
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/caa87cfa-19df-3c8e-932b-663847ce2cfe.roa
File: caa87cfa-19df-3c8e-932b-663847ce2cfe.roa (raw, json)
Hash identifier: u2oBIoC7RN4zTsYX9wZwOH2+IRsFwKcgAit2wcxZa1M=
Subject key identifier: DB:D9:69:92:A4:86:1E:4F:BF:CB:6F:4D:EA:02:9F:BB:28:43:29:05
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584D24E0EF5DFD56CF64ADE6A600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/caa87cfa-19df-3c8e-932b-663847ce2cfe.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 36492
IP address blocks: 136.22.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:ef:5d:fd:56:cf:64:ad:e6:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=1baec56e-cf10-4789-8792-e2fcd9094b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:43:e8:42:14:de:6f:8f:6f:5c:fd:bd:48:
1d:ab:a5:60:47:7f:b7:a1:24:17:2f:e0:84:ad:80:
f3:35:94:8f:b8:5c:dd:c2:25:63:9e:48:37:8a:5d:
a0:6b:8f:eb:f0:a4:85:4d:36:56:c8:01:42:b6:3f:
66:45:e8:d3:f9:d6:17:96:90:40:31:a8:41:e1:e2:
5c:41:c9:38:c4:e6:49:ca:f1:d3:0d:33:52:a6:b3:
ec:06:9f:10:74:c3:cf:15:d0:42:20:8f:80:d2:d5:
b6:19:fa:8a:d9:28:85:ac:cc:55:43:8e:27:7a:f1:
50:ce:60:af:17:d3:5c:ed:47:be:d1:3e:6e:86:fe:
2e:f6:9a:5a:d5:c4:9c:47:ef:a9:6c:1d:f7:45:29:
c9:ff:26:cf:0f:1d:bb:4b:e6:6e:c9:da:16:e3:26:
18:bc:1d:88:b8:d2:8f:f4:19:de:a4:80:a2:ab:66:
7b:92:2f:0e:30:7a:61:27:c4:f8:d1:80:65:be:df:
5d:44:3b:9e:db:30:93:01:53:ce:3c:fa:da:11:82:
c4:a5:27:23:7c:e1:08:61:5b:53:72:1e:7c:4f:19:
11:b6:a2:a2:4c:8e:9f:df:6b:a7:2f:b9:a1:81:6b:
81:e7:7e:af:f1:08:94:c6:6a:3c:8d:ca:7f:54:cc:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D9:69:92:A4:86:1E:4F:BF:CB:6F:4D:EA:02:9F:BB:28:43:29:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/caa87cfa-19df-3c8e-932b-663847ce2cfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:5f:c8:21:64:da:08:0c:7e:4d:c2:c0:5a:91:16:72:b3:50:
b5:0b:3c:d0:da:12:0f:a0:c8:5a:3b:4f:4f:0f:ba:5d:aa:2c:
68:a5:5c:40:05:c3:31:30:01:00:a7:98:7c:18:b5:77:d6:8f:
47:f5:77:34:8e:d9:bb:f7:90:85:ab:86:bb:24:67:e1:19:dd:
1e:17:d3:f0:82:ad:4f:4a:a8:01:30:e0:d0:6f:1c:25:c7:22:
e4:17:05:c8:37:cc:07:7b:48:3a:bb:0c:b9:04:91:59:06:31:
00:f4:c6:2e:52:ac:5a:68:55:b2:6d:e9:29:57:85:4a:ea:4b:
18:f4:60:ee:f0:91:c0:55:34:1f:c6:bf:e1:f4:65:ae:a3:7f:
ea:24:3e:84:91:24:87:cc:8c:e5:3e:67:ee:a5:97:45:7f:9f:
2d:fe:b2:bf:a2:5b:10:08:81:dc:12:97:bd:59:c1:4b:69:d0:
96:26:85:b1:e5:b4:53:00:4f:6d:8d:22:6e:20:f8:82:99:0b:
f0:3e:81:d6:83:e0:7c:d6:ad:87:fe:2e:40:1c:fc:88:0d:9d:
bf:c4:8b:fb:8c:23:26:2a:14:bd:5d:f3:25:bb:76:63:e0:8e:
a9:47:d3:60:08:d8:9e:f4:e5:3b:f7:8c:72:43:e4:0a:d0:a6:
ec:7c:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:11 2026 by rpki-client