
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa
File: 342975f3-bb51-368c-96e3-51ffebef6d84.roa (raw, json)
Hash identifier: NgHiPJIAKV4Ama8oqWuBFuHqSyfbXoj8jRtk8qWwXnY=
Subject key identifier: F5:62:9C:9F:9D:6D:BA:BD:51:C8:45:4B:BF:AD:9A:08:A0:6C:8E:56
Certificate issuer: /CN=e85794f9-a8df-4d59-8974-f686e8987f1b
Certificate serial: 010D0C9F4328584D300A65E86F1714641B4E7FCC
Authority key identifier: 42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 376
IP address blocks: 205.237.8.0/21 maxlen: 21
205.237.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:65:e8:6f:17:14:64:1b:4e:7f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85794f9-a8df-4d59-8974-f686e8987f1b
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=1a8236d6-b444-4d81-bd7e-90b3f71fbead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:24:13:ad:fa:af:70:3b:8a:8d:76:bc:1a:
e1:6e:50:e3:b1:bc:25:44:55:7b:64:9f:60:fb:15:
64:1c:26:59:4d:0c:68:78:47:53:d7:d8:c0:20:0e:
a1:9c:da:43:ac:f8:b5:60:e3:2d:a1:25:23:df:bc:
b0:50:fa:95:4a:f3:1a:5d:31:4d:40:fc:95:c6:9b:
5c:90:ba:46:8f:0c:6b:40:9e:86:76:09:33:0c:cd:
74:f7:86:41:04:a8:bc:02:84:48:c1:69:02:23:ef:
1f:68:5b:a7:eb:43:39:35:bd:01:78:31:f6:ff:b0:
5f:d0:ad:c2:24:77:7a:1e:ab:b6:f2:77:87:79:26:
0e:b7:f3:10:71:d9:df:ad:96:be:47:81:2b:59:a3:
53:3e:85:52:b4:01:2d:cd:35:48:d9:65:70:0a:49:
94:a8:78:82:65:c2:2c:07:84:e8:f6:30:9b:0b:2d:
5b:c6:86:94:0b:37:ec:58:bb:3b:79:14:fd:94:70:
08:8f:26:59:8c:7d:b3:e6:44:a1:fb:5b:43:b2:36:
b0:f2:b5:83:47:5a:dd:5c:93:51:ee:5d:02:5c:c5:
fc:00:2a:7a:7e:13:02:36:3a:7e:ce:24:dd:b3:23:
86:a4:5a:29:1c:1b:49:8a:11:12:87:b7:ec:8c:d6:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:9C:9F:9D:6D:BA:BD:51:C8:45:4B:BF:AD:9A:08:A0:6C:8E:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl
X509v3 Authority Key Identifier:
keyid:42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
205.237.8.0-205.237.19.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:df:74:d1:49:f3:bb:0e:b0:86:d3:b1:8e:ef:5b:f1:7d:ba:
ea:2e:1f:41:f0:58:bc:31:65:4f:4e:a6:26:20:30:85:cf:a4:
b1:4c:13:9c:90:7e:f0:20:65:77:39:2e:9e:e5:bc:29:72:87:
1c:d7:3b:dd:52:27:98:e5:ac:9f:ba:27:67:46:bf:1b:77:2b:
b9:d7:60:9e:6e:36:4d:2a:89:d1:60:a9:14:97:cd:1e:5a:18:
0d:56:8f:52:b6:e1:55:7a:51:df:af:ce:37:51:84:2f:a0:e5:
83:25:97:8b:38:b7:0b:d0:67:2e:c0:cb:41:c2:e9:53:52:88:
ef:7d:f8:0e:f1:d9:62:59:85:f4:03:bc:8b:6e:47:c5:02:a1:
f9:62:69:65:72:25:d6:bd:20:53:95:6c:7f:44:17:f2:8b:ef:
c4:25:a6:6d:f2:43:50:e2:6d:9d:b0:68:b4:e5:30:ca:d6:57:
6d:52:0c:67:04:00:dd:d4:78:30:a1:97:b3:21:39:eb:83:21:
1c:12:2c:97:91:d6:8e:1f:de:aa:5b:be:40:60:68:a9:78:02:
9b:23:68:be:f7:85:6d:da:69:bf:bc:84:3b:6f:8f:f0:ca:bf:
3c:3d:04:59:d7:f5:81:8a:d5:45:6f:07:91:57:57:8b:db:c8:
5d:db:38:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:46:31 2026 by rpki-client