
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
File: aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa (raw, json)
Hash identifier: DUZ2SOhBdPNefdd3x+3y65KN4jhXTx/YR++vTZ6Q33w=
Subject key identifier: F6:3C:FC:C6:FB:83:86:01:1B:55:32:35:9A:EC:41:12:4A:31:94:2E
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584D39CF8F01D8AC0E944245FF00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
Signing time: Fri 20 Mar 2026 01:00:32 +0000
ROA not before: Fri 20 Mar 2026 01:00:32 +0000
ROA not after: Thu 18 Jun 2026 01:00:32 +0000
asID: 62610
IP address blocks: 45.40.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:cf:8f:01:d8:ac:0e:94:42:45:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Mar 20 01:00:32 2026 GMT
Not After : Jun 18 01:00:32 2026 GMT
Subject: CN=4094e246-29ee-4e7c-a624-a3ee0d2f8968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:1c:7a:ce:e6:ee:67:9a:63:99:56:b6:ac:
8b:1b:79:5e:e8:51:a9:eb:0a:2c:84:5a:c6:71:c8:
20:44:bd:ae:55:13:a1:0e:7e:8a:1f:f8:fb:3d:c2:
92:58:a0:a3:86:a1:c9:a9:87:22:3c:d7:77:80:2b:
06:52:ac:cf:ad:c6:63:f6:8f:1c:af:5d:48:9e:94:
3c:9f:f7:aa:d3:35:77:99:9d:a2:a0:a2:8e:3c:5b:
fa:f4:f0:29:b5:f1:c5:6f:6c:72:86:73:17:a7:b7:
dd:e3:36:8d:ae:cf:06:5c:37:e6:26:09:5f:26:b9:
83:60:14:6c:f7:c6:8a:9f:89:e3:5f:b1:6c:22:4c:
cf:44:70:b6:d3:5d:5e:f6:75:9b:9d:9e:b7:83:3f:
c4:8d:5e:13:00:11:31:bc:27:52:c3:21:fe:83:4e:
52:52:ac:d2:b1:e5:20:b7:b5:c6:44:79:92:2c:37:
91:0f:f8:b0:98:9a:8d:19:0a:d6:a1:f2:44:76:32:
e2:22:f9:ed:b7:0b:12:02:bf:8c:fc:cf:61:cd:11:
9a:d4:5e:07:05:03:0f:89:87:0e:8b:04:ba:f4:bc:
40:70:13:69:8c:a6:aa:aa:b1:8a:a0:80:8c:ef:21:
9f:0f:58:f9:f7:25:76:54:47:0d:37:f4:f2:ac:d0:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:FC:C6:FB:83:86:01:1B:55:32:35:9A:EC:41:12:4A:31:94:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:1c:28:f1:9e:8a:39:a7:01:8a:6f:1b:e5:09:5d:e4:39:a6:
f6:36:3a:73:ea:cd:38:ec:89:9a:5f:11:75:fb:4e:fa:17:4f:
dd:12:27:44:42:37:2e:b2:b9:19:78:01:5d:7a:68:0f:5b:be:
d0:4a:f7:24:6b:4b:8d:1e:a2:31:8e:93:af:eb:7b:ae:9a:34:
ae:e1:e3:c6:dd:18:1a:7e:ee:76:d2:bc:82:ab:7b:74:a9:7f:
fc:03:ad:78:bf:93:b5:30:13:97:54:a3:83:78:a0:7f:10:97:
ad:bf:7d:02:70:71:91:c5:08:d9:97:12:db:b2:d6:b9:5d:27:
08:ac:5c:65:bb:08:c7:67:a5:80:12:05:dc:5d:35:21:b9:a5:
43:57:d9:be:33:1d:00:d9:11:76:a6:42:99:56:5a:41:2c:3c:
5c:30:b0:9f:c6:47:75:ce:80:d0:bd:ae:6f:0e:8f:8d:10:7c:
b3:55:8f:a6:d5:22:47:40:67:bc:25:03:ed:ef:1d:89:1b:1b:
e6:7c:d4:c2:29:7e:ac:d7:46:db:95:93:51:12:3b:66:c5:7f:
8b:83:42:d8:ff:5a:1e:5f:d9:c5:f7:ef:06:4c:48:56:04:bb:
85:48:7a:5d:92:2b:cf:80:7d:c3:45:d7:b4:2b:82:82:20:44:
26:cf:75:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:07:43 2026 by rpki-client