
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9f8c98c-25d0-31a0-bb97-ddf705459f81.roa
File: d9f8c98c-25d0-31a0-bb97-ddf705459f81.roa (raw, json)
Hash identifier: /WRbEs/nl1Jt9isbfp+UtlbufFnf2aQIhkxXtnfmecA=
Subject key identifier: 07:3D:28:04:50:A1:60:1B:12:9D:86:9D:9F:CC:C2:DD:7A:C7:9F:75
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D2BDA3D59804653301A3AD1C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9f8c98c-25d0-31a0-bb97-ddf705459f81.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 396606
IP address blocks: 216.168.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:3d:59:80:46:53:30:1a:3a:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=119ffdea-efe0-4d88-af9d-b2bbfaf3a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:1b:1a:61:8b:1c:d7:02:08:0c:bf:ba:1a:
8a:03:a3:68:1f:c1:c7:c3:cc:8e:b6:f3:95:b1:89:
cd:b4:e0:57:0c:fd:cd:5f:e4:8a:db:03:b1:1d:01:
01:1a:fd:86:e7:2f:ca:1d:29:d6:db:10:2e:a2:a3:
84:00:fe:6c:7a:1f:b7:64:e2:f0:ec:e9:24:af:9a:
b6:80:ab:1c:30:c2:9c:b1:19:b1:bf:8c:77:29:01:
37:36:4e:0d:e7:c8:b8:4a:dc:72:1f:5d:0f:a1:fe:
61:57:8f:e1:9b:d1:41:1e:3c:fb:f6:c3:63:57:90:
b3:50:8f:61:c1:a7:6c:0b:22:af:38:e4:b0:e4:10:
1e:4b:8c:4b:99:4f:4f:83:d1:28:0c:d4:e4:54:0c:
03:d9:af:52:d1:07:b3:0f:0c:4a:81:09:c2:5d:56:
00:6e:92:af:e1:08:01:f8:b4:b6:0c:fe:d8:6a:80:
ef:46:4b:86:a2:d2:b7:51:0e:d6:e1:15:a1:09:d7:
d3:5b:65:37:ea:ee:e4:44:d1:43:6f:e7:02:a8:3d:
19:f7:f4:27:bf:a4:d9:92:80:c0:a1:5c:11:58:0d:
be:d5:05:45:5d:9f:2c:a6:99:fe:ed:7d:de:53:7f:
4c:3c:32:c6:c0:d1:88:14:c3:a5:e2:8a:b8:cd:24:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3D:28:04:50:A1:60:1B:12:9D:86:9D:9F:CC:C2:DD:7A:C7:9F:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9f8c98c-25d0-31a0-bb97-ddf705459f81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:90:c0:27:35:8e:41:cf:ef:cd:e6:34:65:4b:4c:86:52:b6:
4f:24:44:24:77:37:35:4e:7f:63:78:3e:f1:ba:31:37:c1:e6:
a2:24:a4:f5:bb:f3:e3:3f:24:cb:fc:d0:1a:44:8d:dd:91:be:
ad:e4:9d:b5:e9:cd:f0:f2:3a:1f:fc:5e:c1:13:85:f3:f2:af:
36:4f:68:fb:48:0b:10:cb:d5:57:c9:aa:a5:0a:cb:86:31:44:
96:f7:71:e2:44:4b:bf:31:21:9a:71:3b:d9:0b:d8:15:2f:e6:
d6:4c:06:71:7a:50:96:cb:d4:be:52:d7:9e:0d:3f:d9:65:ac:
18:9f:dd:9b:11:16:51:53:26:09:b6:ad:b2:c2:df:21:fa:1f:
b6:b4:95:bf:aa:f2:f5:5f:1c:97:43:12:8a:91:94:e7:6c:81:
88:db:14:0a:f5:41:32:53:3e:b8:fb:94:21:df:c1:36:f6:65:
79:ee:07:d8:9d:68:6b:66:65:38:ea:27:e1:36:6c:33:59:b1:
95:dc:c5:f4:18:d4:a6:4e:a5:f0:ea:ee:80:57:4e:22:f9:03:
d8:8b:ee:19:61:b3:90:af:68:d4:76:93:c3:9f:65:cd:c1:f0:
16:88:04:d0:e9:70:37:b4:77:a7:17:1b:23:2a:64:4b:a0:7b:
ca:31:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:31 2026 by rpki-client