
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5b7af741-31bc-3d88-a427-211be4aa281a.roa
File: 5b7af741-31bc-3d88-a427-211be4aa281a.roa (raw, json)
Hash identifier: gGFHpwizp/GFBAOOnckRSHfSrmQMrK2XZeHy7RCipKI=
Subject key identifier: 20:C3:8F:B9:89:CB:00:FA:6E:F2:32:E0:71:EF:EF:2B:ED:27:20:54
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584D4E5A58CD62F1463A5B970800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5b7af741-31bc-3d88-a427-211be4aa281a.roa
Signing time: Fri 27 Mar 2026 09:36:40 +0000
ROA not before: Fri 27 Mar 2026 09:36:40 +0000
ROA not after: Thu 25 Jun 2026 09:36:40 +0000
asID: 20001
IP address blocks: 69.33.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 12 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4e:5a:58:cd:62:f1:46:3a:5b:97:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Mar 27 09:36:40 2026 GMT
Not After : Jun 25 09:36:40 2026 GMT
Subject: CN=12457892-fb0c-49f7-84da-f2d9f44f4ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:88:bf:23:a6:8b:73:33:75:8e:d7:bd:2e:
fa:dd:d7:5b:5d:85:e4:71:21:96:14:75:9c:f0:7a:
74:f6:35:4c:1c:92:0b:27:30:49:98:12:18:b9:df:
4c:b3:78:7e:1a:77:02:87:b1:32:28:93:d7:b8:6c:
9b:38:a0:e0:58:88:99:60:42:ba:27:ce:72:e7:44:
19:4f:3f:6b:80:3c:6c:fb:67:5f:0f:55:df:e3:ff:
df:a6:a7:ef:52:a3:62:d4:ce:23:93:ea:e3:89:dc:
20:cb:55:ec:26:0c:7a:4e:17:22:ae:90:fb:21:5e:
3a:b9:38:ab:77:38:e3:9a:7b:27:c5:22:7b:52:ff:
f9:21:00:80:45:79:94:1b:9a:6d:1e:ec:98:a2:ec:
c4:73:00:e3:a0:e6:82:01:ab:22:55:32:5d:a5:ec:
a3:1a:b9:cd:c8:5d:6f:c5:3f:82:96:94:0e:78:7b:
76:4a:09:92:dc:10:31:53:59:f2:d0:df:c0:20:a3:
c5:27:f4:11:ea:a4:37:6e:64:e1:dc:6d:5b:9c:52:
2a:cd:43:4e:66:a0:5b:ab:16:18:1c:3f:d9:e9:7e:
97:5c:7a:0e:98:81:b3:5b:b3:c7:53:1e:1c:08:84:
8e:5e:f7:1e:43:92:ee:dd:f6:a6:35:9b:ac:47:53:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C3:8F:B9:89:CB:00:FA:6E:F2:32:E0:71:EF:EF:2B:ED:27:20:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5b7af741-31bc-3d88-a427-211be4aa281a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
69.33.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:0e:91:4b:87:63:b1:b6:b9:9d:83:97:ca:c8:fc:60:f9:b8:
c1:91:30:4e:93:0e:b0:46:9e:1b:fb:b5:8d:3c:27:4b:bd:61:
5a:db:78:56:d4:3e:95:d3:92:81:a1:73:0a:de:92:36:ae:45:
1f:4e:3e:00:92:e9:76:96:33:db:52:a6:43:e0:a1:b8:0a:76:
95:76:5b:23:07:b6:fa:f2:47:fb:f2:26:f8:3f:1b:ff:62:26:
b2:e2:dc:6f:30:71:c8:5d:e3:d3:ce:d2:72:72:72:9a:bb:2a:
cb:19:ad:b6:06:e4:a4:f3:e3:14:6c:af:f1:84:c9:70:f9:a0:
26:70:fe:7a:03:2c:8d:13:9c:a9:af:27:58:fd:a0:08:10:4e:
f7:83:3c:1c:11:c6:08:3b:05:35:af:17:66:23:97:a9:47:72:
3d:be:11:9f:f8:20:33:30:e9:d2:c4:85:c6:24:9a:51:90:4f:
b2:96:2d:d4:48:2d:49:27:86:91:2f:b7:2d:31:a9:19:aa:af:
3a:ea:49:09:47:bf:05:31:68:0c:a2:ea:23:ea:b7:66:b3:7d:
62:2a:de:95:a8:d6:f6:9e:9a:1b:21:7c:8d:13:74:0e:fa:6f:
40:fa:a1:22:dc:f3:b2:9f:9b:c6:91:ae:0b:7f:44:b5:63:a0:
20:4f:2a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:14:34 2026 by rpki-client