
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a604b849-d354-3512-a814-e9b2ed363ed3.roa
File: a604b849-d354-3512-a814-e9b2ed363ed3.roa (raw, json)
Hash identifier: vIyT5ffeZ+fzuNTf/1WcE0cc/FMhQ+sHycr7ZvHYtWs=
Subject key identifier: E7:0C:DA:6C:80:AD:35:9B:A2:A5:0A:DC:FE:EF:3E:C8:2A:62:81:C2
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D3F64FAD9A015A2E071D16A00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a604b849-d354-3512-a814-e9b2ed363ed3.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 36624
IP address blocks: 216.87.145.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:fa:d9:a0:15:a2:e0:71:d1:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=a24b26b3-cc68-4282-8fe2-ef839cef842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:19:0b:80:1d:5f:9d:39:d2:f4:fe:70:ca:
a0:65:5a:60:81:b2:53:33:5a:35:82:31:a7:e7:11:
26:9a:16:c9:1e:cb:64:6f:aa:7d:d9:2d:e6:90:37:
c6:55:ea:53:68:7f:bc:71:34:1b:59:a9:90:4b:85:
2a:49:e4:cd:82:a8:b3:66:a5:33:14:4a:54:cd:d7:
d6:84:b9:fb:a1:af:34:bb:29:00:96:54:dc:56:d2:
35:c1:4b:14:12:16:e7:ac:04:d4:86:2e:cd:a8:ad:
90:97:b5:c2:bb:77:45:f8:af:4b:f8:e5:5d:f3:02:
3a:88:a4:b8:11:67:c6:ce:83:5c:9a:b9:35:3d:24:
63:32:c8:40:fe:73:8e:a7:ce:36:3a:9f:37:5d:e8:
8c:fd:e8:6c:07:c9:96:c8:65:e7:d4:a0:b6:e4:fd:
bc:7f:74:de:5b:0b:c8:5f:62:c8:58:2b:9d:0a:4e:
6c:29:ee:be:2f:20:41:a6:98:a5:94:35:24:9d:c9:
57:e9:6a:36:f3:6b:d9:a7:0e:16:af:b9:c3:6d:92:
b2:85:0a:37:cc:58:79:54:f9:09:af:34:82:11:c4:
92:84:52:2c:61:c6:e6:ea:06:c3:0a:f0:be:24:19:
4b:12:20:1d:c7:1d:89:b1:cb:04:b4:8d:c8:b8:ec:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:DA:6C:80:AD:35:9B:A2:A5:0A:DC:FE:EF:3E:C8:2A:62:81:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a604b849-d354-3512-a814-e9b2ed363ed3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:d5:9b:74:19:ca:ee:88:62:40:f0:b0:ae:34:65:55:66:48:
68:ce:96:a2:07:a2:d3:55:ab:5a:ec:74:f8:2d:9a:76:8c:3d:
13:94:6c:bc:79:ec:0f:65:2b:74:ea:a5:33:cd:57:88:42:b4:
aa:80:7a:f2:ac:4f:1a:25:88:cb:f2:ff:3c:3a:18:b5:79:fa:
6b:e5:55:cc:aa:50:5b:90:bb:56:70:3a:89:f1:4c:ab:fb:6a:
0b:c9:47:6b:f7:7e:f6:62:f8:14:a2:88:a8:a2:9b:f0:04:21:
fc:f1:05:d6:9f:69:86:d2:ec:6a:8a:19:15:04:0d:81:89:89:
e2:d0:ac:a4:f0:ac:c2:be:cb:d2:21:21:18:62:44:09:04:bd:
7d:c9:ff:0d:8f:08:e4:5e:26:b9:bb:d7:09:57:ce:0a:e1:fc:
e9:7a:25:d9:14:c2:05:e8:f3:a5:93:37:97:26:ec:5e:0c:ab:
12:6c:92:79:e6:94:d1:de:78:11:1e:95:25:ea:29:2d:02:bc:
16:67:02:df:d9:16:3c:f6:d6:4c:dc:db:72:0c:e3:3f:b0:7e:
f5:30:a5:94:05:88:51:d8:c7:44:2c:c6:8e:1a:41:a6:c9:77:
e7:c7:2e:1c:5f:75:7f:f3:4d:3e:22:e3:c5:10:28:11:4d:79:
49:d6:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:01 2026 by rpki-client