
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa
File: 2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa (raw, json)
Hash identifier: ysgvweGBT3cfGfdMHbsCiMNS6587p/YKECxwAyQh/kQ=
Subject key identifier: E5:5B:2C:FC:77:34:CD:F9:59:A3:22:C7:15:16:E1:ED:50:69:54:D9
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F4328584D300A548997270696B41EF200
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 11810
IP address blocks: 204.194.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:54:89:97:27:06:96:b4:1e:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=a4bbe3df-4662-47ce-a674-7fa1abd62916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:5a:95:df:e1:a6:a6:56:0a:34:00:c1:71:
5e:ab:21:91:50:24:ef:06:5c:9c:aa:7c:f3:b1:96:
21:14:e3:18:2e:2b:d2:5e:b9:84:8a:b6:a7:46:84:
3c:93:b3:93:ec:0c:b4:55:3f:60:eb:b9:35:3f:f2:
6b:6e:a8:71:3b:31:25:e6:15:85:37:bc:a1:ab:4a:
48:24:64:ab:3d:40:cf:86:89:aa:2a:40:04:e5:f8:
92:ed:62:0d:a6:8d:cf:5a:49:02:bc:d4:95:d8:bb:
3f:06:c6:da:9a:44:65:48:04:21:60:05:42:18:09:
b8:95:35:c3:da:a5:9a:12:aa:24:6c:af:ca:99:83:
d0:38:32:03:ba:96:c4:f9:ea:9b:40:8c:eb:30:64:
93:85:a2:83:0f:59:cf:bf:c0:b6:7c:38:c6:87:bb:
c1:5a:b9:3e:2c:77:3b:1a:32:3b:98:e9:d0:da:8f:
1b:3e:d0:f5:88:14:27:9d:44:63:40:30:d9:03:ee:
94:21:cd:b7:8e:85:c3:e4:85:33:ef:41:b9:3b:34:
70:e0:70:3d:fa:ce:03:18:1c:74:1e:7b:2f:35:cd:
94:94:22:8d:8e:1d:0b:4c:d2:40:cb:82:79:a5:41:
11:c4:33:d8:41:69:8d:09:99:d8:7c:ef:fe:88:03:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5B:2C:FC:77:34:CD:F9:59:A3:22:C7:15:16:E1:ED:50:69:54:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv4:
204.194.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:2d:76:70:b3:e9:9f:50:37:49:1b:86:01:d3:76:e5:5a:38:
ae:0e:1d:85:bc:a1:96:d0:fd:ab:dc:33:c2:fd:78:b1:c9:f8:
86:49:2c:98:05:32:08:c4:63:af:aa:d2:d5:85:6d:2b:41:99:
b4:30:1f:79:9c:3a:6e:60:dd:8f:6f:cc:90:6b:d6:55:fd:88:
7d:3d:aa:bf:60:69:cc:0d:75:4e:8c:f8:f3:15:49:35:8c:86:
9d:2b:dd:30:a6:d9:b0:34:af:a9:3a:49:b8:d8:dd:a4:cf:21:
4f:e1:6f:ad:ea:a1:4a:08:e3:a6:b5:d7:ad:9e:24:30:0a:3d:
9d:d9:f7:2b:51:86:49:75:c9:9e:b5:23:64:65:ff:df:4a:33:
15:1d:62:f4:bb:97:70:8f:09:6b:78:51:3c:bc:4b:e5:dc:87:
0b:ee:b6:8c:dd:15:6e:1d:4b:36:cf:ef:7e:db:26:1e:26:02:
22:97:ed:67:eb:46:85:45:f4:2c:fa:b2:e7:a1:74:37:85:80:
89:4e:1b:ea:c4:85:38:dd:40:ab:94:73:56:d2:65:9e:e1:41:
3f:c6:e0:83:7d:f0:37:4b:fa:c7:37:b0:7b:6f:13:56:49:7c:
55:c9:34:68:b5:58:ef:8a:9c:2c:9a:e3:d2:fb:fc:2b:b7:7b:
ab:31:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:09:07 2026 by rpki-client