
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa
File: e0124a56-00b3-397d-94b4-a8fccac56c0c.roa (raw, json)
Hash identifier: UwZ8dP2GnHF94yDHSCB+5BgePkiDycgLiW8whxr3KwY=
Subject key identifier: AA:9A:63:FA:BD:46:F7:41:AF:2F:2A:44:FC:D8:41:B4:A2:75:14:7B
Certificate issuer: /CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Certificate serial: 010D0C9F4328584D492A7579E3D594A1ED732580
Authority key identifier: 4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 2
IP address blocks: 128.4.0.0/16 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:75:79:e3:d5:94:a1:ed:73:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=61a3dffd-c7fb-4eb4-9728-3f53df47b3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:4e:c3:f4:e0:3c:5e:7f:ff:78:84:68:95:
55:6e:ad:fc:4a:63:a9:32:69:d7:e7:ce:f7:9b:e9:
3d:96:cb:65:ce:1a:50:30:c0:7a:89:7c:57:51:b1:
12:d2:34:e3:a3:13:1a:4d:23:0e:90:8e:1f:6c:cc:
c0:89:f9:6b:4b:92:42:56:38:be:48:b7:c6:72:25:
48:45:b7:0c:84:30:d1:77:6d:61:5f:20:10:c6:ef:
ec:99:2d:32:dd:8a:ad:9f:69:87:a7:81:5e:cf:76:
43:a7:89:3e:df:32:95:a1:61:9b:6c:d5:f2:08:57:
ba:ce:1a:ab:df:aa:57:ce:0a:86:b6:76:86:8b:d3:
c5:04:fa:4e:25:26:e7:1f:3c:6e:27:d2:9b:ee:01:
82:b6:3c:55:46:4d:d1:99:e4:3b:cb:b2:28:37:5a:
28:ec:ec:1b:03:ab:f9:25:39:0b:55:99:fb:3e:c5:
41:fa:e6:13:fb:c7:45:e7:10:6f:7b:a6:13:6b:4e:
c8:ea:cb:55:ac:f4:0f:00:eb:74:74:59:cf:15:e0:
7d:56:47:02:48:c6:92:e3:d1:26:68:de:4a:d0:70:
ea:ff:c9:5c:c4:27:09:b4:28:6b:ce:74:26:47:67:
26:a8:17:5e:bb:05:33:61:50:1c:97:90:be:88:67:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9A:63:FA:BD:46:F7:41:AF:2F:2A:44:FC:D8:41:B4:A2:75:14:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl
X509v3 Authority Key Identifier:
keyid:4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.4.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:ae:b6:c7:d2:01:6f:c1:88:6a:ac:9d:cf:5b:0d:e8:43:8a:
aa:9b:b7:0d:09:b7:4e:f7:eb:39:e3:dd:15:36:dc:52:4c:4d:
8b:0c:6b:be:99:71:8a:a5:9b:85:8c:c3:c6:4b:9f:38:35:f6:
fd:64:68:0c:e2:e3:ab:7f:d7:a0:0a:29:0e:76:07:37:23:97:
0f:83:aa:d8:d7:95:60:9d:e4:39:77:1e:13:fc:84:94:82:2a:
ab:50:ab:c5:dc:1f:52:2b:03:41:9d:5f:f9:07:57:56:fb:6c:
08:8f:99:51:62:f7:83:0a:37:ea:b8:56:87:66:22:b5:0c:69:
8b:32:00:7e:ac:9b:b2:18:c1:9c:dd:ef:f6:04:0b:20:7f:50:
b1:35:13:22:bb:00:65:5e:22:0e:6a:23:7e:58:82:cd:a9:b3:
fa:e5:a3:b6:68:a2:9f:72:83:0e:46:3a:63:87:d5:f5:78:78:
64:16:23:02:7a:b6:de:ab:39:e2:ee:33:a9:da:ae:70:82:92:
1f:af:2c:55:02:ab:e6:2d:38:fc:a7:15:b7:fe:1a:08:48:4a:
89:39:50:d7:4d:54:52:4a:4e:bf:4a:e7:32:58:38:d2:0c:bf:
a8:3d:21:9f:f6:e5:98:48:a0:d9:56:1a:10:fc:fc:e4:92:12:
4b:0a:80:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:36:19 2026 by rpki-client