
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa
File: b141f248-49b7-31ab-b20c-04519496bec3.roa (raw, json)
Hash identifier: mOJz/b84QRqyMELE0GqltiTIIJ5/KxnhgEGQkTJgWio=
Subject key identifier: C0:A6:36:A2:25:81:51:9E:86:2C:D9:4B:C4:D4:6C:EE:72:2C:59:9A
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584D98BAB4EDBF5C89AA807D0F80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa
Signing time: Thu 23 Apr 2026 01:00:24 +0000
ROA not before: Thu 23 Apr 2026 01:00:24 +0000
ROA not after: Wed 22 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 130.35.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:98:ba:b4:ed:bf:5c:89:aa:80:7d:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Apr 23 01:00:24 2026 GMT
Not After : Jul 22 01:00:24 2026 GMT
Subject: CN=8f9662a7-e237-4581-9db2-2589d7133ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:92:8d:0c:8a:f3:a3:13:31:da:21:ac:46:
87:7e:3d:7a:fc:38:06:9c:49:5a:96:6a:53:23:87:
a7:3d:b3:a9:a2:0d:aa:c9:a7:0e:54:48:50:6a:af:
83:ea:ea:33:ce:00:42:bd:f4:e6:52:28:63:99:d6:
26:6b:8c:4a:28:d7:a3:45:8e:ea:0b:cb:d5:06:20:
25:02:6f:ba:62:aa:7b:20:29:9f:72:a7:3b:9b:55:
2c:16:53:3b:57:99:5d:80:43:6b:65:35:ed:d6:0e:
75:96:79:09:65:b5:db:d6:f4:51:ef:22:62:2c:23:
05:32:37:79:3a:4c:f9:6e:4b:89:35:b7:05:14:16:
bb:d7:c2:48:89:b2:f8:6a:29:5c:24:33:54:3f:93:
e9:13:ae:83:7c:69:e2:ec:8c:8a:e4:f8:c9:12:d0:
85:21:62:96:5c:7d:2c:1e:9f:af:5b:23:cd:d8:83:
1a:cc:01:60:bb:78:8d:b2:8a:cb:10:2e:16:61:d2:
5f:b6:df:3f:76:e7:6d:33:72:1a:71:03:e0:33:e8:
8f:5e:78:28:69:14:49:9c:14:21:f4:90:85:8d:3a:
1a:46:83:79:62:88:bc:22:2e:7c:cc:19:8b:64:47:
f7:60:0c:6d:a2:64:33:1b:87:fe:91:98:3b:9b:93:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A6:36:A2:25:81:51:9E:86:2C:D9:4B:C4:D4:6C:EE:72:2C:59:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
130.35.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:d3:04:90:cb:45:51:37:eb:ee:de:68:53:86:e7:80:2a:73:
c3:0a:a7:99:d7:54:2e:6e:60:43:ac:19:24:22:f5:bd:18:2e:
d1:8c:fd:cb:23:1e:76:5a:81:f5:18:bc:37:ed:0e:66:03:fe:
37:02:79:7c:bd:9c:5e:2c:7f:a6:98:50:12:6e:4a:01:41:90:
00:23:ae:b3:ae:86:ff:a4:0a:cf:94:5b:6f:c1:c2:80:62:ac:
01:bf:8e:89:6d:32:21:ed:d6:fd:30:0b:f2:46:72:69:76:ce:
64:01:0f:a7:8b:5a:37:96:0e:5a:5b:d1:6d:81:00:07:4e:0e:
a2:96:a4:70:03:09:dc:69:f7:51:58:9a:c3:27:9a:29:2a:0a:
71:f8:72:50:dd:e3:3a:f6:eb:06:a5:a0:bd:ed:bd:46:d3:fd:
47:f2:22:5f:10:04:58:6b:91:82:e4:b5:b0:d9:3a:cf:df:e8:
61:cf:b2:b6:ba:a6:9e:d7:3a:9d:53:87:9f:49:ce:9a:40:a7:
65:f9:1f:e0:13:a5:2b:ba:f8:fa:9c:31:a6:89:1c:a4:71:d0:
dd:67:d1:25:62:a0:05:92:21:56:96:cc:b6:d7:cc:19:c1:eb:
08:bd:25:b4:2f:bb:a4:e3:1b:39:fa:cc:2f:08:92:59:55:ce:
c2:d4:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:57 2026 by rpki-client