
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/5b98e6bb-effb-3add-96c0-7318b5349fc0.roa
File: 5b98e6bb-effb-3add-96c0-7318b5349fc0.roa (raw, json)
Hash identifier: 3whtcVN1xz96gXWYHTDM0oGItvM9dqnVR6YNBe3bY2A=
Subject key identifier: 89:07:01:FD:05:30:74:DF:31:BB:67:74:86:03:2C:3B:DD:66:9B:F6
Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial: 010D0C9F4328584DCAFB067130F4AD7C0CEC6080
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/5b98e6bb-effb-3add-96c0-7318b5349fc0.roa
Signing time: Mon 11 May 2026 01:00:24 +0000
ROA not before: Mon 11 May 2026 01:00:24 +0000
ROA not after: Sun 09 Aug 2026 01:00:24 +0000
asID: 399244
IP address blocks: 104.204.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ca:fb:06:71:30:f4:ad:7c:0c:ec:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Validity
Not Before: May 11 01:00:24 2026 GMT
Not After : Aug 9 01:00:24 2026 GMT
Subject: CN=9927d340-2232-40ed-b022-ea8bab70d29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:8f:33:a1:71:59:4b:6d:8a:9a:7d:b5:2d:
69:b9:d6:87:6f:53:ad:f9:ac:3f:35:74:25:6a:c8:
50:84:29:a1:f3:c8:bb:9e:12:fc:3c:f2:47:ed:66:
87:93:55:b7:9e:31:ce:ae:e3:d1:3f:81:fc:93:5e:
a8:58:d4:cc:90:45:3a:0f:2f:e1:6e:9c:04:1d:15:
fa:80:55:00:5f:82:a8:75:01:88:92:fe:2d:e6:4d:
b8:eb:93:b3:dd:48:37:12:66:1a:49:fc:35:7d:c5:
0d:d8:ba:6e:ce:99:e3:40:18:c9:8b:ff:93:c1:10:
ca:32:41:e9:85:f2:12:3d:39:bc:94:7e:26:0b:1d:
3b:45:97:c1:74:55:d3:78:4a:a9:fb:b0:02:5e:a4:
25:b6:8b:41:6d:6a:73:23:ec:ed:0f:fa:75:51:89:
53:ef:e5:27:3c:55:b8:5f:fd:04:c2:4e:9b:49:8a:
4f:8d:d2:2e:d0:1b:19:cc:e4:03:bd:1d:bc:28:3d:
06:80:6b:4b:f4:cb:4d:69:73:55:0a:50:5f:9a:13:
95:76:cc:af:46:ba:6c:38:f1:13:7c:d3:a0:55:cb:
8e:6a:30:9f:83:89:b9:27:ab:c1:a4:aa:bd:69:82:
80:8c:ad:0a:20:f9:6c:5a:2a:64:89:24:76:2a:23:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:07:01:FD:05:30:74:DF:31:BB:67:74:86:03:2C:3B:DD:66:9B:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/5b98e6bb-effb-3add-96c0-7318b5349fc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
X509v3 Authority Key Identifier:
keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.204.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:5d:69:16:49:cc:91:a3:ef:68:59:75:1e:80:db:f2:1e:1b:
5d:57:19:6a:4c:a2:25:ca:05:a1:a7:97:9c:8f:57:25:a4:97:
a6:33:be:55:ab:4b:92:21:bf:5d:7d:9f:8a:59:3f:ae:04:b3:
1a:40:01:11:67:e6:fd:01:5c:e0:b7:ea:a4:47:74:77:78:03:
30:9b:84:fd:80:57:6e:f0:89:58:ff:f3:36:3c:2a:7c:e3:22:
37:11:91:dd:51:e3:0b:30:ca:8a:8d:0e:64:72:9c:73:21:01:
b8:8c:12:39:9f:b1:a3:f3:b7:c6:a5:20:8f:9f:c7:c6:8e:4e:
5e:48:00:a5:6c:22:ef:44:22:17:e9:7e:e2:70:c4:8d:c8:ce:
08:2d:1e:89:d8:8e:0a:0a:3a:c1:03:0f:bd:13:97:fb:bd:b7:
48:6a:17:9c:e2:74:5e:e2:1f:79:11:53:b3:38:31:a0:bb:5f:
53:f3:a5:ec:73:bd:d6:cd:91:0f:62:47:cc:b1:d2:20:03:ef:
cb:5b:4a:0a:4e:c1:71:90:6b:6c:71:01:bb:ae:07:d8:dd:19:
fc:3e:47:78:ad:ba:b5:32:23:75:27:b3:52:8d:c9:4f:80:e1:
63:09:db:09:75:fe:b4:78:86:94:ff:01:14:83:41:8e:e9:a4:
46:ff:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:39 2026 by rpki-client