
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa
File: f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa (raw, json)
Hash identifier: WrjXdLjF92swaYTZ1hvcpeNO2KoKs9GwD/MuWlesWa4=
Subject key identifier: 0F:60:81:7A:7D:0A:EE:E5:A2:A6:CE:2A:85:89:CA:FB:B6:56:09:AA
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D3F64FE4FEF50F2CD7ADA9590
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 396610
IP address blocks: 216.87.145.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:fe:4f:ef:50:f2:cd:7a:da:95:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=36f63cb1-f2bf-43c7-a8ba-8c63c183c9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:e7:c4:6f:37:45:d5:9c:c2:3f:07:91:bf:
56:57:a0:9d:1d:82:8f:36:dd:24:c5:8c:9b:8d:cf:
21:94:fd:ae:26:dc:03:9d:c4:cd:c6:08:be:e7:0f:
4e:0e:5a:cb:b7:80:1c:eb:09:88:be:f0:98:f6:07:
14:dd:ca:f9:05:e7:85:c5:a7:cd:8b:c3:c9:f8:c4:
0d:0f:e8:8a:4b:7e:3b:1a:b6:3e:de:b9:a4:cb:22:
96:af:8c:1b:52:a1:e4:94:3d:50:a9:74:d1:15:82:
2d:7e:8e:d2:27:70:d9:3d:8c:9a:6d:f7:23:ae:d0:
3b:61:8b:4d:b6:23:6a:7c:71:9c:d8:50:96:33:51:
cf:61:2b:c1:ac:2f:a6:0a:d7:2a:b6:15:00:e2:1d:
19:44:d3:98:78:fd:2e:04:9d:77:13:02:4e:0c:d2:
a5:fd:de:7f:dc:76:62:11:21:49:75:5f:f5:6d:89:
06:99:06:47:97:a8:61:34:41:37:c2:a8:fc:f3:89:
3a:05:0a:50:33:ec:ef:16:2e:8f:44:ee:61:c2:70:
5c:3f:15:07:cd:1f:08:ce:0b:b6:59:a9:bb:9a:c9:
d6:d9:10:48:93:2d:41:e3:e8:46:63:5b:3b:76:95:
4d:b8:b2:af:1e:03:45:0d:c3:19:45:70:ab:c3:6a:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:60:81:7A:7D:0A:EE:E5:A2:A6:CE:2A:85:89:CA:FB:B6:56:09:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:75:70:3a:81:e5:6a:4e:36:ab:6a:c9:b6:f8:18:93:fd:19:
e6:88:a8:be:4c:9b:06:46:87:db:9c:80:5e:79:55:4c:74:6c:
26:30:ac:18:89:66:0b:50:bd:66:b5:61:ca:d4:e7:34:6b:34:
74:e9:a5:29:cf:1f:d8:cc:57:32:af:7d:a4:93:f6:c1:55:34:
b5:4b:d1:91:3d:d0:bc:92:0a:87:2a:d6:fe:15:f9:c3:ea:c4:
92:24:38:92:e5:92:bc:b9:de:32:1b:ba:31:5f:d8:b0:3c:f6:
c0:a7:62:b8:31:71:43:42:1f:8b:bc:48:e9:7e:0a:84:d0:dc:
59:36:95:0f:f9:1c:78:6f:36:8a:3e:e8:3d:aa:51:6c:43:88:
7b:b3:74:f6:c8:f0:96:64:ce:e0:fa:7f:21:75:05:8a:52:5c:
0d:93:03:c5:5e:46:b3:f5:e6:f9:e4:35:7b:d3:ff:ae:47:ab:
5a:c6:10:3e:a7:c2:12:38:d4:33:e8:68:09:1d:c3:63:57:0a:
4e:bb:fc:4e:dc:6b:bc:2f:11:81:35:1a:3c:49:0e:32:de:21:
e6:28:14:2c:04:87:d5:3e:4f:32:82:97:d4:fd:8a:43:54:4d:
aa:f5:38:2a:c9:a8:53:bb:cc:89:46:4c:72:65:35:ab:4e:68:
5b:14:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:26 2026 by rpki-client