
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c91cfcf9-6544-3453-9678-80993435d5a3.roa
File: c91cfcf9-6544-3453-9678-80993435d5a3.roa (raw, json)
Hash identifier: eSJInOLQkUmW9BQJkuIYcEflkq6CyVMgNAfyBIhVG+o=
Subject key identifier: 15:36:07:34:A5:F5:1F:77:42:49:AE:64:53:18:B6:C4:9B:50:85:82
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584D98BAB3EC38E08CF0D0E4DE60
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c91cfcf9-6544-3453-9678-80993435d5a3.roa
Signing time: Thu 23 Apr 2026 01:00:24 +0000
ROA not before: Thu 23 Apr 2026 01:00:24 +0000
ROA not after: Wed 22 Jul 2026 01:00:24 +0000
asID: 54994
IP address blocks: 153.43.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:98:ba:b3:ec:38:e0:8c:f0:d0:e4:de:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Apr 23 01:00:24 2026 GMT
Not After : Jul 22 01:00:24 2026 GMT
Subject: CN=77aa7ea3-a51f-4651-a4f1-3acbd656a146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:3e:0e:f4:bd:d3:bc:67:0c:f1:5c:cc:9f:
44:7f:5b:37:16:cd:cc:65:14:f0:4a:66:c5:8a:4c:
4e:16:56:1c:17:01:ae:22:92:a1:a0:c1:06:fa:98:
1a:0e:f1:7e:83:e3:7a:98:ad:ce:ab:c9:13:0d:53:
55:fc:a8:c5:2e:0c:84:12:23:9a:a7:ee:93:73:be:
09:d7:4e:d8:99:04:55:57:1a:d7:cc:ab:1a:98:86:
7d:b5:bc:8b:b1:c2:f7:24:54:f1:31:dc:05:cf:56:
21:d9:19:64:e8:5a:69:3c:3c:43:0e:43:e0:c4:f3:
21:6a:f7:df:dd:71:32:77:45:7e:f5:29:13:55:40:
a5:b6:ae:8e:6f:25:10:c4:a3:15:2e:59:fd:65:41:
5c:34:0f:f8:eb:8d:a4:f9:d2:f6:e3:d5:d5:0e:ce:
10:5d:ee:4c:24:31:9a:6b:57:fb:23:7e:5a:b5:5d:
db:1a:a1:08:2f:a4:91:d7:b7:c7:57:7b:3b:6d:b2:
71:2f:06:42:1e:9e:72:3f:d5:10:c2:be:a4:68:35:
9a:08:47:d5:89:70:a3:ac:9b:ea:a1:18:24:97:f8:
32:f9:db:c9:56:97:40:83:95:8b:38:26:61:96:30:
01:b5:c2:8e:64:3b:a5:8b:3b:80:9e:ec:19:15:15:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:36:07:34:A5:F5:1F:77:42:49:AE:64:53:18:B6:C4:9B:50:85:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c91cfcf9-6544-3453-9678-80993435d5a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
153.43.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:dc:3b:db:ad:a9:d4:93:19:57:e7:7c:45:e7:d5:6d:e1:d1:
36:86:d8:26:26:07:bb:19:e0:33:2a:b1:46:54:4a:f9:b5:21:
f3:ed:65:29:27:61:5a:51:b3:4e:7b:1d:6d:fb:ee:cc:47:a5:
43:2b:51:9c:f8:9b:61:9b:b1:6c:0b:ad:58:8c:39:94:b8:9b:
55:52:12:9f:4f:32:f1:b6:cc:9f:a6:a9:fa:cb:1b:7d:e8:2b:
37:95:13:d2:c9:e1:c8:b2:2d:70:cd:0d:1a:26:8a:95:bb:5c:
b9:0d:9d:ff:e8:13:93:72:05:a7:f1:ef:cd:a2:5f:45:74:39:
73:3d:70:c2:26:35:cc:51:97:47:a7:4d:23:0b:06:6d:74:a9:
cc:e8:ec:54:ba:c3:86:1f:c6:fe:e2:1f:9e:94:d4:2e:d6:4d:
f9:78:99:c4:c1:1a:fa:12:e1:14:ee:b2:fe:09:1d:33:3a:42:
95:8c:e5:2e:a2:ed:5d:32:f6:1d:90:52:eb:d9:41:b9:35:d8:
77:54:24:06:a4:8a:82:44:13:f5:0b:ca:5b:94:a7:57:3a:42:
ba:10:fe:6c:c2:12:22:d0:99:7b:82:00:5b:d9:12:49:0c:1e:
14:a8:37:e6:ab:d3:b4:be:80:16:1d:38:94:98:d3:c3:cd:a6:
ee:03:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:05:18 2026 by rpki-client