
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa
File: 88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa (raw, json)
Hash identifier: EBkORp3Sj8jIE5d5gFHOlHlF6IY7Yf8lRmfPETu7FIY=
Subject key identifier: 8B:50:64:92:AB:E4:B9:67:35:73:B4:14:F9:CD:53:06:AD:B3:80:AC
Certificate issuer: /CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc
Certificate serial: 010D0C9F4328584DC5659744220AFE2AE5CA4700
Authority key identifier: 71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa
Signing time: Sat 09 May 2026 01:00:25 +0000
ROA not before: Sat 09 May 2026 01:00:25 +0000
ROA not after: Fri 07 Aug 2026 01:00:25 +0000
asID: 397265
IP address blocks: 158.51.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c5:65:97:44:22:0a:fe:2a:e5:ca:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc
Validity
Not Before: May 9 01:00:25 2026 GMT
Not After : Aug 7 01:00:25 2026 GMT
Subject: CN=9dfde1b9-7b42-4e6c-9824-4535d0e51371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:87:97:85:66:b3:7f:ae:97:19:a1:cb:3e:
bd:e0:b6:e1:55:bb:9e:83:cf:72:74:1d:94:22:3f:
d6:b3:e7:4f:73:40:9d:16:63:73:9c:2c:8c:6c:39:
10:31:7c:2a:ea:8e:91:f0:3b:9f:e3:25:6b:ad:80:
79:0b:b3:c9:08:89:37:2d:61:d8:09:97:b0:7e:08:
77:97:8f:30:cd:e5:6f:37:b9:fd:14:44:06:a9:c3:
f7:35:fc:11:7a:7e:0f:27:49:13:61:2e:70:de:7a:
9a:be:e8:dc:5a:49:fd:8c:31:30:ab:6d:d9:b1:cf:
97:0b:e8:ea:ae:5b:0a:20:74:40:73:d6:98:29:f6:
f7:3c:da:c1:33:e3:bf:eb:6b:29:c3:83:d2:d8:a4:
62:75:64:0f:02:1d:3c:01:c7:f2:61:ab:a9:35:87:
03:1f:7c:44:71:3b:6a:2a:82:4f:52:30:4f:38:25:
3d:4c:b6:78:55:fc:df:26:8b:e9:4b:76:e7:ad:8a:
e2:68:0e:a8:25:3a:05:5b:7b:37:2d:9b:28:a4:fe:
7c:68:aa:71:57:a1:de:d1:c8:1d:21:65:e0:a1:86:
85:bf:e8:dd:c0:b1:2f:85:6f:4f:e1:3e:c0:50:65:
0c:a7:17:ee:97:51:01:39:ad:ef:87:df:b5:80:ba:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:64:92:AB:E4:B9:67:35:73:B4:14:F9:CD:53:06:AD:B3:80:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.crl
X509v3 Authority Key Identifier:
keyid:71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:de:28:e6:67:b8:61:4c:2d:d1:5d:13:2c:e0:0b:87:7d:b1:
1e:0a:3f:06:ef:48:09:92:b5:86:9e:c3:46:b2:00:3c:da:08:
7c:53:e8:77:5d:9d:f6:b9:e8:e5:c8:6f:c0:9b:06:12:b9:fe:
44:81:f7:d2:1e:b1:ec:ea:f9:6a:3c:b9:58:b0:da:25:1d:b7:
fc:dc:a0:9b:fe:ba:c9:e6:e4:15:be:ea:63:c6:f2:00:20:ad:
bc:ee:a6:85:de:73:f8:2d:f8:d8:fd:81:bb:2b:98:74:44:4a:
3b:2c:45:be:bb:f1:3d:4f:ce:74:aa:bf:ad:17:78:5d:79:4f:
64:f0:15:37:56:56:8c:67:c9:21:c5:32:b8:10:f9:f1:1d:cc:
cc:86:2e:8f:9e:0b:a4:d7:e2:3c:76:4d:eb:0e:aa:42:cd:a3:
f7:f5:9b:41:46:7a:ba:7e:64:2a:4f:08:f8:c9:c1:4d:59:47:
f5:23:15:c0:92:e0:a6:b9:96:10:4d:1a:a4:44:8f:b9:54:88:
de:a6:17:68:41:62:95:79:f5:d5:6d:67:88:e6:4e:53:a0:c8:
d0:b4:9a:88:9c:d4:74:a0:20:98:0a:11:8c:08:b4:e8:4d:2e:
b1:b5:71:46:99:3c:55:cc:4e:d0:0d:93:97:3c:09:8a:ab:2b:
8a:17:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:17 2026 by rpki-client