
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa
File: 7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa (raw, json)
Hash identifier: dWo/IqXuDr816WApY1dhEHpjEaACEV3ytaTUzkif8KQ=
Subject key identifier: 8A:7C:15:E1:0F:6D:FE:DB:54:6D:14:9B:E0:6F:48:DA:2A:89:25:52
Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial: 010D0C9F4328584D492A74D8DFB05194D4A15740
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 55
IP address blocks: 128.91.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:74:d8:df:b0:51:94:d4:a1:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=f7544af5-ce71-4bf4-990a-b5af059bd977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:73:0e:9d:26:4e:83:26:92:21:d4:b8:fb:
58:4a:79:d3:c3:b9:c6:d2:74:e0:33:b2:fb:20:26:
5f:bf:04:22:7e:41:5f:89:17:65:0e:c3:56:07:8b:
39:cd:cb:9c:0f:15:bf:4d:59:03:95:7d:05:dc:ee:
24:d2:fd:46:a0:3d:9e:98:97:cb:2e:ab:69:04:9d:
43:07:21:db:b9:3c:6b:ea:17:75:c8:fc:3b:48:5d:
86:fb:0d:31:a2:cb:99:15:9d:0f:d2:54:a7:e1:09:
55:cc:df:0b:92:a3:23:09:bd:2c:e7:29:fc:8c:77:
10:67:f6:bc:88:aa:c6:c7:bc:ba:5d:10:a8:04:8e:
2e:e5:05:e5:3c:31:8c:aa:d6:39:9d:61:26:bb:ea:
f7:3d:78:d5:25:e0:9e:7f:c1:94:92:a6:78:11:71:
1e:22:b8:02:7e:bb:f5:6d:07:db:ec:49:c4:0f:db:
9b:50:21:14:50:e8:4c:df:76:eb:82:f0:4c:96:84:
80:18:1d:e8:f5:a1:20:a4:ef:57:c6:a3:aa:93:e4:
2b:07:cb:67:31:48:69:24:4e:8a:49:65:25:15:bd:
9c:57:64:9f:6f:7e:be:6a:34:39:c5:b2:eb:a4:9d:
7c:05:d0:15:13:d7:4f:d9:86:11:4c:90:a6:b8:9f:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7C:15:E1:0F:6D:FE:DB:54:6D:14:9B:E0:6F:48:DA:2A:89:25:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
X509v3 Authority Key Identifier:
keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
sbgp-ipAddrBlock: critical
IPv4:
128.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:5e:fd:5c:9f:f9:fa:92:14:97:d6:b9:93:3a:c2:1d:33:cb:
f3:ca:32:23:24:39:57:b4:ef:9f:a2:ba:4d:08:dd:60:0b:c2:
e4:9a:d6:cb:d7:a2:ad:7c:a3:f2:a9:7e:9a:67:7c:c9:dc:0b:
5b:7a:ca:39:82:9c:ac:34:97:7b:77:aa:34:35:db:f2:bc:05:
1b:e1:2d:c7:b6:cf:89:6a:f0:95:4f:0c:5a:d7:9e:c3:d2:c0:
ad:39:b1:ac:60:8f:37:66:c6:f2:39:47:cd:32:62:0d:5f:45:
3c:b1:07:67:3e:38:ad:84:9a:df:4f:38:b9:43:78:e3:35:b8:
13:63:67:51:61:74:61:4e:97:dd:e0:10:b4:82:5f:a2:1a:3c:
b9:5c:7b:cf:a1:58:e4:f1:3d:1b:3c:4a:86:e6:33:e8:65:9f:
94:cc:4e:2e:a8:46:a1:a4:2a:37:53:df:97:ad:57:10:fe:d3:
db:20:36:45:79:24:16:3c:35:8a:91:09:e0:b0:89:45:47:a8:
21:8d:53:ab:0e:e8:08:2f:e3:84:f1:22:5d:d6:b3:b5:55:e8:
8d:9e:36:96:6e:64:95:72:ec:38:eb:0f:0c:82:2c:7f:4d:99:
fc:b3:d2:ae:ec:10:cc:72:d4:96:bf:a7:09:56:db:48:03:62:
01:8e:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:32 2026 by rpki-client