
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa
File: ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa (raw, json)
Hash identifier: 1th6+2WCNRK33481zdl5kibWoISj0xA1D5QiN/NSc+I=
Subject key identifier: 3F:B3:81:97:37:55:E4:DC:90:CB:0C:3A:12:BB:C0:2A:1C:40:C9:8C
Certificate issuer: /CN=560b4c54-bd35-46e1-8698-aff50195e1b4
Certificate serial: 010D0C9F4328584EA7876B82D9EFE3E67535BC80
Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396163
IP address blocks: 204.16.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 13 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:6b:82:d9:ef:e3:e6:75:35:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=6f389bd5-0a96-401c-b744-57cf43adeaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:b5:e0:09:2b:f4:a1:d5:5c:ed:51:04:c6:
82:63:c8:3c:04:d3:8f:ef:27:96:ab:f1:6d:0f:5d:
4a:ad:45:84:b0:f3:3a:97:04:fb:3d:3a:07:41:50:
3e:0d:37:d5:ae:3c:6a:71:4e:86:db:6c:d3:6f:28:
af:b4:06:30:ca:5a:7d:0d:ac:a9:af:4b:99:f6:1a:
c3:21:6e:f3:bd:5b:aa:2e:08:07:34:8f:4b:ca:b1:
06:5d:f7:bd:dd:27:b6:8f:e0:a3:26:e5:e9:70:30:
8f:21:b2:32:df:a6:ac:98:82:77:05:74:c1:f5:ca:
b5:22:2d:5f:e6:0d:91:9e:e9:b0:89:b3:95:c4:38:
cd:4a:df:b2:78:43:47:ec:3c:ba:57:b8:77:f1:90:
bc:d1:1f:eb:ab:91:d1:3a:f5:11:a9:1c:2a:5a:4b:
ac:08:87:45:33:b9:ec:36:c1:96:cd:bb:5e:95:84:
39:94:da:da:62:18:48:88:2e:f8:fa:91:87:ec:c0:
f8:eb:d7:c3:2f:a3:a0:43:a3:74:4d:c9:d7:7a:a6:
f1:1a:a6:71:6e:f3:61:6d:e5:41:97:33:41:75:5b:
82:84:7c:bc:54:fe:6f:cd:73:6f:d6:a1:2d:48:94:
63:9b:98:c5:79:bc:c5:94:fa:2c:43:4c:00:4a:cd:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B3:81:97:37:55:E4:DC:90:CB:0C:3A:12:BB:C0:2A:1C:40:C9:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl
X509v3 Authority Key Identifier:
keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
sbgp-ipAddrBlock: critical
IPv4:
204.16.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:4f:af:61:ad:f0:51:c4:f6:10:4a:a4:5f:10:49:5a:29:a0:
d5:23:91:6a:42:86:47:8a:7b:61:90:4f:ee:03:a8:80:97:fc:
d1:2f:75:0e:aa:de:9f:be:ea:f8:a2:86:0d:de:48:06:3c:41:
6b:19:8b:24:d5:b5:c8:48:50:a6:2f:9c:8e:b9:3e:00:f3:f2:
37:ca:f6:df:c4:2f:e5:25:a0:8f:97:f6:72:f3:b5:36:58:6e:
07:5e:be:eb:83:9a:4b:9c:39:b6:a9:83:87:06:40:38:1b:e2:
d2:54:30:aa:2d:56:5f:e4:ae:52:07:f7:b6:40:55:b7:02:c1:
e4:97:a3:48:b8:42:af:f3:e0:16:63:bc:e4:dc:ad:c5:cc:b8:
5b:92:bf:7e:4c:ea:4a:1a:8f:7b:4b:fe:dd:9e:51:73:74:07:
53:36:12:25:32:c0:de:d9:12:aa:19:31:45:62:f3:bf:29:e6:
6f:ec:7f:27:4a:80:bd:6b:c6:8e:da:af:5d:a1:8e:00:26:32:
cd:dd:27:ff:f3:53:26:dd:dd:fb:ae:3f:e7:c9:b1:a4:6d:ed:
ec:73:4d:cc:c4:85:af:84:7b:d9:d2:83:53:ef:08:9d:43:3b:
2e:36:84:63:2c:9b:02:9f:f1:0a:cb:ca:8d:e3:14:14:b3:20:
f9:2e:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 22:42:55 2026 by rpki-client