
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa
File: ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa (raw, json)
Hash identifier: lFVn8b7XF9N1tjr6EYb9yFms9W8qfTR0RtskXLXq+Vg=
Subject key identifier: 95:B8:23:2D:01:3A:67:8F:AB:ED:66:FA:41:99:14:4C:F2:41:0D:83
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D3DFFE0520ABD40BB441D6B40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396564
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:e0:52:0a:bd:40:bb:44:1d:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=d8be4130-f4ec-453f-b111-54f11834a519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:fb:ee:58:57:76:64:00:91:0b:fb:7c:5e:
7c:48:07:a7:10:31:98:2b:79:e0:1a:64:17:fa:aa:
02:fb:ef:65:76:50:b9:06:9c:57:af:c7:46:a5:28:
36:19:38:8d:0b:e1:72:33:c2:f9:a3:07:e2:3d:cd:
21:19:53:6b:49:8b:6b:69:d1:57:04:5f:da:66:fc:
c2:1f:c8:4a:f6:eb:60:5a:46:a8:9e:ac:d4:6a:53:
8e:82:8b:63:3a:6a:aa:9e:ff:6f:48:ea:c9:99:13:
bc:81:42:b5:11:b4:dd:b4:fc:4d:40:35:6a:1a:1d:
8f:cc:8e:73:4f:44:b2:a7:23:4c:44:49:11:fe:6a:
3f:e4:c5:c5:8e:e7:bf:d6:0b:c0:8d:5c:e5:39:1a:
b2:2e:21:67:00:54:fc:cc:1b:8f:16:82:62:b5:97:
c0:ab:52:25:de:55:8f:4f:12:53:9f:d7:46:ca:4b:
47:3e:aa:eb:cb:49:53:e8:ad:5f:13:26:45:74:0c:
63:51:32:d6:8c:6c:aa:8f:30:f7:1e:fe:4f:10:02:
ce:ff:39:63:a6:0a:e4:47:52:c7:1d:f0:af:2c:a9:
8d:d8:f8:dc:75:dd:b9:47:d8:94:39:1c:af:7e:9d:
07:2a:b8:1e:94:c2:10:17:a6:96:57:e6:e0:da:fe:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B8:23:2D:01:3A:67:8F:AB:ED:66:FA:41:99:14:4C:F2:41:0D:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:83:3e:e0:63:ed:75:7f:f7:a9:fe:ed:b9:a6:69:46:e3:7c:
28:47:99:54:dd:c6:82:2b:20:51:92:bd:de:d7:22:4b:4e:9c:
56:47:03:1a:8c:0d:59:c3:ea:dc:36:23:0e:e0:ff:b6:0b:a9:
23:e8:a0:40:bb:b9:c7:c3:c5:a2:d7:75:80:01:22:9a:2c:e4:
53:65:fd:c7:d9:40:2b:21:8a:27:89:a3:c0:65:98:04:2a:02:
90:9b:c7:a2:33:a7:58:9b:da:91:55:3a:9f:6c:b2:e7:2f:e3:
ec:16:3b:d6:c1:db:2e:dd:de:7a:94:b5:7c:2d:d4:bf:d2:4e:
23:2b:e4:85:9f:4f:c8:9a:2d:1a:a1:b2:1d:04:8d:5d:74:b0:
91:bd:d1:d2:19:69:91:df:04:bb:83:7a:55:05:45:18:09:f4:
b5:41:53:27:c4:c5:1d:b8:5f:99:f2:9e:c4:ee:b7:9d:30:f1:
36:1f:5b:34:ca:05:8b:a7:76:f9:56:ee:98:14:f0:a1:6a:a7:
89:19:d5:05:41:bf:3a:38:5e:d4:bc:44:f0:31:e6:38:41:56:
aa:78:c2:bd:c9:8d:4a:86:35:a5:26:18:57:42:8d:21:93:55:
d4:d1:df:e7:ea:f8:66:f5:7c:22:03:8b:53:83:03:96:78:d4:
ae:d9:1f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:59 2026 by rpki-client