
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/1672ae92-ebe4-3703-a975-386f73efe4f2.roa
File: 1672ae92-ebe4-3703-a975-386f73efe4f2.roa (raw, json)
Hash identifier: WCttYuPzFhRq1SwB4Ls9bWNAqJJygkv/JEGoBMIod9I=
Subject key identifier: 2B:22:92:D7:E8:16:4F:65:A7:91:6B:32:8A:DB:D8:8D:0E:82:C9:B8
Certificate issuer: /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial: 010D0C9F4328584D49EE11C8D098B05057399040
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/1672ae92-ebe4-3703-a975-386f73efe4f2.roa
Signing time: Wed 25 Mar 2026 19:35:16 +0000
ROA not before: Wed 25 Mar 2026 19:35:16 +0000
ROA not after: Tue 23 Jun 2026 19:35:16 +0000
asID: 15083
IP address blocks: 209.191.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:ee:11:c8:d0:98:b0:50:57:39:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Validity
Not Before: Mar 25 19:35:16 2026 GMT
Not After : Jun 23 19:35:16 2026 GMT
Subject: CN=096882a0-0b33-46e2-9f9f-c42da286c38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:65:fa:29:f0:30:b4:55:92:69:2c:ab:a5:
0e:29:74:a8:41:0d:15:00:e0:4e:bf:17:93:e6:a6:
e6:04:42:10:45:a9:6d:08:fc:64:fc:83:f7:97:d3:
83:fa:58:ac:78:c7:37:1d:6d:38:fc:6d:63:9a:95:
e7:e8:01:6b:3b:cb:09:ba:55:e1:98:fb:4b:ea:37:
66:a8:c4:86:c8:98:7a:b9:83:6b:f5:1b:07:2e:42:
f6:4f:f8:92:94:f3:b1:f0:02:e3:13:a8:79:69:f2:
c2:85:19:92:8a:3a:83:cd:cf:27:f7:f7:87:53:5d:
51:a5:89:75:5b:23:ed:b8:48:b7:74:a8:da:62:2e:
29:ee:1d:c6:a4:2b:58:20:37:36:21:0c:16:ee:cd:
7b:33:f4:d8:76:ae:5b:b6:70:96:b9:0b:00:cc:ee:
0a:18:47:50:05:80:c2:1a:cd:9a:21:df:94:89:42:
a3:1b:13:36:e2:ba:34:19:45:aa:1c:a4:c8:54:58:
b6:1f:47:ea:a6:23:82:6e:91:47:9a:17:d9:56:ef:
4c:2b:14:f2:ed:70:fa:b4:ae:a7:ef:18:8b:1d:c2:
bb:f8:7b:a1:8f:23:8b:75:16:33:fd:12:87:4b:4d:
64:16:b6:9a:4c:e3:70:c3:c0:8d:d2:6e:00:41:4b:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:22:92:D7:E8:16:4F:65:A7:91:6B:32:8A:DB:D8:8D:0E:82:C9:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/1672ae92-ebe4-3703-a975-386f73efe4f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
X509v3 Authority Key Identifier:
keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
sbgp-ipAddrBlock: critical
IPv4:
209.191.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:ed:07:76:da:2a:c9:9d:08:69:cb:e0:a5:d5:10:4a:ed:bb:
b9:ab:07:6f:f7:78:01:46:c2:ef:9c:e5:7a:4e:64:b5:4c:d8:
56:1b:26:ce:65:fe:f2:63:5d:47:31:79:2d:88:55:af:fd:8a:
c8:30:af:f2:36:9e:6e:d8:c0:4b:d6:96:aa:9d:57:b1:76:83:
aa:53:ff:4a:e8:5c:b3:2d:da:fa:ff:f4:da:d4:75:ab:3c:05:
74:3b:49:2f:d7:fe:ad:49:05:2d:3c:58:9c:c9:19:fb:17:e9:
9b:2f:2b:79:1b:c2:bd:b2:ec:1a:e3:e0:1c:80:12:9c:7d:53:
e1:28:84:dc:58:19:50:52:92:da:14:72:0b:d6:d4:71:17:35:
6b:55:5d:03:6b:f6:c9:a2:b7:95:0e:f6:37:28:54:47:02:9f:
a6:62:03:3e:c4:37:34:17:89:67:3a:ec:e2:29:61:ba:07:ac:
ea:60:7c:be:de:47:76:db:15:cc:48:c8:3d:65:60:2c:33:33:
24:be:f4:60:fa:ca:30:a4:0c:c9:f7:76:d7:20:ec:a9:55:a4:
06:5e:50:ab:fc:4b:61:8e:ca:3a:0b:d6:bb:94:a5:41:79:ae:
63:56:06:c6:40:ce:32:a9:41:13:d0:bb:38:48:ec:21:de:75:
7f:c2:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:45:13 2026 by rpki-client