
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa
File: d294f045-3323-3f7a-bd57-473408d74726.roa (raw, json)
Hash identifier: zu3nIXpQXP3dTtL9xnpn0NL0YK8lNi88qQNa9/WdBVQ=
Subject key identifier: 3C:A4:C8:8C:36:B4:61:2C:5F:E0:B4:47:BE:CB:77:02:77:5C:36:09
Certificate issuer: /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial: 010D0C9F4328584D300A3A11E8C0B3C844396680
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 2728
IP address blocks: 131.143.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:3a:11:e8:c0:b3:c8:44:39:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=feaca32b-952b-48d1-bb37-0a91266f5c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:3e:7a:ac:bf:56:54:6a:10:90:7f:f9:9a:
d9:70:a8:e2:ca:30:d2:ab:58:dd:44:4c:37:09:b5:
37:a8:27:10:29:8c:a0:34:97:49:23:0d:4e:86:dc:
2b:47:84:82:31:cf:ff:c1:35:b7:ca:cf:06:e0:1d:
2c:29:ea:d0:ab:13:0f:39:90:4f:dd:ca:e8:d5:2c:
3f:48:15:4d:d2:1b:f3:ec:54:2f:88:b8:f1:50:b5:
bf:ce:0c:a8:ff:ea:64:ee:56:76:f4:73:17:91:57:
3b:f3:5c:22:95:7d:a2:0e:78:91:55:50:4a:71:25:
87:b3:2a:7d:a3:d4:fe:2e:d4:30:cf:26:4b:ff:df:
05:70:d6:bf:6c:9c:ef:5c:50:66:01:6c:9c:73:ed:
20:c8:c7:8c:be:01:2d:82:cb:7f:5a:4f:b5:f8:45:
34:90:63:fe:e9:3e:88:0e:2c:5e:89:02:be:08:0b:
6a:df:40:e8:c3:8b:28:83:46:67:0f:ff:94:fa:b9:
ee:09:dd:47:7e:8b:cd:7d:4d:0e:87:07:8f:25:62:
8b:8f:ec:71:c3:c0:bf:f5:a6:a9:a6:8b:32:c5:d6:
64:d0:2c:ce:10:3f:5f:ce:bc:ab:bb:15:0b:1e:68:
32:e4:2e:5e:08:4f:a4:81:48:87:5c:82:7d:a2:f1:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A4:C8:8C:36:B4:61:2C:5F:E0:B4:47:BE:CB:77:02:77:5C:36:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
X509v3 Authority Key Identifier:
keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
sbgp-ipAddrBlock: critical
IPv4:
131.143.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c8:87:38:ad:96:85:f1:1e:43:32:53:86:f2:54:7e:b7:c0:
2a:97:0b:6d:cb:01:bd:30:d0:c0:27:29:d3:77:38:17:d5:68:
50:ce:5f:c6:6b:89:da:da:f8:53:af:f1:a7:04:5f:84:cf:4b:
8f:9e:28:c6:7f:0e:07:41:64:e6:d9:27:db:91:52:68:6e:05:
0d:36:8f:96:b5:1a:35:63:ed:ba:ae:1a:79:c5:c6:08:17:02:
bf:6c:d0:6a:87:1d:66:db:f0:7d:d7:39:89:77:65:dc:d1:0c:
06:9e:42:90:52:5c:a7:b2:46:93:75:97:dc:6f:7d:f9:96:16:
eb:6a:05:62:ad:16:4c:69:11:2c:96:45:78:1c:e5:64:dc:80:
0f:96:bf:15:01:d5:82:dc:c8:99:a2:8e:16:23:1c:e6:85:1e:
f2:2f:0b:f0:2f:d6:f2:16:a9:c9:45:58:1f:fd:7f:4b:d8:ee:
dd:70:04:dd:d4:a3:19:62:73:f2:0c:aa:69:df:2b:c8:79:49:
d0:5a:70:f8:52:e9:5f:a8:04:03:25:23:c7:78:21:65:26:b2:
19:d0:b9:2e:fe:85:10:6f:15:0d:fb:f6:7a:69:b5:d7:06:ea:
65:d9:66:3f:a0:75:26:ae:20:5e:3c:94:73:8e:4e:2e:d4:30:
2e:9b:34:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:01 2026 by rpki-client