
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff0eaabc-7b7a-376c-96d0-dc0467b4ba8c.roa
File: ff0eaabc-7b7a-376c-96d0-dc0467b4ba8c.roa (raw, json)
Hash identifier: /C+ysWNe4oQXB6cBtAJ6r83/l7KaG9Aa/+R414g+t78=
Subject key identifier: 2C:12:CA:D8:42:1D:D4:96:60:4D:89:FC:3C:FA:C3:FC:47:81:3E:C8
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F4328584DE41B63B084CE39F8BAFCE080
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff0eaabc-7b7a-376c-96d0-dc0467b4ba8c.roa
Signing time: Wed 20 May 2026 01:00:25 +0000
ROA not before: Wed 20 May 2026 01:00:25 +0000
ROA not after: Tue 18 Aug 2026 01:00:25 +0000
asID: 10794
IP address blocks: 171.159.240.0/20 maxlen: 20
171.159.240.0/21 maxlen: 21
171.159.240.0/24 maxlen: 24
171.159.241.0/24 maxlen: 24
171.159.242.0/24 maxlen: 24
171.159.243.0/24 maxlen: 24
171.159.244.0/24 maxlen: 24
171.159.245.0/24 maxlen: 24
171.159.246.0/24 maxlen: 24
171.159.247.0/24 maxlen: 24
171.159.248.0/22 maxlen: 22
171.159.248.0/24 maxlen: 24
171.159.249.0/24 maxlen: 24
171.159.250.0/24 maxlen: 24
171.159.251.0/24 maxlen: 24
171.159.252.0/24 maxlen: 24
171.159.253.0/24 maxlen: 24
171.159.254.0/24 maxlen: 24
171.159.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e4:1b:63:b0:84:ce:39:f8:ba:fc:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: May 20 01:00:25 2026 GMT
Not After : Aug 18 01:00:25 2026 GMT
Subject: CN=3a2eebbd-d159-4670-b1a5-033879b56f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:59:57:81:b8:78:b3:5b:30:19:50:b6:78:
88:94:1a:47:65:3c:14:43:2e:1e:2d:dc:4f:ef:38:
6e:7e:23:5d:cd:6b:69:3f:8c:8f:77:1f:39:e9:1b:
61:b1:8f:38:83:b5:83:b0:4b:aa:ce:70:b8:f0:a5:
af:48:b0:43:b9:a0:a6:fc:51:fd:f5:47:24:d9:be:
43:f5:fb:71:42:ab:f4:ac:e9:f1:33:ac:46:50:08:
80:c1:28:38:89:b6:73:e9:00:ab:4e:eb:dd:ca:e7:
a8:07:30:66:79:ff:f9:88:df:f1:68:81:f8:d5:a7:
5c:01:f5:4d:42:13:b4:cc:6e:d3:8e:7d:05:56:a7:
b8:a6:5d:9e:82:86:a2:f2:85:01:77:a0:3a:88:1b:
3e:1f:86:f1:56:e8:2f:b8:76:d0:9e:db:8b:f3:d2:
74:76:c7:a1:1a:8f:d2:6f:20:01:5e:d3:dc:d1:ae:
98:8c:86:58:40:31:b5:11:58:42:71:12:7e:4f:db:
5c:3f:78:f2:13:34:d0:80:76:17:b7:91:f3:cf:cc:
6f:76:6c:2b:87:ac:97:5f:89:6c:85:6e:74:39:51:
5c:42:6b:f5:28:31:a4:7b:e6:2a:32:39:72:31:9f:
b9:87:5d:01:f6:45:03:3e:db:26:36:d3:72:3f:79:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:CA:D8:42:1D:D4:96:60:4D:89:FC:3C:FA:C3:FC:47:81:3E:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff0eaabc-7b7a-376c-96d0-dc0467b4ba8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.159.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:41:ea:c8:a5:8b:c1:40:e7:5b:4e:db:55:89:12:e5:a2:b6:
5a:80:56:87:f2:43:83:7d:61:a0:26:a4:94:3c:58:0b:f7:20:
0b:dd:51:c5:23:a6:3b:2c:58:5e:ba:9f:a1:79:00:02:9c:02:
1f:b8:ce:f1:fe:09:42:4b:86:e2:cf:a3:21:82:d0:79:53:e0:
7a:49:5f:6d:a8:73:fd:e9:e3:94:83:03:0b:f2:d4:34:e8:a3:
87:a6:65:f3:09:0e:74:83:f2:a0:2e:12:9c:c4:13:36:ae:13:
ca:52:6b:d8:ed:cf:49:ad:7a:19:02:2c:f1:ce:6a:df:2f:20:
10:62:bf:d1:5c:75:71:d0:07:76:6f:7a:d2:28:99:53:0f:7a:
ab:82:3d:af:3d:49:18:66:cb:bc:96:9c:0c:33:f8:86:0a:0c:
89:b1:e0:85:fc:ca:f5:c5:7a:5b:67:df:61:60:7d:94:f9:0c:
71:e2:9b:3a:af:bf:17:a6:27:d6:97:0c:e0:83:48:76:b1:61:
42:22:4d:d6:aa:2b:4b:fa:0f:38:fa:f2:5d:f9:df:0c:5c:25:
7e:fe:d0:11:a8:5b:96:93:23:f9:5a:ad:85:77:89:15:1e:a9:
a0:a9:4f:90:e0:f3:49:3b:c9:85:1f:2d:cb:97:50:a7:73:79:
97:a7:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:31:36 2026 by rpki-client