
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/e2c64b42-3241-3020-b640-0b5ca595529a.roa
File: e2c64b42-3241-3020-b640-0b5ca595529a.roa (raw, json)
Hash identifier: E/trC6Y7qEk4DH/Pl8H1fSgxhPW6vmceAsCeincXwmI=
Subject key identifier: DB:04:95:2B:24:8D:DD:8B:FF:1D:D8:F2:8A:B9:D6:6C:2D:3B:3F:90
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F4328584DA3E55F6D667F4DDD1FAFBE40
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/e2c64b42-3241-3020-b640-0b5ca595529a.roa
Signing time: Mon 27 Apr 2026 01:00:24 +0000
ROA not before: Mon 27 Apr 2026 01:00:24 +0000
ROA not after: Sun 26 Jul 2026 01:00:24 +0000
asID: 22359
IP address blocks: 208.52.177.2/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a3:e5:5f:6d:66:7f:4d:dd:1f:af:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Apr 27 01:00:24 2026 GMT
Not After : Jul 26 01:00:24 2026 GMT
Subject: CN=a1ab1e22-d9ca-428a-8e69-1e018e9ebd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:4f:c3:34:10:86:a5:d5:a9:3f:7d:0e:31:
33:d1:9e:06:d0:fe:18:5e:48:96:10:1f:5b:77:d1:
19:11:4f:53:f4:05:68:ed:a1:f6:23:1f:f8:ad:a3:
08:f1:5b:52:6b:c1:84:6d:0b:58:3e:ec:5c:e3:05:
1f:f5:e5:86:9c:38:f2:eb:44:5a:99:b8:2d:6b:8b:
43:41:be:95:02:01:15:1a:87:ff:8e:3d:7c:6f:47:
25:d0:ef:c5:a9:1b:f2:25:7c:21:7f:74:de:63:50:
68:1c:fe:d0:53:f8:64:a1:32:80:10:93:cc:0a:d0:
d3:ee:12:6f:1e:18:79:2e:0a:50:2b:e4:d5:ac:57:
fc:80:60:0a:e5:65:be:70:2b:39:7e:31:ed:51:75:
32:33:34:81:91:1e:35:23:fd:13:5f:da:3f:43:df:
2f:80:cf:c0:e4:fb:7b:db:5c:e6:0a:01:35:46:29:
66:28:0f:01:3d:09:77:dc:7e:4c:b8:e7:3b:b5:c4:
fe:c6:b5:85:27:e7:21:9e:a2:fc:64:5a:5c:2c:9d:
77:8e:45:70:31:38:fc:d4:ae:82:81:ca:0d:a8:cb:
2b:02:28:ea:ee:19:71:37:77:49:e5:be:69:9a:67:
bb:19:18:57:f6:60:50:ba:6e:a1:97:28:dd:ad:4a:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:04:95:2B:24:8D:DD:8B:FF:1D:D8:F2:8A:B9:D6:6C:2D:3B:3F:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/e2c64b42-3241-3020-b640-0b5ca595529a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.177.2/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:bd:88:14:52:bc:e3:f1:40:e2:b0:ce:0b:d9:56:e7:98:d8:
74:db:c0:e8:ce:df:58:9d:e5:cf:f4:2c:1c:6d:97:88:bd:93:
f9:b0:b4:8f:7e:43:3c:51:ae:23:6e:74:e4:0e:8f:8b:e5:90:
65:d4:ab:62:3b:44:e1:96:a5:b3:62:08:ee:c4:e4:ed:d4:ae:
88:67:7b:e9:8b:46:6a:12:2f:40:49:90:6b:b4:47:86:94:41:
22:ed:1d:a6:f0:5d:af:2c:8f:19:dc:8f:a8:23:91:e0:f1:8c:
0e:9d:45:16:1b:1d:4e:72:b5:8d:98:56:e4:e7:1e:46:2b:df:
30:66:fc:c3:c4:fe:e8:04:c8:a5:b3:9a:51:35:c3:93:d6:6c:
20:15:5e:4c:c7:ed:59:08:b6:d6:86:f2:2f:ad:1f:aa:dc:5d:
8a:ee:a1:70:0b:13:c0:2e:37:d3:e7:c8:88:d0:1e:83:95:5e:
ca:9a:66:4f:5d:a7:8f:c8:a6:31:0c:de:75:d7:37:61:48:e4:
50:89:90:5f:c6:ad:f3:44:b1:1d:4c:75:ec:56:23:9a:81:86:
8b:a4:43:27:be:df:86:f4:ec:08:4b:91:e5:28:ba:27:5b:f7:
1c:e1:48:fd:8b:9a:ae:24:6a:33:f4:4c:39:a7:34:94:99:12:
ff:e9:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:45 2026 by rpki-client