
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5955d366-6b28-3275-bd88-28b0af8fbd81.roa
File: 5955d366-6b28-3275-bd88-28b0af8fbd81.roa (raw, json)
Hash identifier: ncxUW5hogh1gczEETTM8Q4DJ/VJCCaEg55+je9tun2Q=
Subject key identifier: 2B:01:98:71:21:F2:1A:6D:F2:BF:18:38:44:11:5A:51:9E:41:22:72
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584D40CB35130C640A37224AE700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5955d366-6b28-3275-bd88-28b0af8fbd81.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20001
IP address blocks: 172.248.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:35:13:0c:64:0a:37:22:4a:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=016181a7-500f-4ae9-bc3e-146f23e52b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:b6:d1:d7:62:3a:b9:d7:41:86:22:e9:a6:
70:49:e2:e1:01:0c:77:3f:b8:fe:b9:a8:e8:eb:9e:
76:83:77:15:eb:14:51:90:80:f6:c2:26:b9:df:12:
09:52:bb:51:8b:84:78:ef:d1:68:ce:f2:3b:37:1b:
94:11:86:f4:42:1b:91:11:8a:b1:ba:d7:c4:2b:3a:
73:71:1a:71:0e:03:29:aa:29:9a:1c:81:95:c0:78:
0f:65:da:21:91:46:de:3d:8f:4e:b4:3b:89:4c:e8:
09:da:e3:4b:cb:78:6b:3b:0c:6f:72:47:ef:49:ba:
03:9d:cd:d1:c2:7d:71:74:0f:e1:6f:49:65:0c:db:
63:b3:24:39:1a:81:d7:a7:c9:7a:ec:d8:c1:b6:5b:
b8:d0:52:13:74:f9:0b:90:34:52:f2:6a:78:b7:4b:
62:c2:98:de:ff:22:bd:91:4a:ec:a2:aa:10:17:17:
96:ea:d3:63:c8:85:c2:c2:ba:d6:e1:6c:d7:93:f0:
9d:1f:f2:a7:ec:c8:e4:14:34:be:8a:d7:ee:66:ae:
13:fc:d2:ae:c9:91:72:0d:94:dc:3f:07:a3:49:2d:
ae:d1:bd:7b:11:c2:ce:de:54:4d:71:4b:26:cd:53:
99:a8:c0:ed:e8:a0:2f:47:29:b9:d2:c4:98:88:6b:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:98:71:21:F2:1A:6D:F2:BF:18:38:44:11:5A:51:9E:41:22:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5955d366-6b28-3275-bd88-28b0af8fbd81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:0f:5f:18:b8:da:67:35:72:7a:32:19:c3:fa:c6:29:e6:8d:
02:e2:da:22:d4:7e:73:a8:a5:ab:d6:ca:27:e1:e6:dc:21:19:
86:16:c8:1a:9a:78:18:30:93:77:ca:1a:48:d0:4d:31:89:af:
44:0d:f5:c6:7b:d5:e2:ef:86:4c:5d:c9:1d:44:e2:6a:91:70:
72:c7:46:9c:2d:c1:f5:8a:97:0b:89:9d:5e:f2:c4:1c:57:c3:
75:45:20:7a:2f:1c:e1:8e:ed:a5:83:1f:0f:83:d6:80:d7:1e:
08:9c:60:d9:ce:44:03:85:df:ff:fd:d2:21:2f:8a:59:b9:2c:
2f:ee:48:46:ba:c8:3d:20:ee:48:de:42:ef:0d:d4:47:23:42:
16:f1:bd:9c:ae:aa:f0:19:d3:99:00:3d:3b:85:c4:d1:5e:59:
bb:2d:3b:e9:f7:71:b9:69:a1:c4:44:a2:78:8e:76:7a:9e:7e:
f8:86:dd:90:97:53:c9:5d:d5:05:88:33:3e:7e:a6:12:b7:cc:
45:32:be:64:7b:e8:b4:52:f8:32:95:24:ea:c3:06:11:04:cc:
a0:9d:8e:a9:4a:84:7f:1b:32:a5:b0:0b:79:82:aa:7c:25:44:
ad:84:ca:fb:34:86:20:6e:5e:4c:4f:d5:b9:96:65:01:1b:a9:
4e:40:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:45 2026 by rpki-client