
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa
File: 84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa (raw, json)
Hash identifier: XY1uPAlstbiaz5SF59tGhBDbVTCVmmU+zeBsqc6OYh8=
Subject key identifier: 79:DB:14:38:88:11:45:42:81:2B:BC:FC:7E:B4:C4:1E:0C:7B:06:CF
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F4328584DA11AB2AC8F7959B3B2AB7E00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa
Signing time: Sun 26 Apr 2026 01:00:25 +0000
ROA not before: Sun 26 Apr 2026 01:00:25 +0000
ROA not after: Sat 25 Jul 2026 01:00:25 +0000
asID: 394727
IP address blocks: 107.155.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a1:1a:b2:ac:8f:79:59:b3:b2:ab:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Apr 26 01:00:25 2026 GMT
Not After : Jul 25 01:00:25 2026 GMT
Subject: CN=2c9dafab-05d0-4eb5-b4fa-1123db24760d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a4:ed:ae:ea:12:53:c9:ed:18:68:ff:ab:a8:
c6:e7:23:f2:89:01:d8:40:95:2e:03:33:67:c4:49:
7f:fe:fe:3b:33:97:aa:df:cd:f3:01:26:b0:18:bb:
70:54:bf:ab:02:bd:28:84:be:92:57:5b:1f:00:79:
87:a3:13:ac:f6:f8:c5:43:16:e0:9f:d4:1d:0b:9b:
61:8c:91:37:07:d0:de:25:ce:17:bd:a2:20:62:ae:
c7:62:bf:26:3a:a8:7a:58:10:b6:7d:c2:9f:14:53:
b9:23:cc:d8:02:64:60:4f:0e:b0:58:7a:21:58:f5:
8b:0f:f8:f1:ef:95:21:7f:19:19:45:39:bf:63:a6:
2e:42:f3:01:df:42:cf:a5:a6:5a:61:86:23:0a:69:
2f:90:bf:b5:cd:c1:89:44:52:a5:7f:f9:46:8c:96:
b1:56:5f:0c:b4:f6:6f:ed:a0:4a:46:31:83:22:38:
69:3a:0d:08:c2:5b:2a:5f:47:a9:d3:0f:e4:50:bb:
f4:46:22:73:82:1d:44:c2:38:8c:e7:df:e8:c5:1d:
01:d4:96:f3:f7:44:1b:26:f6:69:87:fb:6c:e4:1c:
7f:fc:95:91:73:4b:f0:7e:f4:78:d6:0a:4e:8a:52:
4b:e3:34:e9:1e:31:3a:fd:c1:0b:a4:d3:46:6c:a4:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DB:14:38:88:11:45:42:81:2B:BC:FC:7E:B4:C4:1E:0C:7B:06:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
107.155.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:d0:2f:4e:b4:e4:e4:f1:f1:fd:7a:ac:de:b9:c7:86:80:61:
ea:a6:37:11:27:87:ea:33:e9:33:03:35:90:38:46:d0:cd:e3:
cc:4b:5d:43:a6:63:72:49:7d:ba:1e:34:37:6d:09:9c:a8:9e:
3c:33:49:93:9c:20:6f:bf:17:cd:5f:da:80:4e:25:9a:38:f9:
15:0f:dc:2b:45:7b:0a:5e:4c:f1:a5:4a:a0:85:f8:54:16:66:
c0:bb:18:b5:4c:72:92:fc:78:3b:81:9b:b5:b7:a9:89:40:3a:
ea:8e:d0:10:b3:75:90:01:93:58:d0:9b:62:7e:64:5a:a0:02:
7c:87:78:27:ca:5d:c8:1d:1a:7e:22:16:dc:43:47:e6:e5:90:
de:01:40:7d:a3:01:60:3b:85:cd:9b:5d:14:bd:94:4d:93:cf:
e1:e4:18:88:4d:a1:8c:c9:bf:bd:e6:e1:b4:2d:5f:5b:8d:1a:
00:bc:03:ff:b5:6d:09:10:9d:2f:08:fa:87:91:11:39:75:37:
e4:a8:a3:3e:7d:a8:1a:06:99:c1:18:69:65:69:ec:b2:f6:79:
6b:3d:0d:e6:c7:df:ca:e3:c9:c5:8e:9a:50:d7:d8:32:ef:1e:
23:52:6f:eb:f9:c0:0c:c9:cd:4e:82:69:f3:99:d4:59:33:49:
e7:25:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:19 2026 by rpki-client