
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c27db91c-abeb-3439-af15-3d4e2c35f941.roa
File: c27db91c-abeb-3439-af15-3d4e2c35f941.roa (raw, json)
Hash identifier: 9hPfP3aMTVEnW+sGx7zb3ngDOQR62p7CddNXAi5usbg=
Subject key identifier: E3:AE:0B:A5:0D:DF:D2:C7:B3:DC:41:CB:32:E7:D7:20:CB:67:FB:6A
Certificate issuer: /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial: 010D0C9F4328584D524342F77AA20130074BE7C0
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c27db91c-abeb-3439-af15-3d4e2c35f941.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 33185
IP address blocks: 170.39.196.0/22 maxlen: 24
2602:fd23::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:42:f7:7a:a2:01:30:07:4b:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=b0dd043e-2e97-4bb1-9aa3-8800d22717dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:e0:91:85:61:de:1c:63:cf:71:e5:e9:3e:
e1:0a:5b:79:9b:d3:83:af:60:81:55:a9:59:79:6d:
11:dc:f7:d1:fe:bf:62:1b:97:1b:28:1b:5b:03:1b:
9e:2d:55:f8:eb:46:47:9b:b7:6b:96:fa:f6:58:dd:
a6:69:28:e4:10:6f:68:2e:a5:67:85:40:5f:14:c5:
4e:ad:0b:79:f8:c9:59:0b:c8:90:18:66:4f:a3:11:
7e:e3:31:db:d7:76:36:5d:0a:d3:bf:f1:22:90:4a:
b4:f6:8f:cf:a2:02:13:bd:9c:29:01:ba:38:3a:d8:
de:f6:46:f7:08:ad:99:a8:c3:d3:80:cd:8d:f3:bb:
7b:68:dc:3e:da:a7:6f:2e:c9:3b:12:b6:8d:6b:35:
5a:4e:cb:73:78:e6:e0:ea:f2:87:cd:5d:86:f3:a2:
c9:fa:98:19:79:7e:fa:a7:02:91:d6:3c:4e:08:83:
47:34:00:38:77:a1:81:7a:b9:f8:cb:b8:1a:be:b8:
a6:fc:50:42:1a:94:f5:55:a9:b5:54:d2:01:ac:9c:
91:22:ce:0f:45:ed:ef:b9:f8:8c:9b:02:f3:5d:aa:
22:17:40:87:15:2c:f8:42:96:ff:e7:aa:95:d7:ca:
74:97:2d:2c:1a:07:14:b3:df:ba:19:36:8b:d4:dc:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AE:0B:A5:0D:DF:D2:C7:B3:DC:41:CB:32:E7:D7:20:CB:67:FB:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c27db91c-abeb-3439-af15-3d4e2c35f941.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
X509v3 Authority Key Identifier:
keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.196.0/22
IPv6:
2602:fd23::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:60:2e:ba:e6:cf:2d:4c:cf:f8:82:ff:db:91:95:5c:12:45:
4d:61:bb:c2:e5:02:4d:13:65:ef:85:1d:c7:b4:d9:96:c1:c5:
15:66:20:17:61:20:6b:52:54:46:a2:73:94:2c:56:80:e1:40:
f6:86:52:af:44:c1:3e:fd:18:f5:30:e5:af:fa:ff:0e:ec:98:
dd:2f:36:8f:c0:66:93:f0:97:d5:48:28:54:65:0b:54:4c:93:
4b:4e:48:ac:eb:f8:3e:a9:9b:cd:7f:34:c8:4a:2b:b6:76:ac:
fe:c6:0d:74:97:15:16:48:c1:42:9c:bd:2f:da:2f:87:49:68:
cf:b8:d3:98:e0:ec:83:df:3a:a0:7f:68:e7:0a:c3:30:0a:c7:
e1:b7:45:0d:81:03:8d:c5:f4:35:89:ed:e3:04:c6:e6:a9:8a:
ea:93:69:aa:0a:32:1f:1f:e2:07:85:b5:6e:73:07:7c:f1:89:
9b:b4:b0:af:7d:dd:03:dc:0c:7c:9e:9d:e6:05:2d:7d:ab:45:
bc:ca:fc:83:37:0a:a0:58:6c:d3:24:e0:05:03:d2:4f:51:19:
ba:ed:d2:26:6d:1a:e5:50:8d:63:9d:e6:52:af:6f:cc:b3:8c:
9d:b0:8b:36:34:8d:da:71:f3:7f:a5:18:dd:43:90:9d:77:55:
56:35:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 05:36:37 2026 by rpki-client