
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa
File: 38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa (raw, json)
Hash identifier: 0Lyd2MkZVhjKsNZD6VGXOnxf4X6DXHlsuhP//TQ3knQ=
Subject key identifier: AF:E8:A2:DD:EC:C9:EA:62:6B:90:D7:62:68:CE:CB:15:B7:CC:29:84
Certificate issuer: /CN=7cac21fa-fb8a-4352-9772-6995e344f72c
Certificate serial: 010D0C9F4328584D3F64F0089718D5F9B3A72980
Authority key identifier: 4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 20055
IP address blocks: 205.196.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:f0:08:97:18:d5:f9:b3:a7:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cac21fa-fb8a-4352-9772-6995e344f72c
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=4c309cb4-c72d-4630-b61b-a5b9985cd201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:f0:88:1c:a0:00:2f:31:88:c4:01:98:78:
d7:5b:08:57:6c:86:e8:b7:6b:5c:27:b4:ba:c1:f9:
a1:86:59:56:96:e3:d1:fc:89:91:cb:b5:2b:4a:54:
07:d4:2c:cd:b7:61:3d:d2:1d:d8:00:ae:fb:5e:98:
0d:a2:8b:b7:91:8c:83:06:63:3e:8b:36:86:b2:1f:
e4:7c:41:24:a7:32:92:98:40:3c:ce:46:f9:64:3b:
70:8e:94:30:12:d7:f6:c0:e4:ac:ff:dc:1a:2f:6e:
80:d0:e4:7d:b9:9a:d7:0e:33:77:95:cc:e7:c3:98:
08:29:f0:04:28:15:b0:8c:54:7c:fe:c1:79:40:78:
2f:c3:3f:37:bb:8c:6a:32:40:5b:85:bf:3f:d0:d7:
09:f7:37:ac:9e:c6:39:45:c1:81:c3:62:58:3f:65:
92:46:ae:cb:01:18:2a:f1:d1:58:96:41:fc:12:16:
dd:be:07:37:65:02:c3:a2:9f:50:c3:34:cc:50:d0:
99:13:5a:f2:af:07:35:89:de:55:d1:e8:5e:59:63:
8c:03:b1:e3:91:36:e0:82:d2:15:80:d1:50:85:48:
d9:78:0b:c8:f1:72:14:f9:6c:aa:45:5d:76:f2:f9:
ac:52:15:fd:61:fc:c2:c8:7d:16:eb:56:b6:88:2e:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:A2:DD:EC:C9:EA:62:6B:90:D7:62:68:CE:CB:15:B7:CC:29:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.crl
X509v3 Authority Key Identifier:
keyid:4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer
sbgp-ipAddrBlock: critical
IPv4:
205.196.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:36:1e:01:27:80:55:cd:13:da:fa:e9:2a:1c:0d:8b:c1:d0:
28:62:50:90:dd:a7:ee:0f:e5:ae:82:1c:c7:81:d9:13:7d:51:
69:27:8a:d0:25:73:60:0c:c6:18:9b:c2:49:2f:1c:13:76:85:
58:46:ba:0d:3f:98:84:67:fa:93:60:9b:90:0a:a5:d4:a4:9a:
a5:45:07:03:bf:05:b9:f3:68:54:ad:a1:ac:b9:a2:f5:f8:12:
2a:e0:a7:b7:62:c9:02:42:40:bb:10:44:5b:ef:8f:16:aa:74:
76:e1:c4:4f:e2:90:1f:f2:3a:a1:b2:fe:09:b5:eb:24:08:8b:
b2:91:6c:c8:5e:53:6f:6a:ce:1e:cd:7b:3e:92:0e:3c:34:e8:
08:1d:fc:99:fd:e1:22:8f:63:5b:6f:2f:3d:fa:ae:28:11:58:
ac:b8:64:ac:91:e8:9d:eb:39:dc:c5:52:66:c3:45:93:08:b2:
f0:a4:f9:51:6e:5b:d3:c3:eb:3c:8d:ee:41:66:53:ac:99:b8:
3b:19:f1:65:19:b2:c9:c8:5e:41:07:08:79:ba:3f:68:24:c4:
00:08:29:6d:40:8a:3f:f5:aa:2f:b3:75:eb:b5:d8:7c:51:80:
a4:c3:90:93:9c:3b:c2:0b:ae:78:b1:18:10:1a:66:4a:01:0e:
92:26:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:45 2026 by rpki-client