
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/4dcae7c3-a0de-3c1d-a613-5d588e194133.roa
File: 4dcae7c3-a0de-3c1d-a613-5d588e194133.roa (raw, json)
Hash identifier: FwRS9G8yvRv+AdsiMoM/I3/7E8UIzVaLlolifz3ph4M=
Subject key identifier: B0:CF:9A:77:B1:7F:E6:83:51:A3:03:7C:23:8D:3C:84:07:5E:C4:95
Certificate issuer: /CN=91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f
Certificate serial: 010D0C9F4328584D0EC2D1CE4A3464D131583DA0
Authority key identifier: C9:7E:23:7E:30:DE:F6:1E:7A:9B:FD:9E:1B:B1:42:55:C8:D1:9B:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/4dcae7c3-a0de-3c1d-a613-5d588e194133.roa
Signing time: Wed 04 Mar 2026 14:55:26 +0000
ROA not before: Wed 04 Mar 2026 14:55:26 +0000
ROA not after: Tue 02 Jun 2026 13:55:26 +0000
asID: 557
IP address blocks: 198.202.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:c2:d1:ce:4a:34:64:d1:31:58:3d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f
Validity
Not Before: Mar 4 14:55:26 2026 GMT
Not After : Jun 2 13:55:26 2026 GMT
Subject: CN=0ec5dc8c-93e3-4530-adae-daa94b874505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:21:f5:e0:ea:cf:b1:1d:60:61:8d:df:b0:
ab:a2:4f:f5:1e:85:af:cd:d1:82:ee:49:70:23:37:
2b:b7:68:10:86:b4:05:f4:5c:25:be:41:e7:89:d2:
15:e1:8c:64:fa:15:15:27:dd:f9:da:c5:24:74:6d:
df:89:01:dd:e2:ff:38:63:48:31:ad:30:21:84:2b:
c3:cf:d7:63:5c:31:e1:34:47:e2:2a:07:88:6e:32:
be:af:f8:88:b4:2f:b6:e7:04:d9:9f:d0:5b:61:fd:
07:d6:b2:24:98:f2:06:37:d3:f8:f3:5b:4e:0a:2a:
52:d1:f7:13:39:8b:dd:6d:ce:fc:96:0c:e2:96:57:
67:b9:73:71:f4:68:29:77:4c:48:82:3f:e5:5d:0c:
94:68:e6:c3:c5:b4:97:53:59:77:74:a0:47:ee:0a:
57:16:b0:1c:ab:17:7e:90:ac:c7:18:d3:5c:b4:b1:
15:b9:f3:02:83:54:f7:71:4f:a4:a0:d4:28:37:35:
a5:88:df:c1:8d:fb:37:b4:c2:98:a2:3a:70:37:0d:
f5:45:98:cb:d7:1d:ec:64:e3:de:65:02:88:aa:85:
2f:47:00:1e:a3:0a:5a:77:0f:97:53:b9:4a:8e:04:
21:8d:29:6a:31:bc:a1:23:b3:80:c6:5d:06:5d:67:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CF:9A:77:B1:7F:E6:83:51:A3:03:7C:23:8D:3C:84:07:5E:C4:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/4dcae7c3-a0de-3c1d-a613-5d588e194133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.crl
X509v3 Authority Key Identifier:
keyid:C9:7E:23:7E:30:DE:F6:1E:7A:9B:FD:9E:1B:B1:42:55:C8:D1:9B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.202.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:ee:72:f8:24:3c:85:1a:76:35:04:ee:99:4a:8b:18:ff:95:
58:03:75:87:0d:b0:b8:6d:fc:e7:90:ff:95:bb:56:eb:77:b2:
72:2d:31:17:92:6f:15:f9:df:8e:6b:7c:ac:56:4c:d1:12:f4:
6d:56:5c:46:a9:fd:4b:a6:e1:8d:dd:bf:11:25:da:a1:2c:8a:
7e:1c:f5:15:bb:09:8d:c6:a0:db:75:e8:db:7a:e5:11:56:7d:
e6:63:96:d3:58:0a:1d:50:93:5a:82:c2:d0:da:ed:2d:3d:40:
30:97:e7:a3:a3:3d:f3:fd:e2:90:18:23:0b:24:f6:fb:a3:f1:
80:92:4a:f0:8b:92:16:e8:ab:fd:55:4b:a2:17:93:d9:bc:67:
00:df:d9:0c:00:04:5f:5b:a1:c6:2a:5c:2a:58:35:b3:0b:28:
33:8f:75:86:7b:27:7c:69:41:3e:fb:d9:81:af:6b:4c:e3:bb:
88:6f:8f:6a:14:e0:ed:4e:f1:3b:0a:e0:cb:93:cb:18:76:05:
3b:2a:af:83:a2:66:b1:ce:53:b9:8e:6e:be:55:19:bb:2b:33:
de:f7:8a:95:6d:d2:3d:18:5a:6c:d3:78:71:dd:58:c9:82:44:
43:98:c8:a2:18:fd:44:bf:75:e0:74:57:64:dd:e5:20:7f:3b:
41:e9:b5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:35 2026 by rpki-client