
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/f6887cc6-f116-3490-9c95-cc581861c8b5.roa
File: f6887cc6-f116-3490-9c95-cc581861c8b5.roa (raw, json)
Hash identifier: +paLKwbNugzp/7wml1pvPUZhZ52wODkhQ7K/erv/dg4=
Subject key identifier: 8A:5C:05:DC:E3:E8:27:5D:96:F1:AB:1C:28:84:5B:7C:BF:66:3C:28
Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial: 010D0C9F4328584D492A518EC7582E15C18BC000
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/f6887cc6-f116-3490-9c95-cc581861c8b5.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 14555
IP address blocks: 198.23.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:51:8e:c7:58:2e:15:c1:8b:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=252c4a06-d522-4e9b-8fef-ad75ef743236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:a2:13:6a:31:e7:87:65:c3:ef:1a:1b:5d:
6c:2a:18:37:07:1e:4f:ab:f1:c3:45:84:5e:92:82:
ae:d5:38:70:e1:ab:b8:c5:19:1a:9c:0f:15:cf:6a:
80:68:18:ff:af:9f:8f:26:ea:a8:e0:63:09:f0:81:
02:5a:6a:9b:93:d7:a8:6d:50:63:53:0b:61:9d:4a:
7f:71:e2:fe:7d:48:9b:50:46:36:1a:80:93:8f:63:
dc:2b:f5:1e:33:6c:f8:0f:e3:b9:a5:83:9c:a8:d9:
b4:45:57:54:3f:09:72:25:df:87:c2:52:f9:8e:ca:
54:6d:f1:68:ec:30:b7:7a:6a:40:5e:38:e8:65:39:
23:fc:e9:dc:19:aa:d0:7c:d0:a5:5a:d1:e0:a9:71:
7c:bc:9c:69:59:7a:83:a9:f3:f4:85:1d:8a:89:6a:
5d:f0:98:70:2e:17:08:59:83:34:a2:6e:db:1a:7d:
9e:3a:62:cb:ce:1e:83:6f:8d:35:f8:be:a3:83:01:
ec:6e:c8:47:03:43:ba:02:8f:83:b0:d5:d8:d0:ac:
80:04:98:fa:45:03:bb:68:f7:86:42:13:17:af:08:
47:f8:16:67:1a:0b:52:93:4b:b4:b3:ae:79:53:ef:
f2:57:c1:47:77:17:ea:99:bd:3b:35:6d:e6:96:ec:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5C:05:DC:E3:E8:27:5D:96:F1:AB:1C:28:84:5B:7C:BF:66:3C:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/f6887cc6-f116-3490-9c95-cc581861c8b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
X509v3 Authority Key Identifier:
keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.23.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:c9:96:5e:64:dc:26:89:57:5a:d2:31:3d:0f:67:3d:28:b6:
19:ff:9d:21:d3:fa:69:04:bd:8c:d6:ac:4b:5b:5e:ba:ba:64:
1d:c1:c5:b7:b2:93:cb:22:01:29:d1:76:02:a2:be:1b:ce:28:
b7:bc:55:5f:df:ca:e1:70:51:45:05:67:cf:f9:ad:e9:1b:ee:
88:ac:b2:f6:ae:be:bc:70:d7:34:74:82:33:23:df:41:47:fb:
03:32:54:3b:fd:59:00:f6:6b:a7:11:12:73:cf:c2:d0:48:88:
77:01:d2:35:7d:55:80:68:87:b4:8c:bc:c9:c6:4f:52:1c:b3:
1e:9b:a4:93:84:a1:c9:d8:65:8b:d1:6d:57:47:cc:96:f1:9e:
18:79:95:cd:c4:2c:f6:55:06:83:c3:3c:a1:9a:b7:c1:99:b0:
09:72:58:39:40:07:e6:91:dc:ce:b5:20:92:36:e5:2f:c1:2b:
f1:48:8b:ed:a2:27:12:a1:70:03:14:a3:9a:8b:3b:fd:39:ae:
57:67:56:44:93:89:a4:8a:c1:02:bd:b3:1d:fc:96:12:8b:e9:
ed:78:ca:a6:4f:42:4a:71:06:d3:57:bb:2a:01:59:cc:51:33:
55:e9:f4:56:8e:e6:8c:5a:a8:d5:6f:02:da:c7:a4:ff:a2:6b:
50:19:fd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:30 2026 by rpki-client