8:f1:49:b1:9a:f7:07:10:7a:
37:8b:ed:7d:9e:31:22:4c:a5:8f:82:67:7e:04:68:e0:89:0d:
cc:42:37:0c:a5:0d:9c:e1:92:49:5d:e9:f7:f3:48:cc:68:bd:
54:bc:2f:8d:4a:ac:6f:fd:21:f4:07:62:4b:27:7f:21:c0:fb:
e6:b9:b1:61:58:e1:ac:ac:0b:a9:fa:bd:8d:24:cd:05:35:ba:
d0:b2:c5:4a:39:db:a7:27:77:48:43:39:22:1c:a8:2b:1e:69:
24:2b:bf:d5:85:a4:6f:dd:85:be:80:d8:e5:c1:93:45:e2:d3:
98:ec:e9:3c:39:40:9e:53:20:18:3f:9a:14:8f:d4:0c:68:33:
6e:cd:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:26:48 2026 by rpki-client