
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/201eb50a-6d96-36c0-b488-7abc91e4fb17.roa
File: 201eb50a-6d96-36c0-b488-7abc91e4fb17.roa (raw, json)
Hash identifier: JaffjSz3f5u62qBd3FW0ctDl6qNYaVGhdraxL2yr/us=
Subject key identifier: 14:44:C5:23:82:BD:4B:20:01:10:18:1D:06:65:99:32:A3:FD:F4:18
Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial: 010D0C9F4328584DA2800DA29B35FFD8D2CC11B0
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/201eb50a-6d96-36c0-b488-7abc91e4fb17.roa
Signing time: Sun 26 Apr 2026 13:00:30 +0000
ROA not before: Sun 26 Apr 2026 13:00:30 +0000
ROA not after: Sat 25 Jul 2026 13:00:30 +0000
asID: 293
IP address blocks: 192.188.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a2:80:0d:a2:9b:35:ff:d8:d2:cc:11:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Validity
Not Before: Apr 26 13:00:30 2026 GMT
Not After : Jul 25 13:00:30 2026 GMT
Subject: CN=0fcae0f6-d6ba-45a7-952e-07134b77d748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:eb:dd:ec:ef:12:70:0d:2b:17:dc:ae:84:
32:a8:99:ba:3c:78:0d:f5:91:0d:67:11:bf:7a:ec:
00:dd:2f:e8:6c:87:70:fd:77:0e:b2:77:f0:b8:40:
9c:1e:79:0b:e9:2c:b5:05:3d:dc:d1:30:41:b8:1b:
c6:04:08:a4:2b:d9:59:aa:56:0c:7f:75:c6:a2:40:
f1:36:6a:96:71:c1:8f:e0:d6:cb:46:dd:2b:54:79:
b3:b7:5a:25:2e:39:11:91:c5:87:fc:5c:38:84:f4:
bb:5d:5f:2d:a0:80:19:8a:f8:08:cb:31:55:cf:9b:
2a:83:df:16:95:d4:d0:f7:4f:c1:8a:9e:32:d0:3c:
15:cb:03:e0:19:03:e4:e6:b2:da:75:3e:6d:cc:c7:
e7:c8:82:95:ec:e7:a6:69:89:13:61:7b:ae:59:cf:
b5:88:aa:80:c4:37:1b:94:02:d9:5e:27:29:d9:1c:
07:6d:a2:87:60:90:66:37:29:00:a0:64:5f:81:48:
ee:be:a5:c0:7c:66:73:a0:bd:80:c8:e4:a0:55:ed:
33:6d:3f:8f:aa:a8:83:d6:62:26:99:d3:2b:d4:f2:
3a:b5:47:5e:69:3c:46:99:61:7e:c7:b6:7a:6c:72:
b1:57:c4:e9:94:37:ca:b6:47:21:32:f3:78:5f:10:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:C5:23:82:BD:4B:20:01:10:18:1D:06:65:99:32:A3:FD:F4:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/201eb50a-6d96-36c0-b488-7abc91e4fb17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
X509v3 Authority Key Identifier:
keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.188.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:6d:fa:a5:1a:6b:4e:db:a6:e1:10:15:bc:1f:59:d5:8f:dc:
ef:5f:2c:3c:65:81:0c:e3:ef:48:aa:1e:e2:cb:4f:63:ab:cb:
90:08:11:90:44:ed:25:46:18:fb:8d:d5:66:d8:d4:d1:33:f1:
e2:71:24:92:81:b4:24:c4:ab:42:4e:37:95:20:9f:70:56:81:
3e:c8:0a:71:f0:1b:7f:7a:2e:50:c7:6b:69:c3:76:28:3c:32:
c8:fa:fc:70:6c:18:db:cc:ec:5e:c2:41:2a:39:4e:0d:8f:4a:
f5:80:6e:90:1f:6b:fb:9d:70:24:69:ed:c3:4b:a0:8c:b2:92:
b4:09:c4:ba:40:1f:cc:f4:a7:01:f9:26:4f:90:bf:c5:07:eb:
db:fb:48:07:1d:25:00:91:d1:a4:34:f2:bc:84:a7:b9:fc:ce:
fd:71:16:3b:78:30:84:37:af:a8:6a:6e:44:0a:1d:f6:dc:70:
9f:53:93:be:65:21:38:39:b2:4b:3c:db:dc:6e:86:88:20:05:
cb:19:e2:8b:a9:ba:b6:12:a0:09:02:65:c0:f1:9a:17:9f:9c:
e9:1c:5a:41:bb:55:15:9b:4c:61:6e:53:77:10:64:3f:95:ca:
2a:33:70:8a:6e:e1:09:83:48:0d:cf:d4:76:84:f3:ef:f0:90:
16:49:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:50 2026 by rpki-client