
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa
File: c491c12d-818f-3600-85d3-2274f8c724f7.roa (raw, json)
Hash identifier: MFVHTBKWIE9lltgKQ3a1JHkki3K86ligk4joDZ3qRZQ=
Subject key identifier: 3F:E8:35:B0:98:0C:03:01:9C:3A:7C:F5:DC:DF:40:00:B9:FB:9E:05
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584D2A74C18A5C949321648CE8C0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 22652
IP address blocks: 107.161.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:c1:8a:5c:94:93:21:64:8c:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=46e01ee1-bb9c-48e5-9710-e4ea1bf207a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:e7:73:bf:71:f6:df:c7:95:25:09:48:a7:
91:4d:80:a4:13:30:4b:c2:85:71:85:eb:0e:c1:b6:
99:44:7d:f3:a5:95:d3:93:41:df:d8:b2:bb:93:19:
e0:7b:f6:e0:2c:87:71:7b:00:08:61:8e:1c:70:57:
5e:23:60:db:d1:d6:31:6a:8c:d6:b2:c9:55:7e:76:
0c:03:a4:55:16:6e:2b:87:c5:d7:d7:8b:73:b1:94:
97:58:b8:60:1d:38:b9:90:38:35:a7:05:01:dd:a9:
fb:e5:73:2c:9b:a0:4f:33:ed:76:ae:74:65:3b:df:
a2:b8:0e:f8:c1:6d:0c:24:a0:48:56:b2:e1:b3:64:
45:3e:16:3c:0f:98:69:f2:f4:cd:b5:94:f7:62:47:
08:d0:e5:69:51:73:05:88:5c:fa:64:33:e2:ed:d1:
41:3c:0c:c3:af:e7:68:3e:cc:20:5b:5a:7b:42:6e:
fb:1c:46:e3:5e:0e:e6:2b:0a:3f:02:1b:24:97:80:
2e:8b:6b:71:6d:32:e5:28:b0:5e:46:81:01:f9:61:
79:d5:24:01:63:58:a8:2f:a7:5e:52:85:73:8b:32:
0d:7f:ff:2e:64:e0:3c:00:b0:43:13:5b:0f:bf:ef:
a1:e2:07:e4:3b:ce:9d:f1:02:e0:79:7e:43:4e:88:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E8:35:B0:98:0C:03:01:9C:3A:7C:F5:DC:DF:40:00:B9:FB:9E:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
107.161.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:55:a5:ca:3e:31:85:93:ec:6d:fa:29:6c:c0:2f:e8:1a:d0:
da:5c:73:da:dd:8f:c0:dc:60:44:d4:93:ea:a0:77:38:54:1c:
8b:7e:7e:24:26:50:a8:e8:bf:4e:30:da:12:c2:c0:62:1e:a4:
58:c3:bd:61:0d:ae:b7:a0:e9:e4:ff:6d:94:c9:68:46:fb:c2:
de:fe:fe:d8:4d:f0:e9:44:5c:c5:cd:a2:d8:87:53:8f:d7:8f:
37:64:aa:cc:9a:bb:74:b0:de:1c:91:a4:13:76:d9:62:8c:f7:
7c:7a:52:be:ce:5c:d2:79:9f:dd:60:86:1d:7b:60:f7:93:69:
51:a6:c1:7f:67:fe:19:af:ba:a3:da:59:f1:ce:28:7a:c3:33:
32:99:4a:98:65:e2:40:b9:cf:fb:fc:f1:df:2a:f8:89:ed:d5:
f5:e1:d4:d5:f6:71:ec:8f:bb:7a:fa:a5:d3:b2:d7:62:0a:9a:
68:dc:f7:f5:84:22:28:2d:18:da:13:1e:e5:dd:69:a6:a9:bf:
42:09:c2:07:da:8a:4e:4a:44:f4:6e:be:30:78:49:00:d6:03:
0a:c3:ee:b3:41:7a:43:80:ee:36:61:5f:bb:42:08:f5:fe:40:
71:21:d5:74:f0:66:a6:00:1f:24:0d:29:4c:b6:80:67:48:ff:
9b:04:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 10:07:26 2026 by rpki-client