
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa
File: 84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa (raw, json)
Hash identifier: Z9r3z2RKlIeTrkc13gU1mQHFLjg7dQfeXjTEl/4AY1Q=
Subject key identifier: 04:F5:2D:DF:B3:0F:46:0F:CF:DE:88:A3:4A:CC:29:53:54:84:A1:77
Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial: 010D0C9F4328584DCC605B6102200023FB0F7F00
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa
Signing time: Mon 11 May 2026 13:00:31 +0000
ROA not before: Mon 11 May 2026 13:00:31 +0000
ROA not after: Sun 09 Aug 2026 13:00:31 +0000
asID: 11260
IP address blocks: 148.64.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cc:60:5b:61:02:20:00:23:fb:0f:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
Validity
Not Before: May 11 13:00:31 2026 GMT
Not After : Aug 9 13:00:31 2026 GMT
Subject: CN=cb5ce11d-398c-4639-a5fb-33db3f3d88b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:4c:6d:27:c8:e7:16:22:ce:b8:5b:fa:51:
86:c7:30:29:3e:25:0d:75:c4:f0:d5:0d:36:81:8a:
1a:bf:4b:19:e1:b5:ba:e3:f9:97:88:a1:e2:cc:78:
ac:2d:ea:da:3f:5a:d0:15:99:bf:27:3c:57:55:5f:
e8:79:41:b8:5d:4e:11:68:21:d3:d6:fd:df:1a:e8:
2e:c4:93:2d:20:7f:aa:34:f3:a7:06:64:6d:de:b7:
0e:ad:fe:e2:07:d7:db:57:b1:d2:c3:87:54:cb:24:
15:c9:97:bd:31:08:fa:30:83:02:ea:72:63:47:94:
c4:fb:7c:24:cc:33:07:83:f4:f6:af:61:92:b4:43:
ff:50:10:97:1c:e6:c1:8e:d4:ef:f5:79:db:75:36:
97:4a:9f:96:2b:1e:a1:1f:09:f0:cc:0c:58:cf:d3:
f0:d0:a4:ad:21:25:ac:e6:2a:3f:a9:01:60:77:70:
94:9f:dc:4a:f0:ba:dc:a2:f1:d0:60:81:50:e2:5a:
d5:37:5c:f8:ec:13:5b:a6:86:b6:0f:20:61:e7:66:
d5:4d:6f:72:7f:ac:2e:fc:a2:50:e0:11:72:ac:72:
2b:c0:e7:14:a8:1c:36:36:21:4c:a8:70:4d:03:9e:
62:11:fd:9c:8f:cc:f9:9a:eb:7b:e8:f7:f2:42:8a:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F5:2D:DF:B3:0F:46:0F:CF:DE:88:A3:4A:CC:29:53:54:84:A1:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
X509v3 Authority Key Identifier:
keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
sbgp-ipAddrBlock: critical
IPv4:
148.64.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:05:62:c6:a4:5b:69:e2:ef:c8:56:f9:70:eb:ac:f2:15:a2:
4e:eb:e4:d2:72:2b:e9:d2:dc:1c:5c:e3:14:56:8a:83:d5:9e:
5d:2f:e6:d1:e9:37:1c:3b:71:3e:ee:a1:cb:f2:42:b8:30:29:
21:4f:09:e9:47:76:e2:6c:1b:61:69:ac:4d:16:47:48:11:c0:
9c:22:32:13:4b:6d:8d:ea:e5:8f:bd:80:5a:19:28:1f:3d:74:
b9:97:16:7f:01:84:5c:f0:f5:60:e5:1d:d0:e8:e3:93:c6:f9:
08:8e:5e:bc:30:47:81:20:62:81:42:ae:29:1c:be:08:2b:14:
89:06:3a:8c:9a:6f:18:c4:3e:b6:9b:9a:23:01:7c:d9:ff:71:
56:5f:2c:f2:01:e6:2c:e9:51:3c:7e:f8:a7:ba:50:66:a7:15:
c9:72:04:25:f9:68:94:a6:4f:2d:13:4a:0a:1e:d6:24:1c:0d:
ba:4d:7c:7d:f0:8d:2c:c6:26:45:59:75:2d:d9:02:70:da:08:
10:ef:21:63:84:c5:f4:66:29:56:0a:f3:f4:72:a6:34:a4:7d:
7f:76:d5:14:34:8a:68:46:f6:51:3e:82:f7:08:b7:79:fe:f6:
5b:59:d6:2e:31:3c:85:0f:ce:65:16:86:44:ed:f4:3a:0a:48:
ea:70:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:30 2026 by rpki-client