
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/3f29b59b-ea11-38f9-ae0a-84d257e4297a.roa
File: 3f29b59b-ea11-38f9-ae0a-84d257e4297a.roa (raw, json)
Hash identifier: u3fVDGlWq7XYhgHslPAp8RSKKjyTcW7sxD5UlbdEdkY=
Subject key identifier: E4:7A:E2:16:16:C6:6B:24:9C:68:00:FC:28:D6:1A:A5:64:49:2A:79
Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial: 010D0C9F4328584DA280190AED7233BF852C82C0
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/3f29b59b-ea11-38f9-ae0a-84d257e4297a.roa
Signing time: Sun 26 Apr 2026 13:00:30 +0000
ROA not before: Sun 26 Apr 2026 13:00:30 +0000
ROA not after: Sat 25 Jul 2026 13:00:30 +0000
asID: 293
IP address blocks: 192.74.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a2:80:19:0a:ed:72:33:bf:85:2c:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Validity
Not Before: Apr 26 13:00:30 2026 GMT
Not After : Jul 25 13:00:30 2026 GMT
Subject: CN=7c683df2-d62e-416e-a17d-504584d014d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:39:82:a5:36:f2:1e:29:b7:09:b4:06:a3:
e9:a9:f4:6d:8b:49:71:3b:be:86:9c:e0:62:06:0a:
da:ab:64:44:0c:03:be:ae:64:fc:3b:39:34:d7:93:
77:da:25:3d:83:ca:ea:28:b0:2a:2f:99:f7:0c:27:
c9:4d:85:cb:7f:de:b1:c8:a5:f2:1c:97:3e:fc:1c:
ce:c4:17:d7:ef:d3:2d:16:6b:96:be:77:cc:2d:77:
1d:19:99:1c:4d:cc:5e:27:9c:1c:67:b3:a9:15:d5:
c9:3f:8f:66:1f:6c:46:b1:ae:0b:78:40:ea:16:95:
b7:d0:2b:57:80:e7:91:74:40:34:00:54:85:a4:64:
4e:58:7a:0f:7e:a4:6f:30:6b:e9:81:6f:9f:a3:00:
d5:36:56:b2:88:af:25:95:76:0a:b8:84:92:49:6b:
6c:a4:e9:36:78:24:b8:25:7e:57:eb:e0:27:e0:07:
5c:94:73:96:19:ca:b9:1a:f7:4a:b5:89:4a:78:e0:
f6:5c:d3:76:70:ce:53:98:93:61:34:ec:44:48:f3:
fe:61:ee:52:7c:84:b8:af:27:4a:7b:52:85:e1:29:
b6:50:18:ca:a9:7c:02:f1:e4:e2:08:43:e7:aa:82:
40:31:13:1e:ff:33:f2:46:71:de:36:a7:ca:fd:d3:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7A:E2:16:16:C6:6B:24:9C:68:00:FC:28:D6:1A:A5:64:49:2A:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/3f29b59b-ea11-38f9-ae0a-84d257e4297a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
X509v3 Authority Key Identifier:
keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.74.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9a:5e:e7:59:4d:f1:a5:bb:67:80:cf:0d:96:6a:0b:10:4e:
a5:91:23:f7:b9:e4:aa:4c:00:22:77:83:95:c0:83:a4:6e:61:
8f:1f:71:23:e8:ff:cc:aa:6b:20:04:90:ea:06:f8:eb:4a:45:
a1:0a:27:bf:98:70:d6:fb:4a:3b:a3:0f:71:e2:b8:31:c6:e5:
b7:10:1e:27:6a:e8:0c:7a:6b:4a:e8:d4:4d:b3:8b:b8:d8:2e:
00:e6:63:4f:55:23:f2:c5:80:c0:c0:42:05:9e:84:a5:34:d4:
71:ed:e0:0e:45:bf:7b:0f:bf:78:d5:7d:17:24:ea:77:51:de:
81:4d:ae:17:47:41:93:80:1d:07:09:73:96:86:81:f6:ab:05:
b2:7b:21:af:dd:82:53:f1:bf:7c:a7:c5:67:49:d4:82:1f:a5:
7f:02:55:9a:37:d9:85:91:d4:87:26:4c:e7:b4:6a:fd:10:c0:
86:8a:75:b9:4f:3e:fe:74:0d:90:4c:50:6a:f5:64:3d:ce:51:
1d:59:4f:4c:aa:7e:97:0f:60:61:a9:a4:7b:7a:65:55:e4:48:
06:46:3b:3b:39:d2:ae:89:1e:bc:ee:36:8a:76:14:da:dd:8a:
38:51:dc:2b:98:8d:21:f2:ba:0b:9f:8d:e2:e3:49:0f:66:14:
67:3d:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:04:24 2026 by rpki-client