
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa
File: 55c10b42-1e3f-391a-803f-94a6efd0d529.roa (raw, json)
Hash identifier: Ld1lEWITsSI7rB6muBEd+hH/6WHEFyPhSIjyFg/OS5U=
Subject key identifier: D2:94:63:40:40:E5:DC:CF:4F:B9:7C:D2:DF:C3:C7:72:64:A5:67:0E
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584DB7702D7527E162F06120D040
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa
Signing time: Mon 04 May 2026 01:00:25 +0000
ROA not before: Mon 04 May 2026 01:00:25 +0000
ROA not after: Sun 02 Aug 2026 01:00:25 +0000
asID: 21949
IP address blocks: 173.243.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b7:70:2d:75:27:e1:62:f0:61:20:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: May 4 01:00:25 2026 GMT
Not After : Aug 2 01:00:25 2026 GMT
Subject: CN=28925701-0604-4e5b-8568-1581f0155953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:4f:74:97:ac:bf:f4:5e:7d:46:c3:63:eb:
ad:94:65:b5:e3:19:6b:fb:2c:e6:dc:d2:57:3a:a0:
be:15:17:57:b5:85:09:52:f0:f7:97:cb:42:9c:0f:
9a:2f:84:da:53:5a:be:1d:d8:53:00:58:ec:37:25:
75:04:2a:ad:a0:e2:3e:3a:01:0e:86:d9:cc:97:42:
ef:81:3d:8c:5f:46:4a:ca:73:40:7a:37:ca:f6:2c:
6d:0c:5f:fc:06:c3:f8:e4:e7:56:fa:c4:28:8e:ad:
68:a3:75:e5:00:ef:da:b4:01:1d:a2:97:84:5e:b6:
bb:53:2c:1d:ae:bf:80:ac:a3:ec:d3:70:a8:a6:06:
2d:76:22:d3:86:9f:8d:f2:da:fb:c4:3e:5f:cc:54:
a7:af:80:56:24:fb:35:44:5e:18:41:5c:ab:91:d7:
80:36:f1:64:62:6b:a3:68:71:b2:fb:04:94:fb:7d:
9a:37:14:c4:6a:08:de:e4:3f:93:42:12:c6:0f:32:
95:33:a1:a2:9b:af:d3:e0:45:c0:e2:7c:0e:3d:82:
69:10:f6:75:09:3c:ee:cb:b2:d8:da:f2:85:53:b7:
3f:d5:0c:07:7a:fa:4a:ce:a2:64:db:c6:7d:fb:e1:
4d:27:fc:7a:02:64:48:bc:e0:37:6e:f0:e6:df:96:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:94:63:40:40:E5:DC:CF:4F:B9:7C:D2:DF:C3:C7:72:64:A5:67:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
173.243.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:a8:2a:a1:9f:e5:89:4e:13:14:d2:9d:a1:da:70:b7:5f:c7:
65:d3:96:1b:fb:42:f8:6f:a0:62:49:fb:71:6a:60:45:de:45:
2b:fc:43:3b:5a:c6:5c:22:b5:82:6c:b9:a3:2b:86:73:6a:ee:
3f:bc:9e:f7:2d:6a:1f:40:59:dc:41:93:38:aa:5e:4a:46:3a:
f3:aa:77:dc:ac:94:ed:3d:dd:9a:8e:a1:46:c6:83:b7:24:22:
76:8e:cb:69:b1:25:fa:bf:39:12:9a:b2:dc:4a:49:b3:e3:b0:
8a:e0:72:34:92:f7:cf:9e:59:32:9a:ca:68:ce:71:ef:65:df:
0b:94:77:19:6b:cd:04:c7:c4:39:1a:50:a7:f0:53:58:64:be:
01:55:04:94:6a:99:fa:f5:85:ce:ef:0d:81:48:5e:82:f6:38:
bc:29:c3:4b:1b:d2:b0:70:71:60:38:29:a0:15:10:d5:bc:6e:
fa:1e:c1:4d:c4:41:1e:0b:13:94:e0:d1:9b:f4:b0:36:da:79:
94:b6:f0:74:18:44:87:a5:cf:9a:35:3c:54:a1:17:2c:08:55:
4a:6c:f2:c5:3e:e1:3b:b9:ec:7a:0f:c3:06:1d:18:27:db:e4:
6c:49:61:00:6d:4d:d5:a5:f3:8e:5f:ab:8a:90:dd:15:13:aa:
24:6c:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:27 2026 by rpki-client