
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
File: a6e045d3-3586-3be0-8f1c-ee95cb321013.roa (raw, json)
Hash identifier: 3GUMmhCGWUyyS6bDrJCYOQDRwa/cKhE+zPWDGX+SQZo=
Subject key identifier: DB:27:17:B3:12:62:61:2F:D9:1E:FC:F9:26:7C:6F:C2:5E:BB:C2:7C
Certificate issuer: /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial: 010D0C9F4328584DA6B02403A5F3E7F21F966E80
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
Signing time: Tue 28 Apr 2026 01:00:24 +0000
ROA not before: Tue 28 Apr 2026 01:00:24 +0000
ROA not after: Mon 27 Jul 2026 01:00:24 +0000
asID: 5065
IP address blocks: 174.136.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:b0:24:03:a5:f3:e7:f2:1f:96:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Validity
Not Before: Apr 28 01:00:24 2026 GMT
Not After : Jul 27 01:00:24 2026 GMT
Subject: CN=85bc2d10-4927-4a18-977e-a9a374affa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:28:a7:74:1e:30:d1:37:65:87:29:bf:3c:
0c:e3:7b:f6:07:be:29:fe:1d:aa:2d:93:99:01:90:
56:a2:95:16:e7:ec:d1:ea:b0:e2:b2:d4:f6:63:aa:
bd:38:fd:2c:4f:1a:1d:22:59:fe:5a:83:17:05:ee:
00:91:dc:10:75:75:1f:de:8d:84:d2:96:7a:99:b1:
db:23:8f:57:34:0a:e2:6f:b3:1d:8b:63:8d:b0:12:
f6:93:6e:05:4f:e8:01:14:76:5e:21:14:39:46:c5:
8b:d7:19:39:72:c3:96:cb:b3:ba:8d:66:9c:fe:8d:
df:4b:44:55:8e:12:38:13:9e:4c:97:47:d6:dc:43:
61:f7:03:a2:c4:a1:5c:3a:e4:ff:38:99:e7:f0:10:
67:3d:c3:bb:ef:de:b0:10:14:38:b0:08:1e:1d:15:
ad:77:69:15:e8:9e:d3:b6:08:18:ec:a1:65:20:c1:
93:34:f4:e5:d1:64:c2:c7:40:08:c8:d4:e0:89:72:
78:a1:c8:4d:db:e1:6d:23:9e:47:e3:82:52:9b:a5:
99:67:5e:b1:7c:ab:19:8d:56:58:91:cc:b0:07:e3:
21:5a:2c:5c:d3:1a:6b:24:2f:35:4f:a3:f3:e2:37:
d4:0a:50:2b:5c:12:f9:1a:eb:b0:a9:fd:8f:da:d1:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:27:17:B3:12:62:61:2F:D9:1E:FC:F9:26:7C:6F:C2:5E:BB:C2:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
X509v3 Authority Key Identifier:
keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:03:71:94:ad:78:0d:b5:3b:6e:ba:39:f1:d0:2e:95:09:d9:
fd:3a:e1:93:bb:f8:8c:5c:ee:94:21:f8:a3:35:51:3a:34:c7:
5a:2a:cd:4f:1f:7b:51:41:30:4c:1b:49:39:54:75:0e:aa:30:
f6:a4:f8:96:2c:a9:cb:4e:fa:ef:52:9a:13:c1:6d:99:bc:92:
bb:15:d6:22:67:af:67:2d:3f:46:d4:b8:08:29:3c:c3:0e:35:
89:af:a4:5a:cc:60:85:c2:99:f0:32:2e:a2:93:e1:e2:4d:b7:
d8:dc:99:8a:f3:67:70:f6:1d:ab:08:9e:5a:da:36:08:1d:29:
02:64:a4:84:f2:ac:c4:d1:03:b3:bd:fc:63:51:c1:a4:e2:cf:
cd:84:c5:94:28:f3:c4:b1:6d:01:7c:41:6d:46:6f:94:6e:8a:
d8:fd:2d:f7:48:1b:4b:7d:3b:d9:f2:bb:13:7c:43:c5:3a:dd:
73:c1:65:37:a1:b8:de:3b:72:39:74:25:7a:52:ae:6a:14:44:
ed:29:f7:60:17:8d:fd:ad:e7:1e:f5:43:1c:c0:5f:d6:60:3b:
3a:f8:00:0f:52:96:5c:06:13:58:68:06:b2:a2:54:cd:e2:15:
e7:af:ba:64:5d:a0:42:b9:65:e9:02:eb:52:21:4a:fb:86:b1:
c0:fb:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:55:16 2026 by rpki-client