
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c13f0ec-08e2-3c38-b1fe-be19f6060acc.roa
File: 3c13f0ec-08e2-3c38-b1fe-be19f6060acc.roa (raw, json)
Hash identifier: pRBO7xAoPbBfRQT8DRCFcQ5KjO1Iclo21791iPc6cq8=
Subject key identifier: D2:F8:DE:37:38:94:ED:74:E4:9C:A4:86:77:4B:71:E3:A0:13:3C:5B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D3DFFCFA95D4C7E3FAE020100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c13f0ec-08e2-3c38-b1fe-be19f6060acc.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 15169
IP address blocks: 74.125.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:cf:a9:5d:4c:7e:3f:ae:02:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=849fab45-c18d-4424-afd8-a7a978dbff7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a6:ca:26:ca:2f:81:ef:e6:e1:53:41:bb:dc:
f9:03:db:c6:fb:13:ff:bb:06:51:fa:d8:5c:5a:6c:
ec:46:22:52:61:16:a3:27:2e:7f:c8:89:9f:87:e6:
bb:5f:9e:1c:31:23:a0:14:a6:08:46:3c:c9:68:fc:
a4:9c:0e:44:4a:8f:6e:d5:69:f8:be:b1:57:30:79:
80:6d:98:0b:8e:80:fc:8f:f7:43:f8:c0:83:a1:da:
46:be:03:71:14:51:34:67:fe:cf:b2:2b:5d:c1:22:
61:98:0f:a3:76:2f:f7:66:2d:75:70:5e:ed:06:49:
57:a8:c2:aa:62:0d:bd:a3:db:29:1a:9d:45:44:2e:
ec:bd:7c:ca:7b:e8:66:cf:86:3f:ee:1c:64:17:48:
72:51:01:9e:37:e7:e1:5e:27:cd:1e:b7:95:72:2b:
be:db:dc:9d:c7:94:57:7f:0f:31:b2:e6:79:72:93:
d6:56:99:ab:4c:de:95:0e:49:e3:6e:a2:04:d3:9e:
18:61:b4:26:3c:5d:05:7e:d6:e8:e5:30:ad:7f:47:
37:d4:3d:1d:59:a6:b1:19:bc:9d:12:1a:1e:67:89:
de:9b:a8:c1:d2:2f:c3:12:e9:c2:e0:10:5c:d5:c5:
a5:1e:ff:a4:ee:7f:4a:9d:19:28:67:6a:e7:8b:b3:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:DE:37:38:94:ED:74:E4:9C:A4:86:77:4B:71:E3:A0:13:3C:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c13f0ec-08e2-3c38-b1fe-be19f6060acc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:03:cd:c5:a5:d5:05:2b:d7:82:f9:88:db:8a:7f:cb:00:83:
1f:0e:68:67:51:fa:f8:7f:c3:5e:6c:a2:6d:dc:35:83:8d:d2:
a3:14:04:5a:0c:92:47:21:b2:94:68:75:05:b0:34:e5:c4:fb:
a3:6f:49:a2:e2:7d:c6:1f:fc:a1:48:a8:c6:29:6c:73:f9:d1:
07:94:5f:af:69:89:be:54:25:a1:25:5e:81:cf:b0:4e:ee:d9:
91:42:dd:2e:f9:c0:d1:c7:f0:17:0c:2f:4c:a5:46:75:74:12:
fb:e4:31:65:2e:13:35:42:87:c5:69:bb:6d:0a:82:a8:82:f3:
77:de:87:f9:27:7c:21:da:36:37:8e:43:28:2c:58:55:08:5f:
a6:36:c6:82:64:c1:08:2b:34:69:07:f2:81:6d:ca:ad:3e:e6:
ef:c0:2f:60:30:d9:7d:db:89:46:21:c1:62:64:bd:8e:db:38:
19:d1:cf:6d:a7:53:80:75:d4:0a:3e:e5:46:d4:b9:a8:1f:f9:
0a:f1:38:18:b7:c5:f8:b2:a2:21:f9:66:80:fa:19:3c:b1:d8:
66:c3:1d:2d:00:67:d2:a7:a2:83:69:35:71:6c:f2:61:eb:b3:
2e:6f:21:5f:8f:27:4e:3c:64:e7:24:8d:20:99:83:ef:11:f6:
5e:42:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:17:13 2026 by rpki-client