
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed410d5c-9050-3f0b-b282-a158fb24f69a.roa
File: ed410d5c-9050-3f0b-b282-a158fb24f69a.roa (raw, json)
Hash identifier: zZPPRwkOo2Q3Y5CWJbmPjxYVe3UmhzxnWALY/khlt24=
Subject key identifier: 04:E5:9F:AF:6F:4B:DC:2D:D7:E9:F9:A3:9B:73:ED:0B:CC:F4:18:A7
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D3DFFE0ADAB9696B737673400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed410d5c-9050-3f0b-b282-a158fb24f69a.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396583
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:e0:ad:ab:96:96:b7:37:67:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=d0bc7184-21a3-4ccb-afa8-93545acfb716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:53:8f:4a:95:46:dc:9a:2f:cc:9d:3a:2c:
10:89:21:74:dd:de:f2:43:a1:73:60:67:28:69:88:
e0:dd:56:4f:d8:6b:a3:b3:2a:38:d2:2c:29:f6:2f:
56:9c:d4:32:f6:03:a2:00:6f:27:5b:ed:e0:3e:b8:
2c:83:23:89:96:df:2e:12:58:e8:da:44:86:88:0b:
6b:42:23:e2:58:05:ab:a1:01:3a:37:22:91:10:de:
63:d0:d0:89:72:c7:1f:ee:4f:30:fa:53:03:58:63:
0a:1a:c3:12:b4:ba:a8:6e:dd:a1:56:b8:c3:04:18:
51:ad:09:c4:22:9a:51:ec:cf:6c:87:bb:3e:79:a2:
54:ac:59:ab:f4:3c:92:5c:ac:ae:3f:bf:6f:42:14:
85:a9:a0:a2:8a:3c:1e:c4:91:47:e7:cf:b4:08:f1:
9f:ab:3f:9e:67:7e:b5:af:b7:99:d8:b8:d8:fc:0a:
8c:bd:a7:fa:0a:3b:1e:68:76:a5:bc:79:00:0b:49:
31:e4:19:54:35:27:6c:04:55:6b:f4:d0:50:2a:ef:
57:5f:ac:df:02:37:14:9e:41:7c:ac:68:57:9c:4e:
27:95:44:49:68:94:98:8a:66:55:bd:c3:6e:f1:ee:
53:74:1b:5c:46:a7:1a:49:46:28:2b:6d:e6:bb:68:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:9F:AF:6F:4B:DC:2D:D7:E9:F9:A3:9B:73:ED:0B:CC:F4:18:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed410d5c-9050-3f0b-b282-a158fb24f69a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:94:d4:f7:c0:ba:5c:06:7c:b0:38:4b:e0:cd:c1:9f:73:a7:
94:db:22:49:e0:35:77:55:91:4b:de:b5:db:0b:75:e3:93:33:
1c:c1:71:72:7b:ef:4a:ec:43:f3:b7:24:aa:f0:70:72:a0:9a:
cf:2f:b0:70:cb:b6:cf:7e:60:e7:ca:0a:07:72:e7:1f:17:41:
80:2b:1a:d2:53:87:0f:60:0e:4d:8f:f8:88:a4:8f:46:14:ff:
b5:73:cf:0c:9f:08:b6:3c:53:a3:5f:41:30:d2:71:aa:1e:d1:
94:38:30:44:59:ca:7b:cf:db:f9:00:76:9f:12:f1:38:6b:94:
01:b4:6e:b3:52:11:16:e9:8c:2b:9c:ee:3b:c9:a0:b4:f7:50:
31:fc:80:55:d0:71:f5:e6:aa:11:b1:dd:33:25:22:ec:c4:b3:
a5:88:c0:c0:4f:a9:b0:ff:d8:54:d9:17:d6:1c:90:78:17:0b:
0e:15:8b:1d:74:8c:12:9e:6d:28:5b:27:c2:71:40:db:34:70:
ce:63:38:14:97:9f:15:50:60:a2:90:1f:3e:79:f9:90:78:02:
87:98:31:0d:39:d9:61:55:95:2b:9c:54:26:6e:56:c3:e5:59:
c0:47:f8:1e:1a:98:d7:69:68:b4:ad:eb:50:f7:f9:35:c8:d9:
95:36:84:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:27 2026 by rpki-client