
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/39b21eff-11aa-3f46-9161-0f08c58454cb.roa
File: 39b21eff-11aa-3f46-9161-0f08c58454cb.roa (raw, json)
Hash identifier: 43ykZhXUHOKXwEjTBjXymJZP14a4n8tS8QPnYuLhPPs=
Subject key identifier: F4:52:EB:0B:DB:53:A5:DF:2E:A4:E3:60:B2:25:EA:46:A7:32:21:6B
Certificate issuer: /CN=d8e4c881-0377-49f5-9af5-410d30fb5527
Certificate serial: 010D0C9F4328584DA6B02ED1F8C0ADBD4C406480
Authority key identifier: F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/39b21eff-11aa-3f46-9161-0f08c58454cb.roa
Signing time: Tue 28 Apr 2026 01:00:24 +0000
ROA not before: Tue 28 Apr 2026 01:00:24 +0000
ROA not after: Mon 27 Jul 2026 01:00:24 +0000
asID: 3356
IP address blocks: 107.191.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:b0:2e:d1:f8:c0:ad:bd:4c:40:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8e4c881-0377-49f5-9af5-410d30fb5527
Validity
Not Before: Apr 28 01:00:24 2026 GMT
Not After : Jul 27 01:00:24 2026 GMT
Subject: CN=0d87062b-7076-4747-be53-4448f5704b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:bc:2f:3d:1d:b8:f8:f8:bd:c8:12:dc:9f:
80:d4:9c:d0:87:5a:16:05:66:11:79:83:88:00:83:
ae:ce:69:64:e2:d7:b9:77:6d:be:dc:d0:a8:bb:cd:
9e:c6:1b:88:5c:17:5f:31:e0:1a:ee:37:81:0a:81:
f1:b1:7a:f2:cd:04:d8:1a:2c:f0:68:7b:bd:0e:00:
5c:d3:7f:36:32:98:15:96:fc:9e:fe:f4:ce:f1:0d:
fa:ff:7f:a3:3b:6e:08:11:77:85:03:bd:70:38:31:
0d:5b:95:89:b7:5a:c4:98:4f:6b:21:86:99:57:d3:
c6:8f:3d:5d:4c:db:3b:bb:18:3f:9f:79:7a:3d:d1:
9f:47:61:98:b5:d9:5e:57:7e:d5:ae:ef:f3:5c:6c:
00:bb:c8:cd:65:45:82:82:a0:be:ae:a9:bb:d2:1e:
2a:69:1a:25:32:68:49:e5:83:ac:f4:5b:b3:f8:f3:
4d:f2:e9:3c:d8:59:9d:a6:e2:3e:39:37:bc:f0:6d:
e8:80:f1:88:cd:d8:89:17:30:b0:4f:0d:ee:49:9c:
c2:0b:c6:b0:71:e7:dd:f5:e3:79:47:ba:0c:dd:03:
0a:ae:d4:70:c2:db:98:b0:7c:86:b0:0f:dd:65:30:
9f:07:87:d0:6f:89:e0:63:1b:fd:9c:45:cd:5b:1e:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:52:EB:0B:DB:53:A5:DF:2E:A4:E3:60:B2:25:EA:46:A7:32:21:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/39b21eff-11aa-3f46-9161-0f08c58454cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl
X509v3 Authority Key Identifier:
keyid:F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer
sbgp-ipAddrBlock: critical
IPv4:
107.191.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:8b:14:0e:75:bf:54:e3:a7:27:6f:5f:27:0b:84:03:17:17:
41:6c:66:97:e2:27:03:d2:80:6f:65:05:0a:c1:e4:f1:15:9f:
ef:17:1f:b9:21:f1:ee:15:aa:3c:4c:84:da:1e:01:7f:b8:37:
8c:6c:e9:7f:40:1d:23:f3:89:c3:60:2a:87:b8:09:95:6a:ee:
b0:5d:e6:9b:5c:74:2a:87:5e:81:69:85:53:d3:f6:21:10:41:
bc:43:76:c8:d6:04:2a:07:da:81:41:4e:e5:fb:6e:c6:40:2d:
a0:c4:c5:e0:17:5f:28:32:7d:80:ac:ca:2e:46:fb:1c:cb:61:
5d:07:bc:de:d9:40:39:de:e1:69:c8:bf:41:80:d1:e7:cc:9e:
44:09:6c:43:aa:e8:d5:11:1e:a3:fe:41:bf:11:ac:f9:15:39:
62:fd:62:bf:80:43:a1:ee:5c:39:cc:7a:0a:63:1c:69:d4:3a:
cc:e2:94:e8:ff:06:73:91:6a:25:26:67:b7:43:45:8f:34:dd:
3a:0e:e0:06:f3:60:11:eb:f6:79:e9:ad:3d:d4:da:4f:fe:14:
20:00:6c:1f:b3:a6:d1:77:5b:9c:2d:fc:d5:4f:c1:12:2d:ef:
02:26:66:6d:4b:07:14:af:e6:a0:4d:5a:0b:ad:78:83:13:cd:
4c:c0:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:34 2026 by rpki-client