
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa
File: fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa (raw, json)
Hash identifier: 8gZ1xjLGfUxWwlJLJEHIn+nH5BmdUGMXB++e2vyAVjI=
Subject key identifier: 31:3D:81:2F:1C:E4:1B:74:75:E8:DE:66:66:9D:EF:F1:6B:C8:74:2E
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F4328584D343A1D7E48CF752516F58280
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa
Signing time: Wed 18 Mar 2026 01:00:33 +0000
ROA not before: Wed 18 Mar 2026 01:00:33 +0000
ROA not after: Tue 16 Jun 2026 01:00:33 +0000
asID: 55246
IP address blocks: 209.237.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:34:3a:1d:7e:48:cf:75:25:16:f5:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Mar 18 01:00:33 2026 GMT
Not After : Jun 16 01:00:33 2026 GMT
Subject: CN=d68d3431-64c9-4e70-ac19-85613674567e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:6b:be:0f:54:3e:ed:0f:7e:ef:f5:ab:05:
e0:9d:3b:3a:03:f4:3f:28:c0:02:94:47:14:6d:f0:
7d:5f:58:be:87:2d:ca:88:c1:db:9a:00:5d:e3:72:
af:cd:09:4d:c1:0d:29:74:92:bf:ec:ab:c5:b0:3a:
bf:6a:6d:7e:1a:7d:03:b2:a3:ee:f2:6e:cb:99:a9:
f9:8d:45:7b:70:92:e0:19:4a:c7:19:51:18:bc:0f:
c3:60:fb:75:29:d0:1b:4a:aa:29:ba:c3:40:4c:02:
96:52:4a:68:18:e9:f9:6d:0a:2f:49:2d:a6:db:97:
22:07:d7:4c:e6:a7:21:49:7d:4a:58:4f:c6:ee:b2:
17:3d:45:fb:fb:f4:6c:c7:f2:9a:18:fd:ba:b1:de:
f4:e8:69:66:ef:4e:5b:32:c8:68:17:03:64:b8:64:
47:dc:2a:24:c9:41:14:52:3d:b9:44:98:13:22:bf:
86:83:54:02:bb:a6:f4:99:e5:8a:49:4b:67:d3:e6:
40:78:64:ad:79:b0:bf:c3:05:55:43:27:69:5e:c8:
e4:0c:53:e6:ab:c6:1a:02:c1:c7:f4:14:45:8a:45:
2c:8c:e8:99:72:47:98:d2:a2:2d:22:fe:d0:63:40:
ee:87:41:16:13:38:56:12:99:67:ab:cb:a8:4b:68:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3D:81:2F:1C:E4:1B:74:75:E8:DE:66:66:9D:EF:F1:6B:C8:74:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:33:7a:90:60:6b:0a:68:be:56:af:ea:ab:38:e1:03:94:e3:
53:a4:42:6f:7a:34:69:7c:ea:07:6f:14:3a:ae:12:de:b6:a9:
f1:5f:37:ef:41:1d:0e:50:e5:07:ee:e0:6b:13:45:79:f6:89:
92:6c:13:cd:fe:72:4a:0b:65:1e:7b:b5:03:5d:0a:26:c8:44:
37:33:00:46:c4:16:1a:6d:14:95:5e:f3:08:a6:34:ed:9f:b6:
d2:e9:14:2d:d9:2a:f5:c0:84:b3:3d:90:29:48:86:67:cb:b3:
b1:71:3d:3c:9c:29:c1:78:92:63:3f:26:53:73:73:e5:5b:ea:
46:23:6a:f8:62:c8:43:47:20:f4:6a:26:82:35:ba:fc:b7:8a:
25:73:a7:ea:a5:f7:8e:62:4c:0e:34:ec:af:cc:e5:47:6e:d6:
b4:ae:37:69:3b:7f:a9:04:ac:cf:e9:09:0a:19:8a:bb:ee:59:
63:90:28:09:01:a0:5a:8b:83:85:3d:d4:fa:bc:49:c8:eb:17:
c7:7b:77:12:11:92:11:76:28:a8:07:1d:41:79:2d:51:f7:a3:
d0:ba:5a:61:ae:36:e4:00:94:2e:45:ab:3c:cc:f0:cf:72:71:
f2:8c:30:df:fe:b2:0b:17:c1:a6:6f:50:b6:33:6a:cc:c7:f3:
23:e8:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:17 2026 by rpki-client