
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20cd75e1-c04e-36e1-8ede-fc98edaf1b4a.roa
File: 20cd75e1-c04e-36e1-8ede-fc98edaf1b4a.roa (raw, json)
Hash identifier: Iog1cEAyHdvpi9E+yxKjGO+Ytw4jE7Fu7fe3M2MVTdc=
Subject key identifier: C5:6E:97:48:6C:87:6C:05:A0:3E:16:8D:F3:14:8A:E3:6B:E4:22:DB
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D94AE88384D2B86B2CCC6C700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20cd75e1-c04e-36e1-8ede-fc98edaf1b4a.roa
Signing time: Tue 21 Apr 2026 14:12:52 +0000
ROA not before: Tue 21 Apr 2026 14:12:52 +0000
ROA not after: Mon 20 Jul 2026 14:12:52 +0000
asID: 36627
IP address blocks: 216.87.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:94:ae:88:38:4d:2b:86:b2:cc:c6:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 21 14:12:52 2026 GMT
Not After : Jul 20 14:12:52 2026 GMT
Subject: CN=42ef7d5c-8e3b-4cf2-bb72-c08feae1b3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:2c:1c:18:c6:74:cf:b7:ef:89:24:08:c2:
97:5a:8e:c2:41:e8:54:f8:ae:8d:d2:56:e1:5a:6d:
57:93:d7:82:10:9a:82:0e:b4:65:49:dc:b9:7e:df:
2a:99:0a:09:8e:6e:f6:e1:4a:fd:79:76:2c:89:a3:
b7:a4:9a:4b:62:bc:ad:ea:be:97:12:b4:be:7c:90:
90:b9:60:84:b8:30:1f:21:11:b5:50:d3:4f:a4:38:
9f:39:a7:bb:c9:95:06:ac:6b:3a:4c:b0:27:0d:03:
43:1c:14:c3:c3:6c:3e:ca:f6:2f:c7:3d:82:9d:9a:
68:21:78:88:18:bc:07:d8:da:f2:d1:9d:9d:b6:e7:
3f:f4:9d:00:fb:92:6f:1f:ec:41:50:f1:15:1e:b4:
0d:e3:0d:7d:20:5a:8b:2e:e9:9a:d3:73:f9:65:5e:
33:93:77:d7:91:be:b1:5a:cf:5f:f3:d1:b9:94:96:
f7:10:0d:12:b9:0f:73:07:08:a7:e4:09:58:4a:b6:
07:69:d5:29:7b:0d:11:92:25:08:8d:07:e1:dd:cb:
52:29:f3:1d:9a:3a:e4:64:6f:12:70:bc:a0:69:04:
51:9a:f0:80:ee:a7:8e:c3:c9:b0:61:0c:1c:0a:7d:
0c:49:05:59:e5:46:13:d1:6f:9f:9b:0d:61:0a:12:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6E:97:48:6C:87:6C:05:A0:3E:16:8D:F3:14:8A:E3:6B:E4:22:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20cd75e1-c04e-36e1-8ede-fc98edaf1b4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:71:ef:b7:06:76:89:6b:ff:0f:46:0c:6f:c8:a4:97:b3:1b:
4f:8f:81:cb:5d:13:36:c2:28:f0:d9:2e:d9:44:e7:d2:5e:92:
22:56:67:32:44:3e:59:40:44:d3:9a:d1:6c:dc:34:c3:eb:64:
2f:62:dc:8f:dd:54:df:c0:31:68:a8:1d:4b:65:b4:d3:81:e5:
ff:30:61:24:09:ee:c3:97:f8:6d:76:36:c3:e9:b4:1e:14:67:
f1:e3:ec:bc:b4:65:83:20:ed:fa:b3:f7:82:85:b0:58:8c:e3:
6f:60:e6:c4:6b:26:6d:23:d8:1c:df:58:25:8e:7a:3c:ae:5e:
dd:a8:4e:6a:ba:97:96:c8:31:ed:f0:33:2f:98:20:d8:e8:82:
32:e6:ca:3b:af:0d:da:de:c9:f8:47:a2:0d:3b:bd:74:60:3e:
f1:09:78:ea:7e:f8:37:6f:f8:8b:c5:55:69:ca:c8:4d:59:b3:
14:58:48:6d:bb:4a:27:3a:34:22:ac:b3:c9:a5:4c:b7:91:22:
f1:dc:85:ee:13:0a:ad:27:4e:3d:e8:48:be:f8:7e:cc:28:29:
72:14:2b:df:c6:d7:63:9d:6d:65:dd:b7:9c:c3:dd:4f:c4:e7:
1b:4f:a2:f5:2e:5f:25:22:a0:ac:b2:bd:be:87:79:92:12:88:
54:ff:06:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:18 2026 by rpki-client