
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa
File: 2a5c7778-1786-3e6f-8890-b24491b369bb.roa (raw, json)
Hash identifier: LKkCQotmd/dLulwHGqjg2qdAq6jofJt2CTW4GZXul2c=
Subject key identifier: CA:53:EF:7A:9E:3C:FD:08:FB:D6:B9:34:2C:61:4D:76:8B:6A:30:7F
Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial: 010D0C9F4328584D5243537FB1253A874F9A6B80
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 22504
IP address blocks: 162.118.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 16 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:53:7f:b1:25:3a:87:4f:9a:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=15b7256e-2074-43d2-ae7a-6dfd2bd0e6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:64:0d:95:91:5f:d3:e4:af:06:1b:8f:bd:
b1:27:06:cc:68:62:bc:17:84:4d:1a:f7:9e:58:7a:
70:95:db:83:78:c3:79:ec:83:54:ca:d5:c5:6c:65:
e5:a8:61:16:44:13:17:e7:ec:d8:0a:2e:85:25:d6:
8d:00:78:0f:ee:6a:e8:0a:0b:30:b4:28:8a:e0:41:
5c:a1:6d:60:73:38:f4:34:9c:3a:30:4f:17:11:92:
61:ae:a1:bc:d1:5a:71:3b:7a:ca:95:a0:f2:16:ec:
47:9a:56:f8:a7:02:76:a7:93:c5:0d:68:44:e1:21:
5f:b5:fc:0d:d9:27:be:03:d8:0f:c9:90:4a:cf:77:
3f:e5:c0:47:16:a2:60:6f:3f:1b:fe:04:7c:8b:45:
c4:99:68:69:50:a4:a6:71:1e:8a:e7:57:88:c5:68:
63:ef:a3:2c:da:3f:0c:24:75:a9:48:dd:dd:dc:8f:
f5:5b:71:87:14:56:b3:8c:4c:2f:6e:40:ca:36:f8:
68:f1:2a:c1:b9:6a:77:9c:4c:fd:f1:d5:f8:ee:5c:
36:2b:42:f4:7d:ea:b1:bf:1b:dc:8d:5e:08:16:5d:
f0:fa:2e:21:a2:51:9c:bc:9a:74:3b:9f:eb:9e:fc:
6e:dc:d1:ea:d0:a4:25:06:d9:1a:51:a6:ea:c7:89:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:53:EF:7A:9E:3C:FD:08:FB:D6:B9:34:2C:61:4D:76:8B:6A:30:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
X509v3 Authority Key Identifier:
keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
sbgp-ipAddrBlock: critical
IPv4:
162.118.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:d8:86:07:aa:d0:b1:68:84:8e:b6:40:1c:80:25:bd:0d:03:
5d:3d:48:eb:4d:16:f5:37:97:49:8a:bd:cd:60:5a:f9:24:cc:
99:79:99:6b:9d:af:ac:b1:6a:13:01:72:5b:0f:be:e0:49:1b:
d1:27:36:d6:42:68:bf:c2:20:d5:45:99:1b:c2:4b:58:f1:35:
25:d9:7d:4a:02:77:4b:46:9a:8d:5d:70:f0:8c:74:5b:ef:05:
4f:d2:be:9d:e2:56:a1:a9:12:67:30:59:25:29:b9:4b:e8:23:
f2:d9:7d:26:03:f6:64:cf:9c:cb:fc:39:a6:44:5a:5a:f4:21:
05:d3:72:36:0e:97:37:fb:b2:b4:f2:5e:cb:d5:63:14:b4:9d:
06:a7:36:64:3c:8c:78:68:5e:e0:c1:34:bd:9a:4d:4b:46:f3:
9e:19:3b:29:31:b7:ff:77:86:3a:68:f7:9f:32:1b:f4:cf:38:
da:af:83:f2:6f:a9:a7:bf:44:a1:d3:58:6f:5d:18:c7:83:18:
ec:f3:49:28:36:90:54:b5:6f:74:8a:53:2a:bd:e3:f1:18:eb:
02:1f:60:5d:71:7a:56:a2:b6:2a:4a:22:0b:94:ae:fc:cf:3d:
8d:05:ea:44:f7:7a:8c:c3:54:86:c0:85:f0:7f:a3:bf:d2:28:
e8:f6:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 13:02:26 2026 by rpki-client