
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa
File: 0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa (raw, json)
Hash identifier: wQ3oy6khL7OoDoqJwmBA5cP8SBhwInxK5R7wTYQcU8A=
Subject key identifier: B9:4E:5D:FF:69:8A:0F:3A:83:BB:8B:41:79:3D:6A:9C:5D:60:16:37
Certificate issuer: /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
Certificate serial: 010D0C9F4328584D143D4900240301D176E8B580
Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 16509
IP address blocks: 204.128.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:49:00:24:03:01:d1:76:e8:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=7a3c9428-627c-4672-9f40-a3f11e1731c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:1b:74:26:64:7d:d0:0f:8a:6f:8c:1f:5d:
b7:27:77:7e:de:62:4f:a3:bf:7c:b6:5e:d3:e7:dd:
4b:31:8f:10:bd:e9:4c:d3:a0:ff:b3:d1:58:2d:9e:
02:ed:ae:c5:a2:82:03:83:08:a1:09:b9:7b:be:b7:
bb:ca:ea:b4:52:12:1c:f7:7f:94:50:ee:45:e6:e3:
d2:e1:fc:ab:89:cc:82:e6:55:db:fa:0f:c7:2f:ea:
ab:d1:23:2f:0d:44:9f:cf:de:2b:cb:dc:f6:9c:14:
7d:0d:d3:ca:c1:5d:65:eb:f5:e8:e3:ac:08:5d:86:
fc:f0:a4:53:92:36:1f:b5:3d:46:e4:4b:22:c4:a5:
2e:09:96:00:88:7e:0f:76:c2:8b:db:96:94:35:77:
e0:29:cc:67:34:1a:35:bd:72:ba:fd:98:a8:35:8b:
24:38:0f:9e:c9:97:88:2a:52:d2:92:9a:35:a2:2f:
42:03:9b:5c:60:c4:57:61:5d:5e:62:1d:e7:3e:ff:
68:70:9b:66:6f:38:6a:a2:3d:f8:52:01:99:49:2c:
f3:00:0c:5b:be:be:8e:af:b8:71:6e:82:00:88:5e:
1a:a6:46:bc:8b:36:4d:2c:2f:fa:6d:6f:6d:51:e5:
bf:61:ac:b1:31:a5:ab:ce:2b:0b:5f:fc:21:17:13:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4E:5D:FF:69:8A:0F:3A:83:BB:8B:41:79:3D:6A:9C:5D:60:16:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl
X509v3 Authority Key Identifier:
keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.128.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:71:2d:5c:18:57:c7:00:b8:38:bc:b9:b9:0c:c0:1a:4e:a8:
13:04:15:64:a0:a5:cd:b5:d3:1f:bc:78:4c:26:3e:41:c8:de:
b7:da:88:2f:a6:c4:7b:7e:47:61:18:60:62:4f:b0:ce:f5:d7:
c2:eb:6a:3e:1d:df:9c:3b:3f:16:55:a0:53:e7:b0:08:42:83:
e0:42:66:09:c6:06:17:a5:9d:e8:a3:39:a3:d0:ae:db:1c:d8:
47:79:27:43:65:f1:88:e8:4c:80:2d:9f:10:ff:fe:36:1b:68:
fa:51:0f:47:63:8c:71:ad:72:6c:75:a2:45:dd:6a:a7:ea:08:
f8:82:73:4f:dc:a8:f8:5d:5f:c2:ed:10:1d:79:bd:b6:68:48:
27:6d:72:41:b2:2b:fa:e4:4a:52:41:98:95:5c:70:a6:76:01:
dc:f3:fc:58:23:28:24:f9:80:2b:12:02:ff:41:ff:62:e4:7d:
2f:73:60:e2:44:ae:33:e9:e2:1b:b7:a6:d5:42:8e:37:2a:3a:
02:b4:f0:40:09:94:18:e6:63:69:0c:a8:46:a7:18:ac:bc:07:
cd:d2:b8:6d:71:26:2a:b2:33:10:3d:df:66:81:6a:6a:18:ef:
23:2d:57:82:2b:5b:48:f0:4c:dc:a1:2e:61:ac:82:a4:3d:83:
6b:99:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:38 2026 by rpki-client