
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa
File: fb966e1b-fa13-37b0-a49e-0b319577773b.roa (raw, json)
Hash identifier: IHk9BOTDcffuWu2J4btrBq84TEtWHgI4A20TUXiUMhw=
Subject key identifier: 1F:71:90:47:57:42:DF:EC:3F:92:3B:5B:48:C5:6E:6D:88:04:63:8E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584D91C00FC4380C825234E96AC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 212238
IP address blocks: 104.250.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:c0:0f:c4:38:0c:82:52:34:e9:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=06bc9e4c-1745-42d6-9bf4-7839ce75333a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:f5:c9:38:32:01:c3:08:12:71:de:3a:c9:
22:68:69:0b:cb:82:8c:38:76:61:5a:7f:27:e2:36:
9d:eb:ce:44:3a:0b:a4:09:04:48:b9:86:c7:80:ca:
80:cc:62:12:ff:33:f0:be:3a:cf:67:d1:fe:4e:68:
a1:77:09:96:d0:82:cc:e6:fa:a3:d8:60:12:30:b7:
39:64:10:5f:ae:f3:5e:57:3a:55:86:8e:d8:8a:c5:
18:b7:c8:05:87:5f:2f:77:1b:d7:13:71:7b:78:c4:
37:18:03:29:b1:84:46:cf:a1:fd:e7:42:16:ce:39:
95:a7:78:fd:d3:78:bb:68:25:a2:7c:f7:1d:4c:ac:
a9:e4:69:32:1b:54:ad:00:2d:91:80:a2:67:d9:86:
a5:01:75:bb:66:8b:21:d7:af:d2:be:27:dc:1c:28:
15:91:dd:ac:3b:d5:25:58:13:6d:30:b4:7b:2b:4b:
18:36:a3:31:20:1b:6f:bb:9e:21:6f:f5:45:31:91:
12:1e:a5:07:f8:c9:58:92:e5:55:67:bc:cb:5e:49:
ee:e0:b2:88:2a:2d:36:c9:31:ef:0f:c2:ea:9f:8d:
c0:f9:a0:1d:04:43:54:05:01:e6:56:67:ab:e6:54:
23:c2:28:ba:3d:02:7a:30:fc:ed:28:d6:1e:67:6d:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:71:90:47:57:42:DF:EC:3F:92:3B:5B:48:C5:6E:6D:88:04:63:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:5a:a3:39:52:33:02:e9:c9:d1:e0:47:14:b0:ee:ee:f8:d8:
c6:3d:11:63:39:ad:ed:78:76:ca:f0:28:f1:9e:bd:86:02:a3:
89:6d:42:78:34:e4:3f:37:15:9a:ee:d9:7c:08:90:b3:96:cb:
a1:41:ad:e7:10:73:b7:4e:c5:1f:80:f3:fa:80:89:46:b6:43:
e5:ae:6e:e2:59:99:01:0b:a5:11:8c:de:fc:88:db:cd:c4:1e:
80:77:2e:7c:af:8d:4b:38:4e:82:ab:e8:1a:52:4f:0e:d5:b4:
a8:f5:37:a5:4f:ef:33:bb:17:45:99:1f:ec:2f:35:bf:79:9c:
54:68:fe:fb:89:74:dc:6b:2a:64:da:02:3d:c0:75:dd:9e:25:
1e:56:2f:e7:27:7a:f3:65:bc:f1:18:ee:c1:09:95:3e:81:e0:
5f:7c:43:bc:1f:a9:77:23:ae:c0:3a:2e:0a:43:5d:1e:97:54:
4a:24:6f:17:91:2a:e5:03:33:02:2d:e7:60:bf:f9:82:b2:88:
5e:7d:7b:84:9d:19:18:20:8d:d6:23:2b:fb:b9:76:e0:1c:76:
2d:52:e7:b2:ce:97:57:27:ae:e6:28:c5:86:8c:c4:23:27:ee:
2f:c5:4d:fe:c6:76:76:94:78:d5:b0:29:f2:fb:f8:63:0e:2f:
ae:09:5b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:40 2026 by rpki-client