
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa
File: f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa (raw, json)
Hash identifier: k3U7Ri5GsQG8/tzjBn3Zb/2XDvLOwO9fKLTNwUaoqbY=
Subject key identifier: 48:A9:25:86:F9:38:DB:39:E8:0F:4F:AB:ED:E9:93:BE:62:4B:7E:96
Certificate issuer: /CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
Certificate serial: 010D0C9F4328584D15A261032CF8D0948CD90B00
Authority key identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa
Signing time: Sat 07 Mar 2026 02:00:32 +0000
ROA not before: Sat 07 Mar 2026 02:00:32 +0000
ROA not after: Fri 05 Jun 2026 01:00:32 +0000
asID: 399240
IP address blocks: 206.168.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:15:a2:61:03:2c:f8:d0:94:8c:d9:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
Validity
Not Before: Mar 7 02:00:32 2026 GMT
Not After : Jun 5 01:00:32 2026 GMT
Subject: CN=ecc257b8-f5fd-4e5d-9292-bbd822d47998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:a2:95:da:ce:95:99:56:57:f7:fd:f3:72:
b0:fe:d5:79:e8:cc:4b:d2:57:61:9d:e1:4a:00:4c:
5a:de:44:4a:02:1d:82:52:f7:71:38:70:fd:aa:8b:
de:25:fb:8b:35:d9:cf:b0:17:b6:b9:e7:3e:54:3c:
e5:72:8a:7b:de:85:9b:03:f7:48:ad:56:aa:08:e7:
55:45:cd:84:08:c2:bc:9a:af:10:42:0e:0a:d8:ad:
c5:dc:49:47:c1:62:24:f1:23:7f:d8:1e:5f:f0:8c:
1c:e2:a5:a6:51:0d:69:f1:96:f3:50:3b:33:54:49:
1f:35:e5:85:10:dc:15:82:62:dd:a8:43:33:e1:0d:
d6:ab:5b:90:3a:6f:58:52:e8:26:fa:c6:e0:60:6a:
e9:1a:95:7c:5c:56:ff:23:de:3c:81:6d:4c:29:3c:
cb:e6:7c:8f:66:e9:e6:d1:97:25:7a:15:e4:91:92:
79:bd:6c:23:45:3c:41:8c:3c:89:6f:4d:81:d6:5f:
d2:7b:14:2f:7a:95:fc:f6:79:b2:29:c7:df:00:7c:
8f:e1:f3:1f:90:25:90:83:86:dc:72:8b:06:d4:fd:
b5:39:65:e8:5d:ce:8f:dd:dc:27:bc:e8:09:e0:2c:
b0:f1:27:f5:b1:0f:be:a8:26:7d:01:65:ca:2a:26:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:25:86:F9:38:DB:39:E8:0F:4F:AB:ED:E9:93:BE:62:4B:7E:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl
X509v3 Authority Key Identifier:
keyid:6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:9a:6b:9d:de:da:52:ea:ca:34:c4:61:e8:37:ac:17:25:65:
9e:2e:5f:c7:ab:f1:8c:3d:93:2a:48:48:c1:f3:b3:5d:22:24:
fd:d8:c8:54:45:99:83:61:ec:e3:c9:24:fe:6d:16:b2:b0:05:
a4:01:c4:16:f4:7d:cf:42:0f:2a:27:8d:fc:39:30:71:f3:d1:
9c:55:cc:6b:ab:39:d9:61:8e:88:d2:c4:5c:d8:f6:af:66:18:
1a:65:d9:59:a0:45:2b:1e:d2:d4:87:2a:9c:a2:75:56:7d:8c:
69:2a:33:4f:37:27:6a:13:74:06:88:10:22:e1:9f:23:23:99:
8d:3e:bc:10:62:ce:5f:2d:10:d4:f1:d5:1b:c6:0f:a0:7c:76:
cb:b6:9a:80:53:47:3f:cf:4d:4f:b7:3e:07:ba:38:4c:38:60:
b4:25:23:d6:3e:b9:6b:ae:83:8a:30:85:91:11:96:11:dc:e1:
5d:8b:9f:3c:91:bb:29:84:f2:28:ab:28:ce:18:5e:12:ee:e7:
06:3e:22:23:eb:36:4a:10:51:1f:73:03:50:61:86:40:85:43:
41:a1:99:32:53:aa:8c:8f:14:ab:4b:30:79:24:8a:b8:96:08:
b5:cc:3b:be:e5:a3:a3:2f:b0:c7:85:66:4d:6b:53:0a:a2:a2:
71:5d:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:29:35 2026 by rpki-client