
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa
File: 57fff646-7145-32f1-a13c-3572fed83485.roa (raw, json)
Hash identifier: c4IZDm+jKQ+rlJhLDQCF3J+sLkY6XP88OErTJNc5oPg=
Subject key identifier: 85:89:18:7E:92:DD:21:B4:77:2B:3C:FB:E6:1B:9A:A5:8A:FC:82:4D
Certificate issuer: /CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
Certificate serial: 010D0C9F4328584D2644B41D5D864D5956E2B6C0
Authority key identifier: CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 393397
IP address blocks: 173.195.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:b4:1d:5d:86:4d:59:56:e2:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=a4a7d6d1-ec12-43b4-85a7-a7ff34a2db91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:30:18:b3:19:f7:82:77:88:6c:6e:52:be:
67:46:63:4c:ff:80:8f:a0:fe:3e:ef:a4:3c:db:ae:
f5:cf:8a:81:4f:a1:d5:56:07:62:cd:00:ac:7b:9a:
d8:36:f1:a0:4a:01:82:0d:4a:be:74:51:ed:b7:15:
3e:ab:44:3a:05:62:de:2e:bd:08:54:9f:6b:9e:3b:
ea:7c:34:f7:83:ea:0a:f5:3a:7f:fa:e6:e8:3e:3b:
79:ce:18:e0:0b:46:c6:d2:c3:78:f3:37:18:89:b3:
d8:a7:3b:35:99:d5:f4:36:05:8b:a6:5d:bf:60:c1:
0d:e3:7e:51:dc:5b:e6:13:c2:28:16:42:3b:48:6c:
7f:95:ff:76:93:18:8a:36:54:8e:85:c1:c5:85:76:
e5:5d:20:6b:e1:b9:9a:6f:92:66:77:7c:ee:68:82:
f3:a9:63:24:ff:6f:e2:b0:22:05:ff:30:fd:0e:d5:
3b:df:a9:22:8c:79:0f:fa:b4:1a:5c:d0:5c:60:97:
29:e6:a4:d2:d8:cf:50:0c:62:c1:38:08:ad:c1:a8:
b8:27:0c:3e:1f:27:3b:c7:d0:74:4d:1d:6c:c9:7e:
82:f0:a2:4c:8f:9c:7f:d0:e4:52:01:eb:3a:68:bd:
d7:ab:93:42:5a:8a:4e:6b:76:ef:8e:eb:dd:a4:57:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:89:18:7E:92:DD:21:B4:77:2B:3C:FB:E6:1B:9A:A5:8A:FC:82:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl
X509v3 Authority Key Identifier:
keyid:CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:33:3f:f0:f3:90:b0:a6:45:44:f8:6a:d6:5a:53:a5:eb:a1:
ff:20:af:6c:3f:90:9f:c2:ae:65:da:bc:bc:4b:aa:eb:1c:19:
b5:36:e6:1d:f8:c6:a9:23:13:41:03:9c:87:16:1d:84:94:7c:
80:6c:72:ab:21:ab:5e:69:59:d8:3a:08:3e:84:3a:08:87:04:
56:f3:49:25:a8:07:d5:d3:47:04:1f:c0:90:c8:cb:e2:cf:37:
18:6e:68:b1:f9:f8:bf:57:0d:03:4d:dc:e5:9c:f5:ac:ad:9e:
80:23:49:af:d8:b0:ca:7f:8b:7c:50:25:2d:25:dc:f6:c8:86:
f1:80:5c:99:11:f2:9f:2f:c6:d4:d1:84:9b:3b:3c:c6:7f:26:
26:4d:7e:90:28:0e:bc:c4:a9:d4:08:5a:e3:06:93:0a:44:9c:
b6:df:87:11:30:58:6d:a6:af:8e:27:40:90:28:97:d6:d6:4d:
b0:43:d1:d2:f1:77:65:5d:09:09:27:41:1f:c9:52:3f:19:25:
22:d2:8c:e6:82:9d:ae:9f:f1:11:e3:e1:4d:1e:80:aa:b3:84:
d1:24:a9:c9:ee:58:00:70:08:83:78:66:4e:93:b7:0e:64:06:
43:d9:38:7d:2a:a2:4d:8c:e0:19:1b:27:dd:68:62:31:90:1a:
82:ef:57:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 10:01:09 2026 by rpki-client