
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c11cf280-827d-397f-b54f-d1788799009c.roa
File: c11cf280-827d-397f-b54f-d1788799009c.roa (raw, json)
Hash identifier: 5Y1Qwyb+tm55zt6TnXOLSRgKDV+x72JACKP3zXSgkkk=
Subject key identifier: D3:41:6A:E5:E0:38:24:E1:A6:36:01:72:DB:AC:97:62:0F:D5:1B:43
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D94AE838929E89B5936654120
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c11cf280-827d-397f-b54f-d1788799009c.roa
Signing time: Tue 21 Apr 2026 14:12:50 +0000
ROA not before: Tue 21 Apr 2026 14:12:50 +0000
ROA not after: Mon 20 Jul 2026 14:12:50 +0000
asID: 396549
IP address blocks: 216.87.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:94:ae:83:89:29:e8:9b:59:36:65:41:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 21 14:12:50 2026 GMT
Not After : Jul 20 14:12:50 2026 GMT
Subject: CN=d290d131-7f02-4b9f-989a-1d2cd01a8ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:d9:99:e4:01:47:fc:de:a6:77:2d:b3:3b:
01:16:68:87:2e:e9:32:a4:11:4f:49:13:e6:3a:2c:
cd:04:de:fb:10:7e:38:95:fa:79:30:f3:e2:5d:3f:
a8:33:96:ea:49:5b:03:6c:60:ee:cf:03:dd:35:35:
18:d7:1c:0e:bb:e6:96:66:2e:0f:90:f7:01:d1:7c:
fc:03:8d:77:30:51:e8:48:34:3d:54:71:a8:50:19:
b0:76:ec:d6:b6:f4:17:0a:ed:59:ee:f8:af:59:ba:
47:a8:9e:df:99:9c:ab:72:fe:9b:f5:ac:2b:d4:6c:
f4:af:f7:c9:a0:a4:45:be:b3:1d:64:75:dd:74:a6:
71:34:35:0d:b5:ce:cc:65:d1:f5:f3:0e:80:52:e1:
9f:01:26:60:c8:03:ad:73:0c:8c:91:fc:24:04:f3:
8c:35:9c:c1:a2:37:c1:63:fc:cf:36:52:a1:48:b2:
1e:31:0b:45:49:60:8f:c3:d4:04:96:63:5f:35:90:
fd:e0:fc:49:9f:b5:da:b5:48:01:42:3f:89:5f:ec:
c9:86:d1:74:c5:a9:91:8e:f4:fc:e9:e5:3d:46:5e:
c1:80:b5:2b:b3:71:e0:e1:cb:93:02:be:a3:f3:89:
b3:9c:d0:02:c8:34:ae:7c:0b:c3:3e:af:16:ad:93:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:6A:E5:E0:38:24:E1:A6:36:01:72:DB:AC:97:62:0F:D5:1B:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c11cf280-827d-397f-b54f-d1788799009c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:d4:19:76:df:f5:1a:dc:c2:9e:a9:e9:9c:70:f1:6b:88:33:
41:00:a0:01:83:e2:75:c7:b4:04:34:dd:3d:35:de:f5:21:1d:
24:fc:b2:5b:ce:ae:09:77:be:02:b8:89:97:92:14:a3:1d:9d:
32:88:c5:fd:0d:68:0a:91:7d:b7:e3:65:9f:19:a1:ac:0d:2c:
17:9f:4e:fd:40:3b:69:df:40:ce:27:2c:04:25:98:3a:b5:57:
8e:b4:b9:3f:04:ca:3e:1c:9b:1c:ee:16:b0:74:21:c7:da:42:
8b:0d:dd:59:45:ad:c4:13:44:4b:97:07:ee:d5:87:73:cf:df:
31:3a:09:b0:d9:f7:c7:02:cc:31:7e:03:c9:d2:24:63:1f:ca:
f4:5a:4a:40:34:81:c3:07:7b:54:17:d6:fb:b4:9e:ab:f6:28:
41:eb:95:f5:2e:d0:18:60:7b:47:6d:c8:dc:67:55:28:2d:e0:
f1:03:99:da:1d:63:b8:8c:8d:fa:ca:0a:c1:eb:27:6a:6d:f5:
12:c6:99:a5:07:d2:f2:8f:c1:69:74:01:08:75:13:1c:a2:c7:
2f:03:a2:9d:4f:9f:16:e1:b9:24:09:29:22:4c:de:26:f1:31:
40:6f:e6:e7:99:cf:86:32:11:96:22:5f:17:c9:55:6d:26:b4:
99:c3:c4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:11 2026 by rpki-client