
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/4bdaf90c-5dac-3559-ab79-8f4593927d20.roa
File: 4bdaf90c-5dac-3559-ab79-8f4593927d20.roa (raw, json)
Hash identifier: odM8LqC7OOvXUXqkTrkux7pohEYVfunxtQ/0trcYc6E=
Subject key identifier: 94:EE:C9:15:78:DD:E3:3B:A4:44:E8:B9:EB:C9:32:6C:AA:A8:B0:CF
Certificate issuer: /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial: 010D0C9F4328584DB9568FD8E95C9DE630B83F80
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/4bdaf90c-5dac-3559-ab79-8f4593927d20.roa
Signing time: Mon 04 May 2026 17:20:32 +0000
ROA not before: Mon 04 May 2026 17:20:32 +0000
ROA not after: Sun 02 Aug 2026 17:20:32 +0000
asID: 398391
IP address blocks: 131.226.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b9:56:8f:d8:e9:5c:9d:e6:30:b8:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Validity
Not Before: May 4 17:20:32 2026 GMT
Not After : Aug 2 17:20:32 2026 GMT
Subject: CN=090bdc92-912f-4d2c-acb9-30b24e62d454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:49:b9:ba:5f:35:24:d2:66:fc:d7:c5:d8:
e1:ab:42:dc:82:0a:04:42:5a:ae:b1:30:be:5a:7f:
86:60:96:4d:41:86:b2:25:83:2d:f2:cb:35:13:b8:
c0:4b:0d:c5:d8:e1:76:ee:a6:fe:62:30:7a:47:b8:
1b:26:1f:b4:eb:04:ff:28:0a:ab:4c:ee:80:7f:71:
e9:98:80:5f:62:28:6f:21:07:db:2b:b5:c3:ca:f6:
f8:1a:c5:eb:39:53:03:4c:cf:8d:5d:e4:40:f6:3a:
68:4d:7b:4b:99:91:fe:b6:97:7a:8a:05:d2:13:36:
97:3b:e5:e7:38:4c:76:ec:5b:fe:fa:85:ef:f3:1c:
da:8a:3e:a9:71:c7:fc:06:98:eb:de:e5:0b:bd:04:
6d:17:b5:85:14:a1:13:04:8d:e4:a3:c9:93:88:6d:
f5:85:86:ef:a5:d2:f9:ac:bb:ca:7f:9a:e6:29:4b:
bd:35:c3:bf:98:6f:b0:2d:2d:ef:8d:c5:38:72:7b:
32:11:09:87:a8:68:16:40:fa:54:65:88:c9:07:5c:
45:fe:85:37:19:58:1c:c8:b8:16:37:f1:4b:98:b7:
aa:09:d0:c0:ee:06:4a:7a:35:c6:5d:6c:ba:9d:e6:
2b:55:fc:a5:4b:49:fe:fc:a3:c3:89:1c:37:6c:d2:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EE:C9:15:78:DD:E3:3B:A4:44:E8:B9:EB:C9:32:6C:AA:A8:B0:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/4bdaf90c-5dac-3559-ab79-8f4593927d20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
X509v3 Authority Key Identifier:
keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
sbgp-ipAddrBlock: critical
IPv4:
131.226.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e2:4b:da:c5:98:17:e4:7e:e5:4d:bc:78:e5:81:05:d2:df:
74:36:7f:11:86:3a:aa:18:1c:3f:b3:0e:a7:59:6d:22:cb:c2:
ec:73:27:9c:b3:89:02:08:22:b9:94:22:fb:6a:f8:35:34:8f:
60:36:f8:c5:5c:10:05:73:0e:44:f0:dc:05:87:60:92:a6:db:
a7:27:4d:d8:4b:ce:e4:29:6c:9c:c7:48:26:c4:20:47:65:77:
0f:3c:b1:a1:31:97:48:68:e3:92:a2:a4:d1:4e:94:77:4c:44:
79:af:89:2b:0d:cf:23:6e:36:ec:8f:ed:94:41:e1:d4:37:cf:
62:28:ed:22:85:4d:2c:68:78:66:ac:78:85:6b:c4:bb:a5:2f:
46:53:97:3f:86:29:a6:00:65:28:80:c1:1c:95:3c:83:87:c3:
bf:47:62:42:d8:c0:4e:b2:ed:2e:86:3d:65:8b:bc:14:3c:c2:
4b:d5:b9:58:21:d7:bc:ec:8a:97:f0:e7:3d:11:23:13:15:1a:
38:fc:42:50:86:ca:79:9d:c2:68:b1:36:aa:13:40:ac:35:6f:
02:35:ad:0d:d3:23:b3:f0:cb:a1:9d:11:6e:bf:c7:59:11:2f:
a7:3b:3d:ad:4a:55:a4:5d:09:74:f3:7c:a4:7c:e2:ec:df:ae:
ca:a5:25:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:16 2026 by rpki-client