
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef342160-62a1-390f-a32b-091a77122003.roa
File: ef342160-62a1-390f-a32b-091a77122003.roa (raw, json)
Hash identifier: OimdwypDLEDlhx3eIC7JSlewduT1s17SU33lxUEpluI=
Subject key identifier: 0C:A1:2B:89:85:E0:BF:7D:7B:A5:27:90:3F:11:D5:1B:9B:62:8D:28
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584D40CA4C1DF64B18C8A18BE040
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef342160-62a1-390f-a32b-091a77122003.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 11537
IP address blocks: 64.57.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:4c:1d:f6:4b:18:c8:a1:8b:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=69659b36-ae8b-4de4-a5f2-b16a039244ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:3c:4c:79:fb:df:79:c0:cf:aa:bd:a9:a8:
c0:49:d2:70:a4:4d:a0:c9:ac:c9:80:a1:3c:57:55:
cc:14:5d:44:a6:ec:3e:59:d3:79:58:8a:4a:50:8f:
f2:06:36:24:5e:d5:82:4a:f2:10:9c:1b:e7:6d:ef:
6d:e3:4c:40:4e:c0:d6:e0:3d:c8:e8:a8:e1:cf:34:
3b:e7:c0:48:b9:05:af:dc:39:f1:ac:8b:d3:1a:ab:
12:28:98:14:86:e0:cc:f1:0f:0d:9b:76:30:78:18:
9c:b6:fd:1e:c5:c6:48:19:27:95:8d:60:2a:d2:b5:
11:b9:4b:18:ad:00:19:28:e3:04:56:45:32:cf:45:
29:c3:fc:17:04:22:e1:f3:75:7d:7e:9e:7e:7f:12:
d2:2a:6f:75:03:99:88:b6:3c:b3:7e:1a:9f:9f:b4:
52:d1:0b:58:3f:6e:10:7c:91:bd:dc:b5:d3:1e:44:
27:ee:6a:30:6a:89:b1:71:31:51:fc:67:fa:91:c9:
e6:c0:46:65:30:64:bb:de:af:a9:3e:a7:2a:71:39:
20:17:ed:56:ba:20:ff:c0:52:e7:0b:e5:fd:3b:d5:
03:57:f1:21:4d:ea:b6:96:df:eb:3f:97:10:a0:46:
f5:c6:36:78:d9:fd:6e:24:a1:3d:27:1c:98:f8:42:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A1:2B:89:85:E0:BF:7D:7B:A5:27:90:3F:11:D5:1B:9B:62:8D:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef342160-62a1-390f-a32b-091a77122003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
64.57.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e5:24:5f:4d:bb:42:36:89:4f:06:9f:9f:2c:17:37:dd:65:
52:02:33:be:50:95:01:61:51:b3:1a:82:bc:35:c0:c7:8a:85:
30:be:fd:48:e1:8f:3c:8f:f8:33:8c:ff:0d:f9:d7:ed:2b:3f:
6a:03:87:f9:b1:b6:10:c0:74:01:0e:47:cc:aa:b2:c3:57:bd:
ef:86:ec:e8:cf:09:7b:a5:f3:34:f8:6d:cd:e6:75:06:97:52:
f6:23:9e:d4:65:9d:57:c7:3b:e5:bf:f1:86:df:c2:92:64:6f:
f5:08:92:0e:bd:a8:de:c1:9e:c1:62:a5:4d:74:4d:1a:2e:ca:
22:21:37:0c:be:14:d0:66:1e:c4:8a:7a:60:87:b8:97:9b:91:
c4:4c:b9:6d:4a:6f:bf:25:ea:06:13:81:e2:6b:e7:8a:e5:9e:
c0:b6:b2:ae:fe:5c:9f:69:5f:11:66:bb:fe:14:b2:5b:21:25:
07:54:12:ce:d6:da:51:88:e7:fa:ee:b3:c5:7f:72:8b:84:0f:
05:3e:a7:74:20:5e:9c:7e:d6:be:1f:d3:2a:da:cd:36:ea:dc:
94:c9:7c:ac:20:f2:04:ed:7a:36:ea:42:7e:c1:5b:76:b7:94:
89:d0:e1:2d:34:a4:12:38:aa:a4:28:e2:b8:25:e9:1d:d9:5f:
c3:fa:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:18:55 2026 by rpki-client