
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4f5e2300-b66f-38f8-ac96-cce31adb1945.roa
File: 4f5e2300-b66f-38f8-ac96-cce31adb1945.roa (raw, json)
Hash identifier: Vg4aD+S6/nI2TbCgCD4/kEqL3fk8Ol+vuaQsmyttwCc=
Subject key identifier: 3C:82:76:E7:ED:FA:27:5D:78:7D:35:16:03:B4:D9:31:4C:45:B5:70
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584D44FA479D8C74EE4662C5B500
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4f5e2300-b66f-38f8-ac96-cce31adb1945.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 16417
IP address blocks: 207.54.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:47:9d:8c:74:ee:46:62:c5:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=73fcb2b8-b11d-4640-82a3-89505b7824f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:7e:63:7d:30:68:71:d9:f5:d2:16:f3:34:
11:a6:dc:dc:9d:a6:0e:9c:54:b5:26:86:d9:3f:84:
91:5f:b0:21:6f:6c:3a:0b:13:1e:31:15:39:d7:d5:
87:a6:7c:9d:56:77:42:01:7d:d4:42:a7:c3:b9:f3:
99:01:f3:c0:e7:47:96:a0:8e:26:e5:49:fb:7c:a5:
0e:41:17:55:b8:c3:ce:c9:73:71:d8:c2:a1:bd:d7:
6d:c1:36:05:b2:5e:e5:84:f5:69:08:ee:df:a5:bc:
75:7c:55:a2:82:f7:db:89:5c:bf:67:8b:65:d3:80:
90:5a:d9:76:5b:72:c1:c1:2b:a6:3b:60:34:60:45:
19:9d:92:38:f9:6a:49:35:f1:8f:07:02:56:6e:08:
fc:84:8c:db:7a:e5:1f:62:f2:3a:07:a3:8e:95:22:
eb:18:9f:d2:2c:8f:ec:00:dc:36:b4:c9:7e:5d:7b:
23:0c:89:75:13:ae:34:02:a3:f2:08:b8:8e:ea:c2:
99:e1:0c:d3:5e:1f:c4:29:2d:0e:d6:0e:d9:1e:6b:
0b:89:90:a0:91:b9:4c:63:68:76:6d:05:f7:8d:00:
a2:1f:4a:fd:7b:d4:71:1e:d0:a7:69:f4:ec:f9:95:
0c:5f:1b:77:f5:29:c4:a5:b1:5b:55:71:9f:58:b6:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:82:76:E7:ED:FA:27:5D:78:7D:35:16:03:B4:D9:31:4C:45:B5:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4f5e2300-b66f-38f8-ac96-cce31adb1945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.54.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:54:4f:46:bf:d2:fd:98:9f:9f:8b:1a:49:dd:49:86:13:18:
1e:78:11:3d:dc:5f:22:c5:f6:cd:45:73:14:36:cc:8e:b3:63:
f0:b8:e0:2b:2b:33:c2:16:17:50:bd:f1:8e:19:60:72:6c:2f:
57:9b:03:43:63:00:05:d5:0a:14:38:61:64:e8:66:34:2a:b6:
17:dc:57:ac:b5:8a:f5:7f:3e:fe:70:b2:32:7d:6a:f5:2f:49:
0e:40:b2:2d:3e:a9:6a:8c:c4:93:e1:86:9e:98:92:cc:2b:4f:
3b:75:80:cb:f3:b5:f1:20:b9:df:c9:7c:00:61:d0:1a:09:c3:
f1:86:ff:a3:50:4a:51:39:42:d7:c6:17:12:0e:70:78:0c:d2:
6c:f0:f6:14:1e:cb:db:a8:45:5c:50:f4:04:22:ce:ba:01:72:
e5:fd:96:37:3a:d0:18:2a:3f:58:22:ca:c5:f0:a5:b8:23:08:
bd:02:f4:27:0d:3f:af:be:6d:9d:3f:8d:95:f1:02:9a:73:82:
ef:f9:07:7b:53:21:5d:91:c7:5a:c4:cc:83:16:64:13:6d:9a:
af:85:85:50:ca:8f:49:27:26:7f:ba:83:c2:30:9a:16:60:3f:
5d:53:02:2c:94:4f:09:33:80:10:45:5d:b2:ef:39:fe:c3:3e:
4d:1b:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:51:54 2026 by rpki-client