
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa
File: 43763c7f-21a8-34a3-a77c-63042ab10e40.roa (raw, json)
Hash identifier: QHLE55+DzOBiHJ37OvRP67xc8L83C48h4fHA8pAPMo0=
Subject key identifier: 6E:6C:1A:82:BC:1C:DB:58:AC:63:61:E4:27:A0:7E:8E:44:6B:F4:08
Certificate issuer: /CN=1e1775ba-ce9e-4791-8e12-e05afbb9713e
Certificate serial: 010D0C9F4328584DA8157EBB5F8FFFB718F63BC0
Authority key identifier: DD:A2:87:E5:BF:D3:2F:D1:0F:AC:E8:2C:49:1E:FA:B1:2E:C7:82:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 27372
IP address blocks: 64.250.144.0/20 maxlen: 22
2607:5006::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 02 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:7e:bb:5f:8f:ff:b7:18:f6:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e1775ba-ce9e-4791-8e12-e05afbb9713e
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=9bf4991e-3330-45d2-bc2c-85185102a04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d2:0c:91:16:d5:5f:cb:2a:e3:a3:a3:af:f1:
94:41:5c:d3:a4:80:82:83:80:02:e5:43:c2:9a:e0:
56:44:c2:d5:90:6b:1f:e1:82:69:c1:b8:c4:11:1e:
86:93:fc:7c:32:85:0a:3c:0d:4f:bc:9c:80:65:c1:
1d:18:d9:dd:1e:46:fa:85:fc:29:ec:61:61:c8:cc:
2f:4c:d9:bf:6e:91:ac:25:e4:9e:84:7c:f6:07:9e:
b7:10:0c:bb:21:44:5d:7b:55:8f:cf:42:bf:6c:a6:
4b:b7:81:1f:14:dc:c4:52:90:05:dc:19:c5:7d:a7:
c7:3b:67:5f:6b:95:3e:da:70:fd:12:d3:77:e2:25:
d9:c6:fd:9c:1b:04:2e:90:5f:e7:0d:5e:3d:ef:53:
ad:7c:f4:40:2b:ce:42:26:ac:ce:f9:86:41:59:e0:
c3:86:fb:32:17:13:2f:a1:32:ea:5a:a5:ad:01:7f:
de:fa:cb:c2:12:a6:1f:9e:bc:ef:a3:13:0a:0a:24:
df:45:41:49:1a:4d:0a:f3:05:05:d1:11:46:42:74:
bb:d5:43:97:c6:f7:1d:d2:9a:36:a7:24:05:61:71:
95:f7:59:06:74:7f:4a:66:e0:9d:f9:e7:17:fc:22:
1b:55:61:c7:b5:de:8e:97:3c:1a:f8:55:5c:c8:60:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6C:1A:82:BC:1C:DB:58:AC:63:61:E4:27:A0:7E:8E:44:6B:F4:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.crl
X509v3 Authority Key Identifier:
keyid:DD:A2:87:E5:BF:D3:2F:D1:0F:AC:E8:2C:49:1E:FA:B1:2E:C7:82:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.250.144.0/20
IPv6:
2607:5006::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:83:8a:d2:6b:19:31:a5:06:a9:6a:de:3e:fa:9b:e5:e4:3e:
76:6e:0a:d8:6f:4a:c7:71:a9:b4:27:04:e9:1c:8b:ff:c8:af:
be:6e:45:80:b1:2c:6f:7b:31:21:b1:ae:52:24:49:e6:3f:66:
20:15:46:36:34:17:b2:31:18:9e:fd:eb:96:04:de:d8:58:21:
09:ed:b5:77:5b:28:cd:e2:40:ff:5c:c9:07:67:e2:14:04:93:
59:8e:ce:17:16:d3:ad:5c:45:d5:72:ad:fe:6a:b7:3b:a5:a0:
93:a7:a5:32:3a:30:2b:c3:8b:3c:63:0e:c5:1e:d0:56:8c:b0:
d6:82:3f:90:63:cd:95:90:df:28:5e:97:07:9c:cb:94:55:7f:
7b:2e:a6:f9:ac:ba:80:4a:88:7f:d5:9f:56:09:0a:46:30:0a:
13:dc:e6:a4:54:97:5f:2e:9e:ba:24:90:90:af:bb:a9:cb:d7:
e1:a5:bc:f1:14:9c:75:fb:82:54:0b:2d:72:8a:19:80:f2:f7:
cd:c8:75:cb:dc:27:2e:60:e3:02:fd:35:b7:ae:12:76:cd:d7:
d3:af:a3:25:cf:56:34:67:76:ff:3b:59:fa:c6:1a:af:d3:0b:
d6:a0:95:67:d9:ce:91:3c:fb:6a:0c:ca:ba:8e:e7:2e:95:d9:
89:2b:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:48:15 2026 by rpki-client