
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/2465ac62-46e8-3732-b8e4-3cec3a421957.roa
File: 2465ac62-46e8-3732-b8e4-3cec3a421957.roa (raw, json)
Hash identifier: XQdsGrgaPKSfAGw1MNvBvQgF7+WGbxwJVWkVhUPfC0I=
Subject key identifier: 9B:65:15:37:10:F9:A7:18:AB:9C:5D:BC:D6:D2:DF:FF:1A:AA:3C:04
Certificate issuer: /CN=d04c21a5-fe55-4921-afcb-74705ac57d99
Certificate serial: 010D0C9F4328584D44FA45BED752BAA1FE5DFC40
Authority key identifier: E1:58:58:2E:68:01:43:78:30:B4:56:09:0D:90:FD:07:66:F4:67:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/2465ac62-46e8-3732-b8e4-3cec3a421957.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 611
IP address blocks: 139.103.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/d04c21a5-fe55-4921-afcb-74705ac57d99.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/d04c21a5-fe55-4921-afcb-74705ac57d99.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:45:be:d7:52:ba:a1:fe:5d:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04c21a5-fe55-4921-afcb-74705ac57d99
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=931f1847-0989-4414-9be8-0272e00a0403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:09:e3:29:66:fa:e5:69:a2:07:58:4b:44:
8a:f1:ca:52:06:cd:ba:4a:9b:85:26:b8:23:8f:14:
36:70:d3:05:8f:54:00:30:58:c5:0a:ce:fb:ba:9a:
f3:e2:02:cb:b2:16:4f:00:b2:ee:7f:11:11:01:a3:
8e:fa:db:6d:df:1e:89:64:f0:c1:59:72:80:37:21:
fd:1c:ff:6f:85:64:93:dc:bf:c0:5e:9a:e1:15:7e:
ff:4f:df:e1:20:c4:9b:b4:4e:bc:c1:e4:dd:0e:34:
37:d2:a0:0b:8a:e0:df:9d:3d:5b:7f:d8:45:d2:b6:
97:02:29:82:98:a1:9d:37:55:73:f8:af:77:06:38:
b8:9e:61:b9:53:c8:d6:b7:91:fb:78:e7:d9:ea:64:
35:05:95:1a:fc:a6:05:5c:43:f9:89:aa:88:9d:9a:
44:41:49:e4:8e:58:9e:dc:9d:1a:0e:4f:dd:16:fd:
95:6f:d6:e1:c5:44:83:b3:76:0e:a3:99:8c:a9:29:
25:03:ed:69:da:90:86:bb:a0:85:44:5e:28:07:18:
74:83:ef:84:12:7c:af:ca:4e:5d:e8:c8:8c:af:73:
20:31:62:b0:67:69:7f:79:b9:aa:1b:d0:67:32:b1:
61:19:01:a9:59:7d:c9:bf:b7:c8:9a:04:40:49:a8:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:65:15:37:10:F9:A7:18:AB:9C:5D:BC:D6:D2:DF:FF:1A:AA:3C:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/2465ac62-46e8-3732-b8e4-3cec3a421957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/d04c21a5-fe55-4921-afcb-74705ac57d99.crl
X509v3 Authority Key Identifier:
keyid:E1:58:58:2E:68:01:43:78:30:B4:56:09:0D:90:FD:07:66:F4:67:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99.cer
sbgp-ipAddrBlock: critical
IPv4:
139.103.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:a3:13:1d:5d:97:a8:38:b7:73:7e:bd:00:94:d4:ea:1a:10:
47:2d:55:c8:ba:81:1e:49:98:51:54:5e:c8:03:ba:c3:a3:4d:
28:7d:1c:ac:d0:59:c7:9e:d3:54:83:d1:a9:cc:42:0b:6a:40:
6e:5b:dd:9f:c1:74:71:96:fd:0f:cf:17:a5:f1:9c:45:1e:7e:
cd:a6:00:42:9a:d0:5c:50:35:68:95:b2:64:86:7d:7e:ab:18:
b0:35:99:ee:b4:a5:3b:d2:4a:e3:59:16:a2:27:12:11:af:94:
c2:0f:03:85:37:61:43:1c:db:e2:93:d6:f2:4c:7b:73:c9:7b:
38:af:64:37:d0:80:7d:56:38:0f:f2:82:3a:a0:6c:ba:69:16:
a6:3c:31:43:57:c1:37:b4:ec:3b:86:e6:4e:05:43:f3:dc:75:
ff:86:ee:aa:4b:bc:b2:57:59:3e:d5:01:33:76:ab:1c:71:69:
53:2e:fe:04:18:a4:9f:46:0e:3d:4a:83:32:ac:56:2c:4f:70:
e1:98:ad:0f:71:7c:98:29:08:5b:65:1b:e9:72:a6:22:8d:a4:
ba:c1:0d:9a:64:f7:f5:4a:8f:20:a5:7f:1d:8d:60:84:af:9a:
76:c4:bb:72:cf:1d:25:0c:a5:f1:ce:92:02:2c:53:05:a0:33:
43:f8:8a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:03 2026 by rpki-client