
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa
File: 5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa (raw, json)
Hash identifier: 6uPQMMikEayRkWmeDbQbdjgYuzfEZON5ZzzfFGB6UUk=
Subject key identifier: C8:E3:93:E2:AD:F1:2E:FF:C4:8B:15:AF:69:D6:0D:ED:9D:7B:66:81
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F4328584D1F4A120B5826CD4606182F80
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 396982
IP address blocks: 162.240.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:12:0b:58:26:cd:46:06:18:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=46d87d62-34c4-43db-9727-6dfe35776ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:9f:12:b2:1c:b0:4e:63:5a:50:62:e4:70:
9d:53:35:d1:6a:27:56:c8:46:1a:f9:0f:ea:ec:26:
9e:09:a7:bc:20:6d:fe:0c:7f:42:2b:cd:dd:99:13:
02:56:77:b9:a9:73:fb:dc:fc:50:75:6c:2d:c3:5b:
db:c3:d5:4e:f1:3f:89:ac:ed:2d:53:08:82:a3:20:
a7:81:2e:e0:cd:27:21:bf:ec:6c:8a:1e:58:09:34:
f7:43:86:29:42:59:4a:89:6e:92:dd:3e:be:4a:93:
bc:0b:b6:c5:ea:50:16:cd:01:ce:f8:ab:6b:da:f2:
5e:6e:19:11:ed:8f:b1:72:dd:ca:dd:0d:49:fc:fd:
f6:68:68:9e:38:e7:86:45:e0:53:51:92:77:0d:a1:
ed:14:46:d4:41:fd:cf:6e:ab:99:35:86:25:cf:04:
51:df:f2:3e:71:b9:65:97:56:64:ff:97:fa:b1:7a:
fc:ef:8f:f5:4f:bb:b9:5e:34:fd:c8:57:5f:2c:fe:
65:ce:5c:e3:a1:15:c9:f2:8a:46:fc:c6:89:d7:8a:
a6:fb:7d:97:fa:5f:93:11:37:81:c6:10:b0:88:9a:
5b:18:1e:20:7f:96:ba:fe:50:cb:20:cc:9b:38:eb:
83:73:98:8c:48:c8:ec:61:4d:33:63:af:9d:b4:ce:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E3:93:E2:AD:F1:2E:FF:C4:8B:15:AF:69:D6:0D:ED:9D:7B:66:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.240.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:bc:96:f4:c8:c0:8b:31:ac:03:a9:8b:fb:23:17:64:65:8d:
26:26:9a:d0:f5:13:96:00:57:1e:ac:b7:8c:ed:ef:79:61:dc:
34:ea:43:67:21:01:86:de:4e:a9:2f:bd:f4:ec:7e:21:c3:b2:
59:cb:80:bf:b1:0a:0b:a5:07:f6:3b:91:a1:39:ae:8f:1d:b9:
b9:5d:1e:ca:b5:5c:09:82:2a:fb:7f:66:a2:00:5b:41:4b:51:
b8:d2:25:c5:23:39:c5:80:63:78:76:5f:55:1b:bb:e3:f5:7d:
83:e1:9c:01:3d:6f:9b:07:c9:8d:f1:e8:83:11:06:86:6a:93:
7f:5b:eb:9b:34:ab:d2:f2:89:c3:21:ce:c4:2a:ea:73:69:40:
b8:50:db:b0:46:2b:6f:5a:5f:3a:a7:8b:7b:0f:ef:19:b3:35:
e4:3e:a1:15:08:4f:80:8b:49:97:9a:ae:6a:52:bd:16:4c:58:
ee:03:2d:4a:de:2f:0a:65:2b:60:55:e7:6b:49:c4:7c:fd:a9:
ad:f5:8d:f1:aa:03:9f:2c:34:41:b0:15:62:5b:9c:48:b9:c8:
a7:3e:e6:c2:fe:21:7d:82:c2:bb:01:bc:1e:c5:5e:75:3e:b5:
2b:e3:a6:50:0e:55:23:bd:4c:c6:70:58:f9:38:3a:97:10:4a:
86:8c:39:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:46 2026 by rpki-client