
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa
File: 9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa (raw, json)
Hash identifier: d2ttTmy+Aal5NZsb2qsC6H3Ik3hT6nvi+khwuR8frOY=
Subject key identifier: FF:01:57:EB:15:46:A3:2B:0E:F6:96:AD:95:70:91:A3:59:4C:38:9A
Certificate issuer: /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial: 010D0C9F4328584D8EF58AA4411A673CF1D3D780
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 32604
IP address blocks: 208.91.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:8a:a4:41:1a:67:3c:f1:d3:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=ff49fc18-3ad2-4bf1-bae1-0a3ab16fb761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:37:27:9c:49:ca:ea:a2:60:4e:8e:56:f7:
d1:88:18:13:57:c0:75:00:7b:2f:c7:9a:bf:45:d5:
25:97:51:2f:6c:c9:9c:87:3f:38:d9:93:f7:92:22:
02:3b:95:bf:bc:da:71:85:5d:e6:b6:97:da:7f:c2:
e9:79:d3:b6:0b:85:95:ed:94:7c:c9:4a:16:6f:24:
a8:d9:00:9c:c3:72:0e:e6:f3:4e:c4:c0:53:dd:eb:
fe:05:89:4c:10:c7:e4:04:ca:2e:38:6b:43:00:07:
89:5a:a4:f5:3c:05:87:8c:ac:0c:de:cc:79:30:f4:
7f:7e:de:49:1e:f6:bf:dd:7a:73:ca:64:d3:09:73:
1f:9d:a1:23:61:4f:3e:d8:6d:24:e6:6b:bb:bd:36:
36:d8:a3:fd:a4:c2:a3:73:bb:5d:a5:b8:1e:e4:c2:
36:ff:ba:5e:d7:54:30:ea:68:f1:cd:cd:6e:a5:2d:
0b:fa:18:a8:f1:e4:c3:a0:5d:03:65:23:d9:07:07:
ed:f1:2f:ab:8d:85:18:9a:5c:cc:82:24:00:6a:ff:
8d:4e:a6:8c:4e:84:33:f4:fe:7f:91:33:02:4e:98:
ea:05:aa:c6:85:6d:27:08:cb:ff:49:24:37:2e:48:
75:3c:d1:1c:c3:de:0d:aa:b2:a0:59:82:e2:a0:a1:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:01:57:EB:15:46:A3:2B:0E:F6:96:AD:95:70:91:A3:59:4C:38:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
X509v3 Authority Key Identifier:
keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
sbgp-ipAddrBlock: critical
IPv4:
208.91.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:0e:24:f9:2a:ed:83:93:72:4b:f4:8a:18:bc:33:3f:93:89:
93:01:af:b6:22:41:10:f3:ba:5d:c1:1e:9d:1f:c1:63:23:1e:
f5:bd:a7:07:1d:67:ee:87:c3:73:59:76:a4:10:0c:1a:04:28:
d8:81:34:4d:15:e9:f4:33:d0:c2:89:d7:0b:c8:f2:e1:9c:9a:
7c:44:48:62:cc:5e:1e:a1:a6:5d:17:2e:05:23:6b:e4:41:f3:
66:0b:33:0b:2e:cc:7d:f2:48:1c:22:cd:7c:53:89:fa:18:dd:
7e:d3:c5:12:f5:33:2c:13:e3:8d:53:5c:77:e7:dc:06:36:e9:
f7:f2:20:f4:a6:33:e8:93:ab:88:49:f8:68:2d:0a:af:10:e6:
b9:29:4b:02:e0:9e:20:30:e0:fb:b5:bb:90:bc:be:2b:18:74:
60:33:46:c6:0f:c3:6d:53:5a:33:63:76:e3:5e:d1:db:37:c2:
57:0f:94:52:3c:d4:2a:c1:66:48:77:9f:a5:f1:20:af:83:0c:
38:24:82:90:24:7e:f2:6f:84:b7:48:56:c0:1c:57:ea:72:c1:
34:ca:ab:33:b0:4c:15:de:b8:84:2e:cd:18:3d:d6:8f:4b:e5:
e5:0a:d9:2b:c6:e9:6d:57:cb:03:d5:bf:2f:0e:24:69:2e:86:
64:9b:f4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:02:23 2026 by rpki-client