
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/2c685ebd-7c47-3833-aa6c-9f5ae7e26bd1.roa
File: 2c685ebd-7c47-3833-aa6c-9f5ae7e26bd1.roa (raw, json)
Hash identifier: LDElumqxMTTGr5iy+CtDFJEMIVP1rqgPxi9I0THtSfk=
Subject key identifier: F5:00:0B:95:C3:6F:1D:47:86:2F:C6:72:B1:21:FB:4F:9A:FC:44:51
Certificate issuer: /CN=42ed3796-8b5f-4c19-adfd-f57282c67dda
Certificate serial: 010D0C9F4328584D191BF47C8110C361A8BB0D00
Authority key identifier: C3:A4:D7:E9:F9:BA:82:BD:6B:A9:D9:63:CD:49:EE:73:AD:0B:C0:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/2c685ebd-7c47-3833-aa6c-9f5ae7e26bd1.roa
Signing time: Sun 08 Mar 2026 07:53:07 +0000
ROA not before: Sun 08 Mar 2026 07:53:07 +0000
ROA not after: Sat 06 Jun 2026 07:53:07 +0000
asID: 402091
IP address blocks: 207.174.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/42ed3796-8b5f-4c19-adfd-f57282c67dda.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/42ed3796-8b5f-4c19-adfd-f57282c67dda.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:1b:f4:7c:81:10:c3:61:a8:bb:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ed3796-8b5f-4c19-adfd-f57282c67dda
Validity
Not Before: Mar 8 07:53:07 2026 GMT
Not After : Jun 6 07:53:07 2026 GMT
Subject: CN=48c1dad3-a9ac-4a37-aaa2-37977ca18ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:cb:5f:77:b9:a2:cf:7f:f2:d6:db:81:6d:
ba:13:bc:cc:09:b4:e8:4b:2f:d9:e3:dc:17:0d:df:
2b:0a:2b:2e:22:ec:82:fb:89:73:15:3e:88:2a:53:
5f:bb:61:cf:28:e0:fc:3a:15:1c:1a:7b:88:22:3f:
62:ba:84:30:9b:d4:f7:22:17:c3:91:2d:51:90:23:
08:2a:fe:56:70:dd:5c:17:7b:9d:e5:dc:ac:26:10:
42:83:5b:29:a0:ee:6b:ae:88:2a:9e:43:34:05:ed:
ed:9e:d3:da:a8:d9:f5:fe:39:85:df:02:79:79:23:
54:69:5c:53:69:4f:fa:a6:38:bd:93:98:d5:c9:ec:
4d:f8:cc:5c:73:59:2b:7d:10:0f:c9:3b:74:1c:43:
84:eb:5d:d6:44:f2:11:d3:93:f3:64:a0:89:f9:be:
8b:9f:6a:f3:56:03:80:23:15:f3:f4:5f:6b:6a:53:
a4:41:7d:cd:68:99:58:77:0c:96:d0:9e:c9:52:48:
b7:f1:85:f3:fd:af:f8:52:9e:11:03:67:35:e5:d0:
67:66:0b:d6:36:32:c7:94:ff:a5:83:fc:56:78:2d:
d0:12:a9:0b:bc:3a:60:9e:b1:5e:da:81:20:81:76:
50:98:d0:02:2a:23:f2:d8:de:91:e4:1c:8d:a5:c4:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:00:0B:95:C3:6F:1D:47:86:2F:C6:72:B1:21:FB:4F:9A:FC:44:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/2c685ebd-7c47-3833-aa6c-9f5ae7e26bd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/42ed3796-8b5f-4c19-adfd-f57282c67dda.crl
X509v3 Authority Key Identifier:
keyid:C3:A4:D7:E9:F9:BA:82:BD:6B:A9:D9:63:CD:49:EE:73:AD:0B:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda.cer
sbgp-ipAddrBlock: critical
IPv4:
207.174.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:4c:f2:91:a8:70:e1:ba:42:c1:b8:dc:d5:e0:f8:ef:9e:61:
83:7a:8f:e1:ef:19:fc:5f:84:48:1f:83:1d:5f:8f:82:55:73:
52:25:41:b9:88:04:b3:98:33:2a:f2:4b:f7:42:56:bf:02:d2:
ae:b6:eb:d6:79:31:90:46:af:89:c0:ff:d1:20:a0:f6:5f:dc:
f1:50:a6:78:b8:f9:76:23:1d:11:f8:67:f1:99:07:57:1b:87:
8f:ce:9a:14:e2:51:ff:04:7b:a1:d8:fb:35:a2:54:fe:40:0c:
e6:0c:b4:55:3f:c1:6c:47:71:2c:d0:93:51:53:35:6b:64:d6:
97:92:b9:05:cd:89:de:e1:f4:a3:b7:41:a5:8c:ee:29:57:8a:
ef:c1:40:42:9b:b8:5e:44:62:c2:f5:9e:5f:59:16:26:81:3c:
8e:e1:d6:61:0b:af:a8:94:3a:c8:51:c4:23:4c:bc:7a:ce:02:
f5:6f:6e:d7:e1:23:00:ba:f6:77:ac:e1:8d:b5:89:2e:e0:89:
3b:94:86:89:3e:22:4f:82:ae:65:0f:dc:ac:8a:9b:df:39:00:
b4:12:96:0d:b7:bf:e6:13:7c:ef:50:ce:0d:9c:1d:d4:1a:39:
a7:e0:d9:e6:d3:e6:25:c0:4a:12:93:8c:a7:26:8e:f3:e2:34:
ac:a3:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:52:16 2026 by rpki-client