
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20683793-359f-32a5-baf7-6d5f7f679684.roa
File: 20683793-359f-32a5-baf7-6d5f7f679684.roa (raw, json)
Hash identifier: /HDsV1Wvi5ZBCpZPSg+iud25KWNkWzvK5ywXsKGuhqE=
Subject key identifier: A6:A5:B3:78:50:BA:EE:81:68:40:9F:52:E2:64:FE:DB:8C:DB:64:02
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584D40CB1AA9698F3A202F8C5AC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20683793-359f-32a5-baf7-6d5f7f679684.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 10796
IP address blocks: 67.52.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:1a:a9:69:8f:3a:20:2f:8c:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=fdfed892-7d64-45ae-9a02-88890de8375f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:7f:33:3d:7e:59:f8:b8:23:41:54:bb:9a:
80:69:fb:3c:4e:e1:a6:38:cb:dd:bf:2c:0a:f9:0d:
9d:25:24:8b:39:58:52:80:bf:2d:50:90:f8:fd:d8:
09:6d:b7:de:ed:23:65:ae:2c:31:80:8a:3e:e7:3d:
2b:e5:87:da:2b:ec:79:40:05:d9:a1:8d:be:d1:50:
89:e2:7e:5c:f9:ac:a6:d2:aa:ac:c7:c8:f4:7b:df:
8b:24:27:d5:8b:e9:72:97:d0:3d:ac:e6:37:0b:c1:
7a:1c:c8:26:08:a1:b9:02:54:44:74:38:fc:69:4c:
c3:92:cc:b1:2a:5d:08:fe:f9:32:7c:4c:5f:dc:eb:
dd:4c:90:3d:97:1f:dd:ea:67:41:50:12:a3:94:5b:
60:a1:32:8b:24:73:36:e9:6b:b2:eb:69:a4:af:2d:
cf:4f:81:b1:21:c4:c4:61:ec:7a:19:64:4e:b5:2c:
fd:b5:bc:67:74:d3:66:62:8d:24:34:3e:5d:43:30:
d8:6d:c3:78:e1:9a:a8:ad:30:7a:c3:82:9f:e7:53:
02:bb:5a:a5:c3:3a:0a:03:f9:df:ae:fa:11:63:6c:
26:6f:17:70:38:e1:59:49:2f:04:b3:4e:2f:dc:78:
85:3d:f6:23:7a:8d:23:36:77:d9:0d:6e:76:1a:e5:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A5:B3:78:50:BA:EE:81:68:40:9F:52:E2:64:FE:DB:8C:DB:64:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20683793-359f-32a5-baf7-6d5f7f679684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.52.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:5d:b2:f0:c7:da:9c:77:d1:82:6f:66:4d:3d:c8:08:b5:0e:
73:bd:96:2b:75:a9:44:5f:ac:1b:f1:8c:84:f5:b0:4a:60:f7:
6c:de:ff:c7:81:4d:4f:c8:d6:0e:f4:c9:23:92:c2:7d:7d:8e:
b1:5c:1e:d7:7f:8f:a8:f6:5b:8c:77:3e:d5:7c:1b:ea:b0:f3:
57:bc:4c:37:54:f3:9a:51:c1:24:06:59:db:95:42:ce:4a:bb:
9d:d1:fa:8b:5c:bd:eb:c0:92:ec:4b:af:dd:96:4c:06:fb:b2:
09:8f:77:74:24:40:e8:76:8c:71:39:12:f3:6a:bc:da:50:3f:
e5:d8:eb:f0:d0:71:50:45:de:e7:42:77:d3:8a:35:7f:78:1d:
16:ca:bb:ec:15:59:2d:35:e7:ab:21:e0:3b:a8:32:c8:e4:71:
26:60:87:96:4f:55:d3:d6:b3:8f:12:9d:f2:d3:c2:c3:74:13:
80:92:58:99:d4:4d:36:27:09:69:ce:79:3a:60:04:95:95:f7:
aa:ba:78:c3:6a:6b:9e:5b:26:10:2d:1b:ea:1e:01:78:49:00:
c1:14:96:ec:d8:b9:e9:66:a6:60:49:34:a0:dc:e2:f9:5c:8e:
1e:bb:34:09:3d:a8:a3:b3:79:b2:da:9c:41:ab:67:a7:58:f9:
35:2c:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:14:24 2026 by rpki-client