
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa
File: ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa (raw, json)
Hash identifier: PA2jnIPcXo2KkFGo5jchgA24EJLleRoXi5f3jiuuCZ4=
Subject key identifier: 1E:2D:D9:62:7C:20:D7:57:20:AA:6B:19:53:FF:C2:A0:5C:25:2A:18
Certificate issuer: /CN=560b4c54-bd35-46e1-8698-aff50195e1b4
Certificate serial: 010D0C9F4328584DCDC5A12EEC1733962189FDC0
Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa
Signing time: Tue 12 May 2026 01:00:24 +0000
ROA not before: Tue 12 May 2026 01:00:24 +0000
ROA not after: Mon 10 Aug 2026 01:00:24 +0000
asID: 396163
IP address blocks: 204.16.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cd:c5:a1:2e:ec:17:33:96:21:89:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4
Validity
Not Before: May 12 01:00:24 2026 GMT
Not After : Aug 10 01:00:24 2026 GMT
Subject: CN=58c6ed04-3542-4288-90c7-686b039ba639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:bd:00:99:16:bd:a9:3a:da:ab:02:5c:87:
9b:60:6c:b0:32:85:a8:41:e8:f9:32:43:b2:08:bc:
3c:ff:4f:cf:22:c5:f8:c7:d0:ca:4a:5f:0f:cb:38:
de:53:1b:b9:6b:68:87:ed:be:8d:01:fc:da:2d:23:
87:92:ed:e3:b6:91:e7:fd:d9:8d:5c:45:05:8b:3c:
37:5d:3d:c0:27:bc:2e:9d:1f:90:fd:84:a7:b0:61:
b0:89:00:1a:56:b0:50:97:8b:ed:15:91:9a:06:aa:
fc:60:a6:64:67:9f:19:f5:95:f2:1a:bd:ec:a7:e3:
1a:08:50:d3:e3:77:95:63:1f:56:c4:b4:eb:22:da:
7f:83:e7:fb:b5:be:da:8b:2e:c7:38:66:48:1f:35:
fb:89:38:6b:44:66:87:6c:b9:c6:7a:64:06:8c:3f:
cc:41:92:53:4e:86:21:c9:e1:0c:98:9d:be:5a:e3:
9e:9e:e9:a7:60:e2:2d:ed:3b:dc:bf:b3:af:76:1c:
a4:e4:77:a8:36:e2:1a:67:d2:99:05:a0:c8:43:1d:
ba:95:6c:8d:cd:1e:ab:8a:b0:f5:5f:3c:20:b8:53:
a8:ae:b3:71:00:4b:8c:21:01:7c:a4:1f:39:8e:13:
dd:47:fa:12:c8:c2:88:65:f1:be:9d:7c:af:0d:34:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2D:D9:62:7C:20:D7:57:20:AA:6B:19:53:FF:C2:A0:5C:25:2A:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl
X509v3 Authority Key Identifier:
keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
sbgp-ipAddrBlock: critical
IPv4:
204.16.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:ce:3b:60:aa:40:f4:db:99:3a:d9:f5:2b:82:96:1a:b6:e1:
3f:a3:68:6e:c6:3c:77:35:3e:27:9c:30:32:0a:1f:7f:ed:41:
1f:39:cd:05:21:0c:b6:54:2e:4b:00:e9:f0:2d:5f:1b:4d:69:
d2:ab:a0:fc:28:16:ae:30:70:11:c6:80:ae:5d:c8:39:17:cb:
04:52:32:ea:ea:d0:c0:b5:26:f4:8d:c1:4c:2d:61:28:74:45:
cb:c1:c5:37:bb:5c:08:3d:86:de:96:a6:54:a0:3b:98:3f:7e:
a5:88:71:41:c1:8d:6f:30:a5:a0:83:09:90:7b:21:bc:ce:cb:
7b:16:e9:c9:09:dd:93:03:8a:2b:59:bb:de:1e:ba:e4:38:06:
58:d6:ce:5c:17:40:f8:b8:ab:69:21:0a:cc:90:1e:c8:00:90:
c6:db:ac:eb:0a:8b:07:a6:32:f9:d8:80:c4:9c:a6:0a:b1:2c:
b5:c1:ff:0a:e4:8b:78:e3:38:8c:87:71:8f:ad:f7:cb:03:b4:
d7:c2:16:b3:12:c7:fe:dc:cf:8e:b0:6b:ff:55:44:f4:d2:57:
75:ef:69:da:f6:9f:42:f4:d9:a6:23:f8:c3:bf:d0:a4:d6:1c:
d3:86:e1:16:c8:4f:55:31:75:3c:62:63:50:a4:57:fb:71:a5:
89:f6:33:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:11 2026 by rpki-client