
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6f041c87-2976-3a92-aa35-7ec58c944191.roa
File: 6f041c87-2976-3a92-aa35-7ec58c944191.roa (raw, json)
Hash identifier: jEWlsk+GnxniaFYBCOTWKouHtEFUmETmKUAK06XUqpw=
Subject key identifier: D2:1F:2D:E2:8D:B2:B3:9A:F6:DA:93:4C:32:BB:BB:64:72:7A:B8:7A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584D40CA77C21D36314D6AEA5320
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6f041c87-2976-3a92-aa35-7ec58c944191.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 10838
IP address blocks: 65.28.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:77:c2:1d:36:31:4d:6a:ea:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=67521e1c-e306-4327-9983-4e9c6d1bac5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cd:e1:b1:6f:ce:a5:d6:a2:c4:5a:8d:ce:25:
46:21:4f:3b:9c:8a:ff:7b:47:00:4e:13:70:83:6a:
48:dd:32:c3:4f:dc:76:64:e2:61:5e:32:b2:c9:ab:
7e:67:18:bb:bd:4f:44:45:a6:b2:85:b2:8c:0c:2f:
72:11:13:0e:85:43:2c:95:b3:00:2f:32:8e:b6:69:
9c:1d:7b:c5:13:0d:a4:7b:fe:53:30:3e:6d:8c:23:
4b:a5:3e:78:04:c1:bc:f9:79:42:b1:1c:1c:1e:44:
2c:81:d7:51:89:f1:56:23:81:2d:ba:07:19:8e:74:
74:db:b0:2c:14:61:67:1f:8b:44:dd:7e:46:13:16:
cc:bb:5a:52:72:dc:4d:de:9f:27:9e:dc:73:6c:dc:
52:b4:47:c6:51:60:af:8a:5c:e8:69:12:cb:88:89:
37:f5:10:36:6f:c7:26:47:3a:aa:57:15:5f:7c:82:
1b:e3:a7:c4:e0:35:8e:0a:e6:03:a5:fc:4e:60:7a:
d2:96:26:5a:d0:d7:cd:8a:d1:f5:a3:be:41:02:d8:
30:45:d8:ce:f7:79:d0:f2:80:bb:f4:dc:75:35:43:
50:ab:a1:8d:4b:89:9f:d2:4c:c1:29:ba:2c:a0:70:
88:5a:8d:e4:2a:39:55:f0:75:7f:4e:4a:2e:44:7d:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1F:2D:E2:8D:B2:B3:9A:F6:DA:93:4C:32:BB:BB:64:72:7A:B8:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6f041c87-2976-3a92-aa35-7ec58c944191.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
65.28.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:a5:37:b7:ce:d9:5f:2f:ba:4d:e6:fe:f9:66:d4:fc:58:db:
f8:d2:6d:0f:4c:bc:85:0e:40:a1:43:e5:d5:5e:2e:04:73:dc:
6b:af:50:6d:2b:18:50:ac:e3:ed:89:3f:a2:57:d5:22:92:65:
b7:87:fd:32:bd:62:fa:44:ab:67:71:63:44:1d:69:e2:6b:a1:
24:71:51:01:26:4b:1c:6c:bd:f3:c9:e0:fc:4f:0c:14:bc:30:
7a:2c:bf:f9:7e:db:34:f1:c0:9c:96:b9:a5:9c:59:4b:7b:b5:
2a:d3:58:81:2d:ba:f0:cd:70:b2:9a:d1:82:5f:ba:8a:59:cf:
f7:a2:d6:48:30:79:98:0e:93:53:c0:4c:67:4c:8a:7b:93:64:
1e:d2:65:19:19:a4:12:f5:3e:00:42:fb:46:85:7e:57:22:d7:
df:6a:1e:b6:0e:d3:aa:32:78:f0:a9:4d:ab:52:ed:30:ed:45:
ec:87:42:9e:34:ec:e8:3a:51:86:99:70:db:59:29:fe:05:b8:
42:e6:35:19:19:51:1c:03:91:61:62:d6:5a:31:73:95:28:10:
8c:4d:2d:b8:6c:26:7c:80:92:34:2c:50:31:c1:81:00:de:d1:
b3:ef:21:35:2e:fb:44:c9:d8:ca:b0:d0:a2:91:5b:bd:2f:2d:
49:f1:e6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:59 2026 by rpki-client