
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/b58e42d5-177d-3602-88ba-f1d0898e4dd7.roa
File: b58e42d5-177d-3602-88ba-f1d0898e4dd7.roa (raw, json)
Hash identifier: Jf3RRc9w7MnsKpHhIhEX+vqGrgHp0CynbP1/m6WrN/c=
Subject key identifier: DA:7D:E0:85:0E:43:70:33:93:81:B1:D7:A2:B7:ED:DF:96:F7:DB:71
Certificate issuer: /CN=141d1fb1-9841-4771-b75f-7e85f1329175
Certificate serial: 010D0C9F4328584D0D427D0E95A0B92B9BC9FCC0
Authority key identifier: 32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/b58e42d5-177d-3602-88ba-f1d0898e4dd7.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 0
IP address blocks: 206.223.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:7d:0e:95:a0:b9:2b:9b:c9:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=141d1fb1-9841-4771-b75f-7e85f1329175
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=786a2587-df30-428f-9b1f-339b75abd19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:63:c7:61:ca:66:80:b8:3e:7a:39:7a:70:
4a:96:3f:cc:09:ee:03:ac:f6:de:dd:68:b5:87:b6:
55:92:f4:a1:31:c3:df:f3:c1:9f:39:01:d0:11:33:
eb:f5:b7:52:05:8d:87:80:f5:50:36:47:13:a6:ee:
8c:8c:89:64:b0:81:b6:1f:fd:41:eb:d7:0f:e4:2f:
d3:7b:aa:81:b2:d7:bf:d3:a1:f7:e8:25:73:0b:c9:
d0:8c:41:45:5b:6d:37:89:e5:2c:73:38:ac:e4:bf:
3e:0a:a0:c2:fa:13:aa:c8:80:69:20:9c:8b:38:82:
26:a6:b1:c4:d4:4d:86:9e:bb:3e:12:2d:50:1b:b0:
73:b4:46:d3:09:68:19:ea:dd:0e:a1:79:39:9f:2e:
a4:1e:89:6a:8e:d2:56:eb:d2:e3:01:02:aa:c5:67:
cc:ea:8a:44:d6:42:9c:86:59:44:37:f2:9c:55:e8:
fe:07:f0:6a:8d:d6:87:e4:b7:0a:f8:74:91:97:4c:
a7:76:6c:7b:b7:dd:a4:d9:0d:45:54:ec:58:88:ef:
0a:11:85:9f:95:94:14:36:0b:20:43:44:e9:ee:b4:
4e:cc:6b:9b:fc:f5:05:1a:90:12:38:7f:84:3c:6f:
43:b9:ba:0f:f6:65:ff:d2:68:a4:6f:58:65:1b:11:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7D:E0:85:0E:43:70:33:93:81:B1:D7:A2:B7:ED:DF:96:F7:DB:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/b58e42d5-177d-3602-88ba-f1d0898e4dd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.crl
X509v3 Authority Key Identifier:
keyid:32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer
sbgp-ipAddrBlock: critical
IPv4:
206.223.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:cb:0d:03:95:60:48:c2:d0:0b:38:5f:50:db:e5:eb:b7:da:
0b:97:11:9d:ca:ea:1c:f8:40:ba:a3:57:e4:19:3c:50:22:a5:
94:00:55:ca:5c:df:74:78:f5:98:78:c1:aa:f3:38:ed:51:5d:
03:a6:54:46:22:d0:28:1b:31:8d:34:6a:82:d7:81:29:74:45:
24:8c:07:47:7e:4f:f1:3f:b7:d4:24:a5:48:38:27:40:51:97:
80:b7:63:b1:9d:d7:a1:37:5a:32:ee:2b:82:f8:e6:0e:7b:c2:
3c:d6:a4:23:c2:cc:85:56:99:83:af:11:65:5c:5f:92:a4:32:
b3:3d:a1:76:a0:80:82:91:00:e7:f6:7b:1d:5d:30:2b:9a:06:
e1:55:49:9a:b1:05:0a:98:e7:51:24:78:02:90:56:a1:d8:1a:
15:92:9f:49:81:91:bd:ba:d2:fc:ad:b1:3a:9e:93:52:fe:12:
2b:1d:7d:98:45:c4:cd:23:70:36:ac:f7:19:43:bb:d9:27:6c:
48:ac:f9:bb:5e:0c:79:e4:72:0e:df:72:ab:08:84:f2:c8:9b:
00:67:7d:af:50:ce:4d:7a:ed:a9:ae:ff:c0:eb:22:53:64:e1:
c3:45:c9:27:92:38:4d:15:34:6b:23:7c:48:70:32:ce:39:fb:
74:5d:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:50:51 2026 by rpki-client