
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd03f8a4-e55d-35fd-9f0c-f3534efc9dad.roa
File: dd03f8a4-e55d-35fd-9f0c-f3534efc9dad.roa (raw, json)
Hash identifier: nyVmisCX2sbT74AabRRnN/zY0O7hXsIpP8ImtocNmoc=
Subject key identifier: BE:2C:2D:93:CF:53:C5:42:E1:B7:E3:BC:20:58:27:DD:3D:CA:99:F1
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D94AE88BC05BC9CC6D1FDE980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd03f8a4-e55d-35fd-9f0c-f3534efc9dad.roa
Signing time: Tue 21 Apr 2026 14:12:53 +0000
ROA not before: Tue 21 Apr 2026 14:12:53 +0000
ROA not after: Mon 20 Jul 2026 14:12:53 +0000
asID: 36632
IP address blocks: 216.87.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:94:ae:88:bc:05:bc:9c:c6:d1:fd:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 21 14:12:53 2026 GMT
Not After : Jul 20 14:12:53 2026 GMT
Subject: CN=e92809d4-1c18-42ed-b3bf-849bcd72aecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1f:68:42:c9:93:cc:10:b5:59:5c:54:2b:fc:
04:6b:a0:98:7a:fa:4b:9c:10:9c:f7:cd:8f:1d:0d:
fc:5e:97:31:f5:4f:58:b3:47:e5:84:29:e4:ce:d3:
9e:9b:cc:9f:41:c2:09:0b:bc:23:91:21:45:d4:31:
5e:12:45:5b:83:56:0e:99:0a:21:89:b4:17:dc:10:
55:51:fe:bb:1c:0f:b7:72:ee:db:84:a4:6a:e2:9e:
2c:1c:af:bb:7d:35:97:f4:de:eb:73:d8:b9:8c:d7:
ef:de:13:6a:01:80:f2:e1:26:0d:8d:d5:f9:9f:4d:
ec:84:bd:d4:f1:d4:b5:96:85:65:0b:b8:50:de:8a:
a1:17:86:77:55:52:e5:64:61:03:21:8d:ea:7c:5f:
36:45:90:b2:40:3e:28:05:28:86:a2:eb:de:43:4b:
af:a0:80:47:e3:78:35:c2:48:65:c5:45:74:3d:94:
56:25:f4:6c:73:11:e3:61:35:28:3a:f6:8b:16:6d:
b7:ad:9d:6c:0c:d5:ec:6c:e3:45:9a:da:79:64:2b:
70:b9:01:07:b9:43:1d:0e:f3:e2:69:a6:b3:79:84:
3b:05:41:57:9b:5f:71:c5:0d:a9:78:17:18:11:cb:
40:d3:13:ee:fa:d7:27:ab:3a:b9:ee:f3:de:e6:47:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2C:2D:93:CF:53:C5:42:E1:B7:E3:BC:20:58:27:DD:3D:CA:99:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd03f8a4-e55d-35fd-9f0c-f3534efc9dad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:61:45:04:69:d0:64:2e:01:0f:a5:82:36:14:97:8b:46:4c:
b5:97:6b:8e:16:b1:71:9b:52:4e:b8:a4:6f:44:64:1e:14:4e:
03:cf:45:e8:36:89:90:79:93:9d:38:4b:e4:8a:76:0d:f0:67:
84:28:64:82:5a:f1:05:69:61:9c:fb:2d:ce:6e:f2:17:f6:4b:
39:7c:5f:9a:32:66:63:53:c5:d0:f6:cc:29:e8:2c:d7:00:65:
a3:09:63:70:8e:01:cb:e6:b6:70:4a:d0:88:03:b7:d8:62:3b:
13:ad:3a:11:ec:02:d0:38:31:ca:00:cb:9b:d8:39:b9:09:2a:
fe:43:81:17:57:e8:1d:ef:91:d8:41:4e:6c:f9:ff:a8:e4:43:
b4:18:5d:1f:ce:a6:28:41:8f:ed:22:2a:dd:fb:86:a6:31:6d:
15:86:91:22:a1:5c:34:2b:10:91:dc:0c:ec:75:54:1c:2a:b6:
de:05:c4:e9:e9:de:ba:ea:54:c4:03:0b:16:df:5a:4a:8e:9d:
55:0c:8f:6e:cc:e7:0a:09:94:d4:a4:54:ba:36:ed:fe:f9:51:
f9:71:9b:40:ca:1c:82:fc:12:85:d0:fc:14:5c:0f:85:a7:f1:
82:c1:f6:24:66:da:26:52:bf:f2:c7:2e:56:11:06:79:4a:40:
5b:57:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:47 2026 by rpki-client