
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/cbb76420-5b33-379d-88fa-43707aba002e.roa
File: cbb76420-5b33-379d-88fa-43707aba002e.roa (raw, json)
Hash identifier: WTQ/CZMsEchIqXr2i+BgGW+5mpCAPWyFttGNgu4JzA4=
Subject key identifier: 4C:CB:37:9F:7D:13:53:46:95:BE:08:73:23:64:5A:C8:DC:57:4A:D3
Certificate issuer: /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial: 010D0C9F4328584DB1DAC8500B9F34257B4DB800
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/cbb76420-5b33-379d-88fa-43707aba002e.roa
Signing time: Sat 02 May 2026 01:00:24 +0000
ROA not before: Sat 02 May 2026 01:00:24 +0000
ROA not after: Fri 31 Jul 2026 01:00:24 +0000
asID: 23167
IP address blocks: 149.234.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b1:da:c8:50:0b:9f:34:25:7b:4d:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Validity
Not Before: May 2 01:00:24 2026 GMT
Not After : Jul 31 01:00:24 2026 GMT
Subject: CN=4a24f99e-b321-4ee3-8b18-15b0333d9297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:fa:9c:89:2a:af:82:1c:cb:4e:07:74:16:
62:49:8b:f9:e3:2c:1c:cb:9e:95:63:42:d2:02:93:
c2:91:50:49:b1:19:c7:04:d3:4e:04:74:63:6b:c7:
ce:81:38:a1:c1:8a:44:79:46:28:42:e9:37:f7:5e:
df:ae:5b:83:d3:92:6e:c7:c8:8c:0c:f4:96:70:14:
c2:3c:07:59:c0:c3:92:da:71:52:bf:19:4e:15:33:
b1:1c:ad:4f:8b:85:25:e4:9a:db:51:ac:56:dc:59:
b4:1b:6c:0d:4d:f3:71:da:f1:42:c4:e2:a0:90:94:
0b:9a:ad:bf:5a:36:36:a0:56:62:9a:a4:92:25:d4:
73:d1:fa:d3:e1:79:11:61:49:f7:74:10:26:10:36:
de:d0:47:84:d6:60:9e:98:8c:3c:cc:cf:f0:f2:e7:
a6:7c:3e:4c:00:3d:ab:a8:ae:e1:66:a9:cf:8a:0c:
3d:3b:7d:51:c3:db:67:cf:ac:28:be:fe:3d:c8:97:
ea:9b:6a:e1:f8:04:37:0b:44:75:16:1f:c2:ed:61:
a9:a8:d7:f5:c4:1f:be:ec:4a:c0:8e:6f:3c:a2:b4:
43:b1:03:4b:36:94:fc:5f:be:f9:1f:f4:c3:e0:16:
98:40:72:11:74:0e:c2:ed:56:d6:8a:38:3c:7c:91:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CB:37:9F:7D:13:53:46:95:BE:08:73:23:64:5A:C8:DC:57:4A:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/cbb76420-5b33-379d-88fa-43707aba002e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
X509v3 Authority Key Identifier:
keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
sbgp-ipAddrBlock: critical
IPv4:
149.234.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:b9:3b:b3:99:79:7f:88:a1:9f:07:79:c9:c5:dc:fb:44:3e:
bb:95:de:76:5a:dc:a9:cc:4f:1a:66:cc:a9:ec:d5:db:8a:61:
95:3f:d8:fa:ea:ad:25:84:8b:0a:02:7c:61:74:f5:9c:19:1d:
64:be:c0:ea:53:13:55:af:1c:b6:92:e8:c5:c6:e9:0c:8b:30:
93:eb:f7:c5:0a:32:60:c0:0e:d6:b4:43:17:e3:c6:15:58:47:
94:a5:b9:c9:6a:12:cc:4b:7e:79:08:ec:36:7f:3e:f5:7c:03:
ca:32:a8:b0:1c:d5:59:16:e1:11:4c:e2:ab:d8:65:d3:df:84:
43:98:69:d3:89:42:d0:e5:b9:b4:ab:1b:3f:7d:e6:31:16:7c:
47:86:7b:bd:76:94:53:c0:8c:9d:a0:28:fb:61:9a:5c:1d:c8:
d1:da:ed:fb:2d:db:91:8f:cc:56:2d:59:80:17:db:df:af:f2:
d0:f7:78:2f:f3:2a:e8:b4:dc:60:ed:97:c6:8f:26:bb:29:6d:
45:5a:ca:46:ef:c0:41:34:57:9e:bb:f8:59:ff:e9:39:51:cf:
bc:3e:ef:b9:38:8a:32:fe:ea:97:26:92:3d:f7:1d:85:c6:23:
9d:0f:92:e3:8f:da:78:88:77:73:8e:d8:2a:26:88:6d:25:d6:
4d:3e:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:28 2026 by rpki-client