
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa
File: 015ba892-66b8-3dde-9289-c0d40a2a62b7.roa (raw, json)
Hash identifier: H46MxqVF+zs1cfh0g6jHJTFs2g0AVI/vkhKOkR3NWag=
Subject key identifier: 83:DB:A0:8B:89:2B:08:0A:0F:A3:5A:EA:4D:D3:BD:B9:96:76:65:E7
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584DC4004E8CCA76523916499CC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa
Signing time: Fri 08 May 2026 13:00:30 +0000
ROA not before: Fri 08 May 2026 13:00:30 +0000
ROA not after: Thu 06 Aug 2026 13:00:30 +0000
asID: 33651
IP address blocks: 216.170.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c4:00:4e:8c:ca:76:52:39:16:49:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: May 8 13:00:30 2026 GMT
Not After : Aug 6 13:00:30 2026 GMT
Subject: CN=57ad6f96-ddfa-49c2-ad91-5c7a074b990d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:c2:51:7d:7e:ad:ee:c7:0c:2b:99:39:7b:
a8:60:fb:b4:55:05:33:4e:28:61:d4:84:ab:cf:d7:
b8:f4:fa:37:a5:b1:e1:af:c4:72:91:3a:51:56:61:
38:d8:1d:38:18:66:44:cd:3e:ae:8f:8a:fe:d2:b7:
31:69:08:76:65:28:b5:24:73:21:ff:e8:70:49:71:
03:f6:ea:1e:e0:85:5e:b6:c4:c9:50:14:35:c7:a4:
65:89:01:d6:92:73:d6:9d:11:36:d2:04:25:73:f1:
15:f8:d7:28:89:ff:30:8f:be:34:d6:13:9d:1d:d9:
b0:07:45:16:49:f1:af:d6:3d:fb:fb:e4:fe:04:c1:
7d:da:78:b5:8e:c4:8e:57:4d:8c:c3:12:29:ac:5d:
50:2d:80:fb:64:71:eb:d8:40:43:bd:2e:d9:88:46:
5b:e7:d0:38:75:6b:52:0b:ef:94:1c:f3:c3:15:13:
65:a3:b6:37:54:2f:c4:1a:cb:9b:44:11:4a:9d:88:
55:3a:66:3e:4e:64:07:5f:93:fd:7b:f0:c0:2e:6e:
06:5f:a9:3f:4d:cb:5f:9c:41:93:9f:5c:72:3f:6d:
05:80:58:26:e4:34:0a:40:01:95:d0:8e:59:fb:d6:
f4:94:e1:f3:22:db:97:d8:77:82:9e:ae:eb:1f:f9:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:A0:8B:89:2B:08:0A:0F:A3:5A:EA:4D:D3:BD:B9:96:76:65:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.170.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:44:eb:5e:98:da:fe:65:14:98:02:67:ef:e0:c2:a3:1f:5a:
5e:35:61:49:02:66:4d:42:80:b7:4d:37:07:34:2d:5a:84:9e:
2a:74:00:77:ca:1c:ae:cb:e9:6b:cd:ea:92:8c:92:48:2d:fa:
2d:64:82:3d:df:41:88:0a:4f:bc:dd:92:4e:3b:c9:47:9b:49:
e9:f9:65:8b:43:f1:fc:7a:69:d8:ab:93:7b:67:ba:c7:12:8d:
a7:eb:36:69:81:22:e2:a0:42:fe:3c:a9:74:b4:32:dd:0c:f6:
ed:8f:c0:a4:8f:7a:1c:6c:cd:99:a6:04:42:2e:3c:86:88:f1:
8e:5e:bb:ac:5e:49:bb:89:f6:02:e4:1f:8c:55:ad:33:42:91:
00:b2:4f:08:3f:41:a0:10:97:09:ba:19:92:f5:b9:fa:8b:3d:
59:a0:ec:4e:b1:3a:7d:06:e0:26:ec:10:1b:25:90:29:ac:70:
7b:27:1f:f0:3b:0f:e2:bf:2c:ca:36:94:75:5f:32:9b:66:ed:
19:ff:f4:81:1d:b7:43:5b:c5:5b:9e:f0:1b:9b:90:08:fa:1c:
1b:a0:b1:ec:f1:63:0f:9c:07:da:09:d9:94:93:74:1b:6c:b3:
55:5c:7d:39:07:7d:52:97:88:24:be:e4:95:82:f7:70:28:52:
ac:19:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:04 2026 by rpki-client