
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa
File: 574e841f-42ab-3391-8e83-8d72c3a905d3.roa (raw, json)
Hash identifier: e5FqLOTMCkDoTaU8WMOlJRWnOPESL9kVXepi5MNF9jM=
Subject key identifier: 3C:CE:55:4A:CB:3A:89:5B:B3:A7:1C:6B:11:FF:4C:2F:A5:65:B6:09
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F4328584D7CCFDB944D90ED99FD177B60
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa
Signing time: Mon 13 Apr 2026 01:00:24 +0000
ROA not before: Mon 13 Apr 2026 01:00:24 +0000
ROA not after: Sun 12 Jul 2026 01:00:24 +0000
asID: 16509
IP address blocks: 163.129.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7c:cf:db:94:4d:90:ed:99:fd:17:7b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Apr 13 01:00:24 2026 GMT
Not After : Jul 12 01:00:24 2026 GMT
Subject: CN=5b3042f4-2860-4dfd-a60b-616f6122e13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:d0:35:6e:08:d3:d6:a3:c6:89:85:8a:eb:
c7:30:d2:d7:b1:4a:ac:ed:3f:60:b1:7a:54:9b:77:
88:41:28:ee:0c:2a:7c:9c:3c:a2:55:1c:4b:e1:0b:
3d:41:fb:90:5b:87:c6:f7:13:4f:8d:50:f3:a9:e9:
a9:9b:ba:3e:79:48:1d:c9:1b:bb:91:26:6d:6f:54:
87:b9:37:de:19:00:88:5c:36:66:48:ea:39:6a:3c:
b5:ff:ad:b9:45:69:db:e8:9b:58:6f:ea:ca:ee:a0:
88:93:09:6c:76:93:87:b7:32:46:18:33:fc:a6:4d:
0f:1d:b7:e9:6e:f7:62:72:6e:6b:1a:6a:92:a9:0f:
23:e6:c0:cc:9d:63:f7:2f:19:9a:1a:4b:bd:c7:c9:
00:49:09:a4:e3:fc:0b:b1:8e:13:1a:1e:b6:2f:98:
32:7b:ca:38:1a:89:ff:6c:a5:ab:ea:df:bf:07:22:
28:fc:61:35:b9:25:86:28:55:19:e3:1e:7c:8b:38:
5e:01:a0:a4:f0:24:ff:63:02:d5:b1:d4:cc:d6:85:
15:f1:93:56:a4:cd:f2:37:e6:ef:dc:ba:d5:45:da:
ec:f8:36:25:5f:11:79:aa:1e:72:10:08:13:06:54:
fd:4b:57:4a:ac:d1:8d:b0:4b:3b:8d:ee:54:c7:61:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:55:4A:CB:3A:89:5B:B3:A7:1C:6B:11:FF:4C:2F:A5:65:B6:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
163.129.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:3c:74:6b:8d:c9:e6:b4:ba:91:89:c5:2f:f6:0a:19:13:58:
35:d1:51:81:da:6a:bc:57:d5:67:8a:cb:de:1e:18:c1:a4:de:
9c:83:45:7c:f2:46:aa:dc:8d:1a:df:b2:c4:90:48:39:75:1e:
01:d4:32:79:21:b6:d2:ba:57:d6:bd:19:c6:60:12:ff:18:da:
4c:5a:b3:62:ef:8c:9d:23:82:b1:a9:1d:11:f2:56:31:18:46:
f3:d7:07:cb:26:c7:a8:af:0f:4e:15:0e:44:73:47:5c:34:6f:
3f:94:d9:d8:ac:08:47:a0:c1:91:88:06:af:90:6b:b0:89:af:
5f:aa:ee:c0:dc:b8:a0:4d:07:20:12:e4:27:9c:3c:85:77:ad:
66:28:58:15:44:eb:7c:50:7f:d9:16:d2:e5:ff:5b:cb:80:06:
af:77:4a:cd:ce:87:44:bf:50:0a:9f:ef:99:1c:9e:8f:10:0c:
17:c5:cf:c9:eb:e5:6e:a5:34:02:c9:27:82:bd:6f:d0:cb:42:
1b:95:66:f4:25:91:b4:ad:a0:43:c5:44:b8:5b:fd:6c:f3:0d:
64:da:30:44:8b:52:c2:b3:f9:52:bd:8b:30:df:55:d8:ac:82:
c9:d9:f2:b7:93:a4:ac:0b:e2:92:5f:06:a5:f9:57:1e:b6:5f:
70:bf:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 12:07:51 2026 by rpki-client