
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d85eff2-872a-3fce-9803-16c5b3f46459.roa
File: 7d85eff2-872a-3fce-9803-16c5b3f46459.roa (raw, json)
Hash identifier: bXIhlFwV/ncRYpjC/PnRA4jSgUmqLqEXonYlVg61bTc=
Subject key identifier: 19:D0:1B:47:BD:00:60:13:60:5F:26:22:70:3A:3E:E4:AE:D9:BB:47
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584D3DFF80BDC458C0D40B7D75C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d85eff2-872a-3fce-9803-16c5b3f46459.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 9009
IP address blocks: 206.123.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:80:bd:c4:58:c0:d4:0b:7d:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=727854c8-31a3-49b1-8b99-dec77eaf15eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:d4:a7:03:ba:fa:f2:9e:01:4d:bc:9a:52:
86:65:47:60:a0:9c:c8:af:24:1d:4d:40:53:06:53:
4a:c1:ba:63:f2:e6:32:9d:98:d6:e6:81:c1:85:0b:
32:ff:b1:02:0f:e8:55:df:47:b7:38:f8:81:04:ab:
f7:60:c9:9e:dc:b9:34:d8:a3:6a:6f:e7:43:28:9c:
e9:47:ee:fb:cd:5b:1d:45:50:88:fd:18:f9:ab:e6:
54:f5:08:76:8b:27:f6:e4:08:d7:8e:0d:6d:08:26:
97:cf:dd:37:3a:30:e4:16:ac:fe:73:fe:5e:6f:7e:
ac:15:b4:e2:c5:b7:83:44:34:53:d7:5d:b2:54:ac:
a4:3a:81:a4:9f:2c:99:ac:c6:a5:ba:3c:fc:cb:d8:
fa:e9:6d:99:84:5c:55:48:7c:7c:e8:d1:98:f4:f4:
b4:4b:31:dc:56:d8:6c:6d:e8:54:5f:e6:71:7e:bb:
e9:37:ef:cd:0a:8d:64:66:f4:d8:d2:0e:e0:54:ac:
f0:04:c5:bd:31:96:98:55:ef:c5:2a:8f:bc:b6:28:
46:bf:c0:e4:e5:d2:d3:9f:fa:24:fb:36:61:41:9a:
e4:fc:6a:1c:c1:dc:51:58:9c:27:ef:7a:ee:69:54:
32:cf:10:4c:7b:34:8e:24:85:d4:d0:18:92:d0:08:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:1B:47:BD:00:60:13:60:5F:26:22:70:3A:3E:E4:AE:D9:BB:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d85eff2-872a-3fce-9803-16c5b3f46459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:4a:8a:27:20:71:e3:10:69:af:ac:5d:99:63:b6:a1:b1:df:
9c:63:a3:9c:2a:d8:37:54:98:de:61:b6:3c:f3:95:5e:ea:74:
3f:e6:9b:61:7c:ab:42:3e:7b:7b:b9:89:08:1b:dd:37:41:34:
a7:69:a9:0b:ce:84:3c:91:1d:73:49:04:c3:7a:ee:04:56:a5:
a0:30:b6:4f:21:44:a8:c3:b4:88:d3:3b:2f:3b:ae:65:a9:7d:
49:4a:23:e6:bd:13:3f:dd:e5:74:e2:44:60:cb:1e:99:b6:68:
07:a0:32:67:fa:d1:d3:e8:17:6d:f1:92:6d:c0:a2:cb:c5:c5:
79:8a:7d:92:75:f1:18:65:b8:f7:fb:48:6f:5f:d9:a4:a2:6f:
7c:a0:ef:46:cb:e2:d4:58:0d:61:e0:81:b6:a0:45:b1:2a:e1:
2d:16:6e:63:e3:4f:69:24:40:b3:27:45:9e:b7:ec:1d:26:69:
d9:12:30:fe:39:47:fc:ee:b9:b1:85:df:9c:fc:8f:b9:fe:b2:
f6:81:7f:21:6e:75:d9:97:ae:c2:24:43:a1:95:40:3d:86:2a:
eb:e0:3b:48:a6:59:07:70:80:58:4f:cc:da:bd:c0:01:5c:8b:
c0:53:50:27:44:a8:8a:e7:f0:6f:9e:8a:9d:58:61:3f:59:79:
a5:60:29:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:39 2026 by rpki-client