
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d4fd351-afb1-336b-a55d-d6390074134c.roa
File: 0d4fd351-afb1-336b-a55d-d6390074134c.roa (raw, json)
Hash identifier: Gb8f3AkXnGBQUXxEVGtAON6tWIHxYZwVFD7Dip/KKE0=
Subject key identifier: D3:71:00:9F:EB:39:D2:23:54:75:12:F7:4B:42:F2:70:0B:07:01:ED
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D492A79B1BF8D844D222277C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d4fd351-afb1-336b-a55d-d6390074134c.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 396555
IP address blocks: 198.17.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:79:b1:bf:8d:84:4d:22:22:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=0a56da4e-b2e9-4416-8ac1-07382fe7ebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:65:52:db:e8:a1:97:4e:70:17:c5:35:11:
67:6a:12:30:a8:84:4c:01:89:20:b2:ed:1c:55:12:
d2:92:55:bf:fd:c9:13:2d:b1:47:55:da:05:38:39:
3e:8e:e6:8d:ca:62:95:ec:08:85:22:1b:23:d9:68:
fa:e9:fa:27:bd:fc:50:a4:a3:01:56:aa:9b:65:f2:
e0:67:87:32:a1:f2:c3:19:10:5c:91:bc:4d:68:43:
53:cd:8c:e7:79:9d:0a:65:39:74:43:b1:b0:13:56:
e9:e0:2c:50:3e:7e:b8:a3:e5:d1:df:d0:ed:5a:12:
d2:7f:56:c3:8b:17:85:e9:08:03:ed:75:a6:67:11:
03:96:20:6e:f0:60:42:8a:a0:ff:ae:94:d4:46:e1:
75:ad:1d:d0:8b:57:7f:8e:d4:1d:5c:15:e0:2b:6e:
19:b8:3b:8a:81:6f:bc:de:af:49:d9:54:7d:33:6c:
3d:0c:ab:2b:cf:9b:86:a0:ab:56:ef:ed:91:e1:36:
17:d2:44:25:d5:99:f5:85:ee:18:ee:2a:dd:76:5e:
e5:5f:76:c5:e2:d7:72:1a:83:74:d3:46:c6:f2:3e:
e4:12:69:a2:c0:f4:3c:b8:8a:d9:f3:c4:63:3a:c8:
e3:70:79:49:25:27:52:e6:a9:01:ce:ea:4d:b4:29:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:71:00:9F:EB:39:D2:23:54:75:12:F7:4B:42:F2:70:0B:07:01:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d4fd351-afb1-336b-a55d-d6390074134c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:26:d2:30:b9:f0:93:1d:e4:62:5b:f7:c9:43:92:03:7a:2d:
57:5e:95:51:33:96:b7:b5:01:b3:1b:0f:f4:37:e7:8e:92:02:
0e:71:d6:d0:9c:29:6a:25:66:43:a1:52:e5:c9:a3:cd:1f:42:
7f:bc:74:47:8c:a5:c8:1f:47:43:d8:96:5b:f6:c9:7d:db:8d:
ba:81:49:89:02:10:0b:de:9f:df:d4:12:ec:06:6f:da:db:f3:
37:19:71:cc:56:11:38:58:23:b6:ce:40:03:75:2d:57:83:ef:
ff:cd:ff:5e:36:b4:98:58:fc:4d:ec:72:c7:2d:a4:e5:76:b7:
46:67:1d:97:c3:e0:e3:35:d6:e3:43:bc:5b:d4:f7:98:0f:36:
4d:f6:87:3f:76:9d:a1:5c:f1:f2:8d:90:06:db:70:92:f7:bd:
b6:02:e5:1e:0d:eb:d4:aa:c3:87:5c:25:d1:6e:8f:9a:a8:03:
d1:e0:70:99:71:22:e5:e8:85:ca:26:83:c5:2a:4d:97:da:e0:
5c:20:b6:a0:83:e4:63:c1:0d:f3:50:5b:55:f9:d2:22:be:b8:
20:85:61:d7:86:f5:e8:04:71:cb:15:aa:65:5f:da:e0:a7:e1:
d3:46:37:07:33:66:90:8e:15:bb:73:1b:3e:22:fc:6e:6a:ce:
d6:42:e5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:58 2026 by rpki-client