
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b1db16d0-d799-3d3f-bd91-72670a42a56f.roa
File: b1db16d0-d799-3d3f-bd91-72670a42a56f.roa (raw, json)
Hash identifier: 9N503zXrDpkxrbfi4bdRzd+EpKMYG1Y6VbsHwk/T56s=
Subject key identifier: 75:61:50:92:E8:45:1B:5D:1C:44:3E:AC:E4:45:FB:81:92:60:72:52
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584D6AAA69F9419B532BE4A84700
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b1db16d0-d799-3d3f-bd91-72670a42a56f.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 6643
IP address blocks: 173.199.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:69:f9:41:9b:53:2b:e4:a8:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=94b9225b-fc95-49b7-a7ae-28bcf9a7aac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:fa:22:33:74:f9:0d:e6:38:9e:01:12:dc:
c6:c0:66:bc:8a:b9:ee:05:01:41:18:cb:26:3e:02:
79:13:02:b6:b8:5c:d7:6b:33:1b:ad:f4:5f:8a:5d:
e9:51:de:af:32:35:d0:e5:55:b1:18:65:29:50:ef:
e5:1c:4c:3d:e6:51:3b:6b:ab:e7:9f:51:05:08:4e:
7e:e2:e1:fd:22:63:fb:05:27:4e:20:bc:e8:7e:1e:
1a:ef:a2:26:65:3c:b6:21:ab:5a:96:53:55:c7:04:
9b:37:3d:0b:50:9d:b7:2a:c1:ce:38:3f:cd:f8:38:
83:22:d5:ca:96:00:88:6a:7e:ed:22:ca:c4:29:8d:
7d:84:d8:f1:0c:35:8b:90:31:86:de:39:5d:41:5d:
42:91:d3:08:a2:f1:c2:97:92:d4:81:af:4d:1f:3c:
c1:cf:04:6b:5d:8b:3f:88:71:82:c5:0e:bb:39:8d:
26:87:ab:34:e4:c7:83:b6:ef:c9:12:60:f6:06:ed:
1b:77:a5:69:b4:22:d7:5d:cc:92:46:55:54:7e:98:
16:78:bd:e8:98:f8:5e:c4:63:90:a7:86:2f:c7:57:
9e:c3:ae:fc:9d:2f:6b:c8:37:f5:d5:36:ad:10:98:
42:48:6e:ef:a9:16:a8:74:eb:62:1c:74:0a:2a:c9:
f1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:61:50:92:E8:45:1B:5D:1C:44:3E:AC:E4:45:FB:81:92:60:72:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b1db16d0-d799-3d3f-bd91-72670a42a56f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
173.199.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:82:a9:d8:72:b1:94:80:01:28:31:cd:0e:47:71:8a:18:ef:
12:48:a6:15:17:8b:94:c6:73:a8:aa:dc:59:b2:98:6b:7d:a9:
bc:ca:56:ad:81:cb:27:bc:ec:16:c9:1f:70:46:78:99:48:f6:
29:b7:1d:18:43:fe:74:b5:3e:f9:5b:d4:d3:29:6f:ba:80:66:
02:86:72:a1:82:72:6b:67:66:db:8a:95:44:2f:62:ef:08:f5:
4a:a4:fd:d7:47:86:84:2b:aa:93:fe:51:7c:1a:5c:d7:64:76:
13:f0:48:e8:41:1d:8b:28:ed:6e:99:f6:56:dc:e8:36:34:ab:
3a:50:80:b7:3e:75:2a:32:89:19:a3:cf:93:fb:5d:3d:38:c6:
40:64:79:b2:83:f2:1a:60:c0:d9:16:ca:be:bb:be:1b:54:2b:
e8:2f:4e:07:37:68:cd:a6:86:68:21:cb:0b:d2:7f:d3:2b:fe:
8a:ad:ab:f6:8e:3e:9f:7c:5f:22:c6:53:dd:9a:4d:cf:bc:aa:
b2:ce:45:cc:71:8c:90:97:87:55:98:c0:37:7b:0b:39:fb:c5:
33:14:fd:71:f5:45:92:cd:f1:d9:ee:22:fe:96:96:5a:09:88:
9f:ce:2c:dd:18:54:4d:8f:75:ac:0d:e8:85:29:42:54:65:b6:
37:6c:be:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:36:37 2026 by rpki-client