
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa
File: 6638f874-6d79-393c-8793-4fb63bc1f4dc.roa (raw, json)
Hash identifier: tufA5f9DnrWdv5d5bKfuP/EoQwu0hWMa3JTTaAjj2xw=
Subject key identifier: D4:6F:03:12:2D:49:C9:F0:2D:E4:1B:6A:94:B8:83:A7:CB:AA:6E:13
Certificate issuer: /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
Certificate serial: 010D0C9F4328584DA97AB3954588394563B5C800
Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa
Signing time: Wed 29 Apr 2026 01:00:23 +0000
ROA not before: Wed 29 Apr 2026 01:00:23 +0000
ROA not after: Tue 28 Jul 2026 01:00:23 +0000
asID: 20
IP address blocks: 192.5.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a9:7a:b3:95:45:88:39:45:63:b5:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
Validity
Not Before: Apr 29 01:00:23 2026 GMT
Not After : Jul 28 01:00:23 2026 GMT
Subject: CN=e38a0d5e-2425-4dab-ba32-4429a648f9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:02:59:51:a4:4d:25:e5:0c:62:52:3d:8c:
b5:29:be:4c:88:03:63:61:7c:6c:f6:09:ad:d4:03:
78:78:6e:b7:c7:8b:7c:0b:f2:ef:7d:0a:06:fa:78:
30:97:f3:58:f9:97:41:97:fc:15:49:75:3a:3d:6c:
e3:6e:ff:61:a1:36:35:b8:6d:df:70:b9:5f:2f:00:
56:00:37:c0:44:5b:13:67:1e:b3:2c:a9:a3:80:e2:
ca:3d:d3:a6:89:35:a9:67:d4:68:07:ee:db:20:0d:
d2:d3:fb:e3:6a:a2:98:74:18:ab:23:bd:c6:ee:7b:
13:19:6f:03:ff:50:ee:46:b8:2a:41:6e:06:87:75:
f9:3d:74:e3:4f:38:70:30:a3:82:28:aa:1f:4f:c5:
6a:8c:22:6e:eb:91:48:8f:4b:31:81:2b:1a:2a:9b:
f6:12:61:03:f8:65:b9:5e:b8:df:ea:15:7f:1b:c8:
56:97:da:60:1c:aa:c9:52:89:d6:b9:10:2e:0d:24:
b1:20:90:64:39:c2:ce:67:dc:6a:da:a3:84:96:81:
05:0b:f0:cf:02:e9:96:73:f7:97:e3:2d:01:56:e8:
e2:c9:70:f5:cd:ef:fe:d0:9c:ed:ce:2f:90:54:c3:
ae:74:66:77:b6:55:ac:d5:a8:2c:a4:f0:19:8b:c9:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6F:03:12:2D:49:C9:F0:2D:E4:1B:6A:94:B8:83:A7:CB:AA:6E:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl
X509v3 Authority Key Identifier:
keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:5a:5e:2f:3b:4b:4a:93:09:9e:fc:d5:fd:b9:0a:b9:6e:3b:
7a:29:bc:e0:d7:9e:a2:4e:22:f6:78:4a:09:fe:e8:0e:85:c5:
3c:0c:4e:a5:29:16:13:39:95:19:3d:a6:d9:57:e7:af:a6:0e:
a7:ec:07:bb:e2:52:45:40:23:d4:34:60:07:00:06:8b:4f:14:
81:de:86:e6:3b:d5:07:57:0f:ec:02:6b:51:62:d6:bd:09:1b:
a0:d6:e2:1b:0a:e4:75:9f:c5:c9:a0:76:38:2d:5f:c0:ba:b9:
e5:6d:a8:e0:fc:d3:fe:61:8d:21:7d:89:df:fd:e3:00:75:e3:
53:f0:53:e7:07:8e:dc:63:f1:82:f6:bc:d9:b2:67:b1:dc:74:
59:01:a1:5b:6f:8f:06:b6:27:85:a4:4b:9f:01:27:1e:e0:3e:
b0:e5:c0:f1:ef:bd:db:ca:ff:43:c4:57:b4:30:93:32:24:a2:
ac:35:52:67:45:6b:ee:52:dc:7c:f6:e0:70:28:bd:f5:90:d1:
3b:a6:ec:42:bd:83:b5:1b:57:bd:27:b9:d0:cb:99:87:51:a6:
1b:98:27:31:45:51:c0:0b:d5:ed:fd:19:4b:ea:f7:66:54:09:
be:e5:4f:78:9e:20:1e:87:83:7d:55:df:1e:78:63:3d:24:3c:
da:1d:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:16:45 2026 by rpki-client