
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa
File: 9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa (raw, json)
Hash identifier: 1gcSlxGUo/HQ7nx+WkpaH6MwWb8SktKjBX0RqWRraWQ=
Subject key identifier: 3E:E6:E1:A0:DB:3F:67:A3:4B:CA:58:EC:53:19:8A:93:26:40:B4:48
Certificate issuer: /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial: 010D0C9F4328584D44FA393B97B3BC95AB8A6980
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 14618
IP address blocks: 216.238.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:39:3b:97:b3:bc:95:ab:8a:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=282b45b8-4867-4429-b890-2a48dcc94a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:7b:5e:a8:7d:9a:10:4a:eb:36:83:59:75:
4b:10:79:19:1a:43:f6:87:b9:eb:81:de:92:75:c7:
21:52:d8:76:7a:cb:2a:bd:3e:4a:6b:c7:36:03:7c:
12:34:50:40:15:7c:73:7d:ca:3a:44:3d:89:77:b0:
a1:30:55:99:a7:d2:e6:76:ac:20:08:77:6c:26:f6:
64:b6:45:22:49:19:c6:00:91:70:2a:b9:dd:ab:60:
81:77:09:d4:5c:fa:39:a9:f4:73:43:44:65:08:b5:
c9:0c:0c:8c:0b:53:03:e6:c7:3c:45:7c:e9:93:03:
ec:22:f5:23:0d:bb:d0:a8:b6:14:45:48:c6:12:4d:
d3:69:21:a3:c4:b0:9a:26:29:05:23:11:9f:d7:3d:
a7:df:4d:cc:81:a9:18:cd:40:f9:2f:6a:02:50:63:
56:7e:dd:8a:65:81:f9:dd:ba:f2:c0:51:d8:d6:3e:
2b:fe:b2:b8:c7:87:51:7c:a9:ca:99:3e:f1:23:aa:
1e:20:11:c5:61:eb:8e:04:1f:9c:cc:f1:2b:15:cc:
fb:a8:ca:98:28:c8:99:e5:a8:87:7b:aa:29:5c:a6:
78:7b:ca:b0:d4:9c:af:63:5c:a4:0b:3b:03:28:0b:
5e:1d:4c:df:c5:40:b5:e3:59:ff:55:43:87:49:7b:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E6:E1:A0:DB:3F:67:A3:4B:CA:58:EC:53:19:8A:93:26:40:B4:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
X509v3 Authority Key Identifier:
keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
sbgp-ipAddrBlock: critical
IPv4:
216.238.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:a0:17:31:a1:a8:3a:0b:3b:f8:de:44:81:21:db:57:3f:2a:
48:d1:4f:7b:11:38:92:af:69:2a:67:bf:4a:ff:e0:d8:65:da:
7c:d3:2a:18:bf:aa:fa:94:f6:04:90:b1:18:45:ef:b8:fc:60:
66:82:f3:a3:9c:41:f6:8c:09:84:4e:73:29:70:d0:18:55:ec:
17:dd:a9:0f:14:f2:11:3e:55:54:a2:9b:1f:fb:84:0c:6d:43:
1d:3c:2c:a5:b0:65:09:ff:8d:cd:32:e8:86:d1:56:fc:67:da:
39:34:e8:af:9f:60:64:41:78:65:81:b4:a4:86:9a:ea:44:75:
c2:45:ad:8b:38:8a:36:c8:86:89:e5:a1:75:85:33:80:fc:6c:
ac:15:a8:ac:e7:41:45:29:2e:49:2b:de:89:ed:86:19:8b:12:
d5:a4:11:eb:6d:f0:fe:ad:43:47:25:06:3d:4a:9d:6c:75:5c:
bb:8b:34:48:07:95:8a:f5:2e:ef:a1:4b:2b:d8:dc:52:f7:69:
64:77:04:e9:f3:ca:a4:68:95:d7:5a:95:f5:cb:9a:29:6f:74:
9d:20:7a:23:a9:84:6c:32:39:bc:12:ff:88:4b:9c:5d:82:c0:
f4:c1:99:1d:27:4f:57:80:2d:e1:3d:8c:cd:59:75:ba:06:51:
d8:9e:cd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:02:48 2026 by rpki-client