
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/35ad8540-161b-30d8-8dfc-164716cad513.roa
File: 35ad8540-161b-30d8-8dfc-164716cad513.roa (raw, json)
Hash identifier: RqXme6WL5Gq0bwUK6JwbRIBPlDX81IDoXVCXY80teIs=
Subject key identifier: A9:7C:4F:E7:F2:FA:E5:99:5E:D1:BB:34:DB:B1:CB:14:53:CB:51:27
Certificate issuer: /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial: 010D0C9F4328584D1D2082F71C8079B186ACC680
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/35ad8540-161b-30d8-8dfc-164716cad513.roa
Signing time: Mon 09 Mar 2026 18:25:31 +0000
ROA not before: Mon 09 Mar 2026 18:25:31 +0000
ROA not after: Sun 07 Jun 2026 18:25:31 +0000
asID: 21713
IP address blocks: 216.14.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1d:20:82:f7:1c:80:79:b1:86:ac:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Validity
Not Before: Mar 9 18:25:31 2026 GMT
Not After : Jun 7 18:25:31 2026 GMT
Subject: CN=ba3b1414-58fd-4f26-964e-e6fc30140910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:b6:31:72:fc:55:a1:94:a8:6b:a4:06:b7:
2e:81:03:dd:22:20:11:da:67:83:35:d8:de:bc:e9:
d5:5f:c4:6e:28:19:58:bc:47:d0:69:cd:39:f0:47:
a3:8d:0a:17:e8:87:04:6f:0a:33:ec:fc:08:c9:dd:
1e:8e:48:ac:de:e4:ff:46:c0:66:9c:59:83:d8:a9:
8e:5c:53:d9:14:14:27:46:f2:04:1d:72:c0:28:2d:
c3:65:d1:94:e8:32:b5:77:0c:a7:c3:2d:56:79:a1:
e6:55:df:95:a0:2c:3e:f7:b7:fd:ec:3a:56:71:3a:
8a:99:1c:d1:30:e1:be:7e:16:54:81:f5:f3:d2:3e:
60:7b:6a:af:f2:06:00:67:8d:cf:d2:03:e9:ad:66:
8e:87:22:22:54:af:71:df:5f:cf:8d:53:09:b6:6d:
06:95:21:f7:0f:74:2c:43:1e:e7:88:53:96:91:9d:
e8:5e:35:1e:9c:af:ae:dc:f3:e8:57:63:ec:32:8b:
2e:fb:29:46:17:ad:28:19:54:28:62:8b:7c:ec:ab:
71:0a:b6:be:f0:d8:0b:7a:8b:ac:23:3d:a9:d3:dd:
20:32:43:2a:4b:de:87:db:8c:2c:74:79:33:fd:b9:
03:f2:d0:26:15:07:0f:65:71:09:a4:da:5f:dc:5a:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7C:4F:E7:F2:FA:E5:99:5E:D1:BB:34:DB:B1:CB:14:53:CB:51:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/35ad8540-161b-30d8-8dfc-164716cad513.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
X509v3 Authority Key Identifier:
keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.14.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:56:16:87:31:15:0e:aa:74:ac:16:19:b2:ed:ea:b6:f0:57:
f2:45:29:67:74:da:16:e1:f3:6b:6c:13:a3:d9:02:53:f0:f3:
00:8d:0b:2f:92:05:55:bb:ea:ef:11:a2:86:36:18:b1:15:2e:
ad:af:48:1a:b0:4c:39:cc:83:fa:70:3a:9f:5b:3f:0e:5e:48:
5c:3e:97:98:ce:ad:d0:d3:65:2a:93:5f:28:03:2e:39:26:d2:
e9:39:de:d0:77:7b:0a:52:9e:d9:4b:2c:00:e4:4e:c3:d9:d7:
be:dc:88:89:b0:5e:b9:c0:d6:e0:b4:d7:9b:89:30:b0:89:6e:
62:dd:9d:e0:3d:57:fb:33:13:d9:33:7c:69:fb:ed:88:f5:f1:
f9:8e:18:80:97:d3:94:e8:8e:af:fa:64:ce:9c:af:53:6b:bd:
90:d6:29:87:21:bf:0f:56:d9:04:c7:7b:36:54:51:bb:a0:20:
6a:46:ee:65:c7:3a:96:62:2c:ac:25:f5:54:ac:e4:54:12:43:
b3:bf:ba:7a:51:3b:9d:ff:61:85:4b:fa:6f:e5:69:25:64:aa:
f9:b5:31:d5:4f:de:68:28:a2:9c:aa:b1:f5:fc:fd:57:5e:c1:
eb:7f:63:ba:50:bc:6e:4a:fb:00:3a:9e:c2:e2:eb:eb:c5:ce:
43:94:42:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:56:50 2026 by rpki-client