
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bc61ec21-f22c-3389-a550-ec3ff4aba035.roa
File: bc61ec21-f22c-3389-a550-ec3ff4aba035.roa (raw, json)
Hash identifier: UCQeVUzuRK5oiStW8owlt2d7/efjCL9zD8tNC5WjE50=
Subject key identifier: A4:8F:B7:B4:94:7D:CE:8F:3D:0A:BA:65:55:92:6D:7D:EA:A6:A3:48
Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial: 010D0C9F4328584DA54AC42242C697597EE66900
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bc61ec21-f22c-3389-a550-ec3ff4aba035.roa
Signing time: Mon 27 Apr 2026 13:00:30 +0000
ROA not before: Mon 27 Apr 2026 13:00:30 +0000
ROA not after: Sun 26 Jul 2026 13:00:30 +0000
asID: 198949
IP address blocks: 72.22.87.0/24 maxlen: 24
72.22.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a5:4a:c4:22:42:c6:97:59:7e:e6:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Validity
Not Before: Apr 27 13:00:30 2026 GMT
Not After : Jul 26 13:00:30 2026 GMT
Subject: CN=573ab2f4-6c32-41bc-83ce-ca43447af6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:17:62:bf:c4:25:da:83:08:38:c9:48:fd:
18:00:32:c1:cc:e9:4c:99:6d:60:f1:95:28:8c:d9:
ed:6a:70:1f:82:ca:bd:a3:ad:a6:6f:f7:0f:06:74:
46:a5:92:d3:30:e0:08:0e:66:6e:da:5d:a4:9f:c9:
de:3e:70:8d:32:51:16:0e:4c:b2:d2:cc:9d:29:ed:
d6:8b:70:de:9f:53:96:c2:9d:7c:e7:8c:b6:ac:0d:
fd:7d:7f:65:eb:ec:cf:aa:b3:98:f5:2a:dc:d9:8a:
06:e8:a9:ac:e8:2e:1d:da:e1:8d:4e:f2:68:25:0b:
10:25:b9:78:de:52:8b:61:e8:9b:1f:ba:8a:14:a7:
89:69:57:e0:29:3a:c1:74:5c:91:03:09:ac:40:89:
69:a0:4d:52:77:30:31:d7:39:b3:25:20:d2:5a:da:
21:57:86:07:4d:69:41:0f:63:65:3d:89:2a:19:fa:
f6:28:72:c3:81:0f:ba:9d:93:7c:4e:e2:de:1e:c7:
dd:38:46:45:ab:f0:f9:6f:f7:9f:39:3c:66:52:ac:
5a:1d:3d:a1:ab:1e:75:43:69:9f:0c:9c:f7:7a:59:
a5:44:e3:44:4b:e4:75:34:54:6a:f8:34:83:b2:4f:
d8:e7:90:85:58:6e:ac:a8:fd:3b:86:50:26:14:8c:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8F:B7:B4:94:7D:CE:8F:3D:0A:BA:65:55:92:6D:7D:EA:A6:A3:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bc61ec21-f22c-3389-a550-ec3ff4aba035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
X509v3 Authority Key Identifier:
keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.87.0-72.22.95.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:61:fb:02:50:90:82:e3:c0:f2:75:56:64:44:4e:f1:8f:97:
98:98:ee:21:8f:95:26:61:e8:98:ae:5d:68:c5:55:f4:a1:46:
8b:05:42:66:31:7a:ac:21:20:5d:56:d9:e2:7d:70:4b:27:97:
f0:e7:84:63:89:71:e4:46:57:c2:c5:2a:ad:13:f9:82:f3:01:
9c:56:cc:aa:7f:43:b2:33:31:4d:a9:c7:4a:14:36:72:79:24:
b9:43:8e:2a:4a:b8:15:98:e6:db:73:5d:c8:1b:22:fa:0c:92:
0d:be:7b:7f:4b:3a:87:f6:c5:17:f4:1c:53:54:41:89:f6:87:
13:07:6a:bd:a8:a0:f2:6d:83:5e:2b:4f:41:ba:1f:f1:2d:41:
18:50:9a:f4:d4:0e:aa:c5:b7:09:94:ce:d3:69:e2:91:74:33:
e8:75:7a:49:e4:2f:43:35:46:07:91:c2:fb:c7:d9:2b:53:c2:
f6:6a:56:10:96:a8:fb:e6:0b:9b:e4:48:39:dc:bf:0b:4f:ba:
bd:c2:5f:0f:b2:87:8d:ec:8e:b4:79:2a:3e:5a:58:d9:d3:50:
bb:6f:78:be:1d:42:4a:57:52:ce:3a:57:78:5f:18:45:eb:23:
90:24:c3:44:18:f3:89:dd:0b:cf:8d:52:ca:4c:33:c2:3c:f8:
5f:8e:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:10:55 2026 by rpki-client