
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ec678be3-116b-392e-a70c-6e9f357e39d3.roa
File: ec678be3-116b-392e-a70c-6e9f357e39d3.roa (raw, json)
Hash identifier: dZAL4oNgcxGVoTE9j1LPnSdIef8Mcc0i1diHaMZFQPA=
Subject key identifier: 70:05:77:91:2F:B6:BF:06:CC:69:E7:61:19:84:47:11:8D:AA:6A:6D
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584DC135E4E69093CB5623C0A7C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ec678be3-116b-392e-a70c-6e9f357e39d3.roa
Signing time: Thu 07 May 2026 13:00:31 +0000
ROA not before: Thu 07 May 2026 13:00:31 +0000
ROA not after: Wed 05 Aug 2026 13:00:31 +0000
asID: 6424
IP address blocks: 128.121.128.0/17 maxlen: 24
128.241.48.0/20 maxlen: 24
128.241.64.0/20 maxlen: 24
128.241.96.0/19 maxlen: 24
128.242.64.0/20 maxlen: 24
128.242.160.0/20 maxlen: 24
130.94.160.0/20 maxlen: 24
130.94.224.0/20 maxlen: 24
131.103.32.0/19 maxlen: 24
131.103.64.0/19 maxlen: 24
131.103.144.0/20 maxlen: 24
140.174.112.0/20 maxlen: 24
157.238.96.0/19 maxlen: 24
168.143.80.0/20 maxlen: 24
168.143.192.0/19 maxlen: 24
192.204.112.0/20 maxlen: 24
192.204.128.0/20 maxlen: 24
192.204.160.0/19 maxlen: 24
198.64.96.0/19 maxlen: 24
198.64.128.0/18 maxlen: 24
198.64.224.0/20 maxlen: 24
204.0.32.0/20 maxlen: 24
204.1.144.0/20 maxlen: 24
204.1.224.0/20 maxlen: 24
204.3.0.0/19 maxlen: 24
204.3.64.0/18 maxlen: 24
204.141.64.0/20 maxlen: 24
209.139.0.0/17 maxlen: 24
209.207.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c1:35:e4:e6:90:93:cb:56:23:c0:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: May 7 13:00:31 2026 GMT
Not After : Aug 5 13:00:31 2026 GMT
Subject: CN=e150e9bd-9ae2-445b-a466-023f17980f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:a9:64:f4:3f:53:a7:7b:d0:ed:bb:d0:d1:
d5:e6:e7:d4:9c:00:cb:08:84:d4:49:64:8b:be:d2:
7c:13:34:50:52:66:a6:57:a0:dc:48:62:86:36:2e:
22:cd:7b:00:0c:0d:db:e2:04:25:87:cf:c3:e8:e4:
82:a9:5b:44:a7:4d:b5:3c:36:44:e1:f4:4e:b1:f5:
84:75:63:0a:e9:9e:8a:14:5d:83:c5:59:15:d3:12:
ec:59:06:f1:da:50:8d:2b:3c:c5:a0:e2:b9:12:59:
c9:ef:af:18:29:ee:4b:00:a1:f8:bd:bc:fe:a4:47:
21:89:a1:a8:c2:0c:df:98:fe:55:da:da:7e:5a:76:
2e:dd:b7:0b:de:ac:d1:08:7f:38:a8:d7:38:e3:4d:
71:0b:e0:1a:12:6a:3c:e4:88:64:d5:ba:75:63:1f:
b1:95:23:0b:e2:60:e4:66:54:e8:62:86:fa:ca:e2:
8d:0b:33:2c:f5:19:96:3d:ca:f3:90:9d:d6:70:d0:
3a:8e:43:bf:5a:8c:eb:1c:ec:ca:68:a5:d9:3e:3e:
46:d0:58:04:a7:f9:b3:91:95:e3:6b:c2:31:c3:f9:
26:98:87:32:b6:bd:15:25:d9:a6:0e:c5:39:b4:9d:
14:fa:77:06:5f:bf:e0:b0:28:f7:1c:d6:e0:f1:5e:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:77:91:2F:B6:BF:06:CC:69:E7:61:19:84:47:11:8D:AA:6A:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ec678be3-116b-392e-a70c-6e9f357e39d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.121.128.0/17
128.241.48.0-128.241.79.255
128.241.96.0/19
128.242.64.0/20
128.242.160.0/20
130.94.160.0/20
130.94.224.0/20
131.103.32.0-131.103.95.255
131.103.144.0/20
140.174.112.0/20
157.238.96.0/19
168.143.80.0/20
168.143.192.0/19
192.204.112.0-192.204.143.255
192.204.160.0/19
198.64.96.0-198.64.191.255
198.64.224.0/20
204.0.32.0/20
204.1.144.0/20
204.1.224.0/20
204.3.0.0/19
204.3.64.0/18
204.141.64.0/20
209.139.0.0/17
209.207.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:ed:6e:10:5a:92:b6:16:eb:e2:14:ae:9a:4d:28:83:79:42:
df:a3:85:49:cf:c4:55:37:95:49:e2:c7:48:ea:d2:6d:63:26:
4f:35:cf:2b:b1:17:e3:b3:a5:34:23:5e:88:2c:aa:6e:4b:72:
22:e2:0a:1a:78:26:d9:6a:83:27:2c:88:77:ca:7f:2a:10:8a:
85:9d:ee:c7:25:0c:1f:be:40:e1:99:98:b3:34:c4:90:f8:0e:
2b:65:ff:13:72:b1:96:30:71:c3:55:ea:69:57:2a:0f:d0:48:
8b:4b:26:d9:0d:73:2c:bf:1f:e5:6e:df:17:44:7a:4c:d4:3b:
58:5d:73:96:3f:ea:7a:63:4c:5b:07:b9:fd:9b:52:61:3b:44:
69:5f:5c:dd:9b:15:45:0a:4e:cb:5b:63:31:f6:20:97:d4:9a:
27:60:95:7f:7e:d6:78:8f:7b:96:d8:c1:bc:5d:33:d4:c0:39:
34:63:89:22:34:6d:3c:68:80:fb:43:98:77:db:42:f7:53:31:
33:c7:41:b1:40:24:2c:9b:97:2d:08:2a:0a:cd:fd:79:a2:f8:
32:4f:e8:62:e7:7a:a4:2e:c2:af:c2:bf:26:9e:c8:51:5e:3d:
95:9a:fa:12:9d:37:9c:09:14:e9:40:ab:a9:1e:20:d8:9b:af:
cd:d3:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:40 2026 by rpki-client