
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/ba2dca03-8f89-39dd-b9f8-69698e0215ae.roa
File: ba2dca03-8f89-39dd-b9f8-69698e0215ae.roa (raw, json)
Hash identifier: cs5+5NBnODBf/MO8aPkQQE0f097P19nxnCVN4wHNcDE=
Subject key identifier: 4D:71:44:B9:11:66:91:E2:02:6A:FE:5C:73:8B:A8:F1:98:E9:DD:BD
Certificate issuer: /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial: 010D0C9F4328584D8AC55BBE3B4D6360A10D14A0
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/ba2dca03-8f89-39dd-b9f8-69698e0215ae.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 10361
IP address blocks: 69.191.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:5b:be:3b:4d:63:60:a1:0d:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=41e78a31-3557-418c-b42a-74020decf565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:d0:10:e9:f7:96:77:a9:f1:89:54:01:13:
28:a6:13:d2:d6:d6:80:bd:22:48:43:0d:28:a1:0a:
1e:9e:61:8e:f6:3a:40:49:59:19:0f:27:d7:eb:77:
e5:4f:d3:59:df:f1:d0:87:23:e3:17:48:3f:55:a9:
89:93:51:39:ba:99:a7:e6:d8:d7:88:26:18:77:75:
c6:dd:d2:e1:49:32:ae:4c:d5:18:63:c0:d5:2f:86:
df:e9:d1:b9:f2:e7:f3:8a:b5:fd:e7:74:b7:8e:ce:
7a:6b:a6:ca:07:68:11:00:34:c6:c3:80:ee:ac:b6:
12:5d:96:51:8b:2e:a9:43:4d:c1:02:65:bb:7e:00:
f6:74:ac:11:1b:e1:8c:c4:ee:dc:16:4b:42:9c:13:
f7:7c:fc:98:33:06:ca:80:14:b4:fc:d7:be:11:a1:
ce:1e:39:b0:06:03:31:ee:84:ad:de:5b:08:54:2f:
8b:ef:88:55:df:22:4d:64:37:f7:ed:22:47:b7:77:
88:c5:ab:45:77:b0:46:8b:75:e4:e6:70:b0:d6:f4:
70:a1:81:df:71:7d:57:cc:da:de:7f:50:b6:b9:93:
87:90:38:fc:ed:f7:ae:19:cb:5c:25:33:aa:4c:3e:
f2:64:c0:a3:0c:3b:1c:31:ab:78:fb:2d:75:52:d5:
01:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:71:44:B9:11:66:91:E2:02:6A:FE:5C:73:8B:A8:F1:98:E9:DD:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/ba2dca03-8f89-39dd-b9f8-69698e0215ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
X509v3 Authority Key Identifier:
keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
sbgp-ipAddrBlock: critical
IPv4:
69.191.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:97:05:35:b9:98:52:f8:a0:ac:22:58:16:b1:a5:5e:d0:33:
49:c9:1d:af:32:68:cc:eb:48:31:22:51:b9:f8:ae:e6:a2:ee:
c6:a0:4f:88:49:f3:dc:06:f5:13:b8:00:ba:2c:e8:80:24:f9:
a8:48:68:1e:06:2d:2e:bb:53:a2:99:f8:c5:ef:ed:52:59:47:
15:ea:3c:08:0f:02:15:5f:ed:0c:22:2f:2a:6f:bb:31:3a:6a:
6a:b8:b8:01:64:cc:f2:34:b6:8c:8c:84:2e:de:21:5a:4d:0e:
53:ed:7b:bf:f2:c1:dd:0d:a1:37:b9:93:2b:85:cf:e2:00:0e:
59:c6:6c:4f:4a:fe:3f:1f:2d:f0:c4:20:da:73:2b:39:76:44:
1e:c8:c5:f2:4b:f1:b7:00:4e:fb:0b:b8:38:52:0a:91:3d:c3:
88:05:49:d2:49:f5:e4:90:5a:a5:70:c8:14:80:a9:5e:9f:0f:
d9:17:cd:4d:40:5f:31:eb:02:a1:21:03:27:f6:5f:ea:1d:1e:
c0:29:e9:3f:42:da:ee:3a:a9:6d:87:b3:ec:be:2c:5e:ee:3d:
d3:83:f6:f8:45:7a:c4:ec:a7:4f:95:7f:03:0e:de:d7:42:48:
17:53:e0:64:7b:cf:57:5a:b0:b4:84:64:84:98:d1:0a:67:ba:
58:b7:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:57 2026 by rpki-client