
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/71c32875-17b9-37fc-883b-5b24872cf840.roa
File: 71c32875-17b9-37fc-883b-5b24872cf840.roa (raw, json)
Hash identifier: ci2SC+F1J/IAZpZF1BsuvZMK2Vzw66xReYzTumupu8o=
Subject key identifier: 9A:01:2B:B8:4E:B8:FD:BA:C1:94:45:34:AE:FF:68:C1:3F:5F:14:82
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584D40CA44D0C6390869FF8D405B
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/71c32875-17b9-37fc-883b-5b24872cf840.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 13436
IP address blocks: 163.253.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:44:d0:c6:39:08:69:ff:8d:40:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=a09dbd17-a142-4332-8b9e-bee0381d2c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:47:e3:b5:bc:ba:ea:87:f5:9c:f9:da:16:
d2:2a:22:87:a3:5e:bb:80:38:cb:68:5a:1e:c9:07:
8f:a9:2b:98:79:bf:55:2f:a7:71:56:81:68:da:44:
24:d1:00:66:ac:eb:07:25:39:91:24:46:ac:ee:31:
24:bc:1d:94:ff:8d:89:02:40:fa:20:85:1f:2e:da:
ef:a8:e9:b0:e5:6a:15:7f:c1:2b:c3:c7:24:64:52:
c3:1c:bc:dc:51:4b:62:bc:39:53:1b:b1:c0:47:9c:
33:b4:c8:e9:5a:80:ce:78:20:fe:97:87:ed:28:62:
df:2a:65:11:4d:08:1c:04:85:f6:26:04:41:71:a0:
49:a0:c6:7c:5a:a5:69:57:80:ee:c2:58:be:32:dc:
ae:27:f7:82:22:43:37:5f:c9:69:2b:1f:35:5a:1d:
07:e7:59:14:e1:0e:6e:ba:89:d8:7c:86:61:59:20:
94:e2:f5:f6:c4:fc:d9:6d:b8:22:8c:df:ce:e9:61:
59:dd:71:49:8f:81:4a:89:5a:eb:23:9e:c7:2d:a3:
8b:04:35:ba:c6:a4:1f:06:4b:ce:86:c2:0d:98:e4:
6a:86:e2:6b:44:6a:92:4f:82:2a:66:82:71:e6:e8:
6c:00:c4:f3:8f:16:03:b9:66:18:8f:cd:ce:64:24:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:01:2B:B8:4E:B8:FD:BA:C1:94:45:34:AE:FF:68:C1:3F:5F:14:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/71c32875-17b9-37fc-883b-5b24872cf840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:c6:c3:63:7d:dd:2e:ef:c6:b0:05:71:35:6e:73:c1:18:dc:
71:77:03:a1:0f:79:9f:38:87:92:46:87:9d:4d:48:01:64:09:
c8:72:a2:20:81:6c:e7:9f:59:1a:1e:5c:c2:54:22:01:46:33:
38:00:85:44:58:a0:01:a5:3b:29:de:9a:7b:ba:78:ec:71:54:
1b:1d:b1:82:f4:c7:43:35:e7:c2:50:a4:d1:c6:8d:ed:0f:de:
83:d3:72:fd:ab:f1:f1:5d:3d:15:80:d5:54:cf:65:c2:e2:a5:
7f:e0:00:2a:d2:f1:9d:84:72:b9:b8:24:9c:eb:68:a3:e7:27:
3f:9f:ee:58:8a:bc:03:c1:21:e4:7a:6b:b8:41:64:08:b8:98:
b8:89:bc:0b:e9:4a:b4:c2:0c:1f:73:ef:82:e2:95:1c:ee:dc:
9f:d7:c9:88:01:84:e8:81:79:69:ad:e3:16:f4:ad:75:66:59:
c6:9e:62:4d:16:82:91:f1:1f:78:56:07:38:f2:85:22:12:88:
22:94:7d:8e:cd:ca:9b:dd:0d:d3:c5:9d:0b:91:b4:a1:c5:dd:
d7:07:75:d9:fc:90:e5:fc:f4:c1:12:b3:3e:b3:82:19:7e:99:
45:51:fd:8b:b7:e6:d1:49:ef:9e:7e:29:79:17:bd:c1:15:28:
a8:b4:a9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:18:52 2026 by rpki-client