
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa
File: abf67299-9e87-34a9-9b48-9475fd549597.roa (raw, json)
Hash identifier: DQKxNlhYJiy5/ATlRMCb2GIi9+lz05YieLhqgd2gE1E=
Subject key identifier: 7E:D6:8A:C0:6A:1D:CF:89:FB:E1:28:97:10:AB:28:41:33:53:21:B1
Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial: 010D0C9F4328584D386A46B20C3120E4F27B4680
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 398143
IP address blocks: 96.46.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:46:b2:0c:31:20:e4:f2:7b:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=6414986d-60d4-498a-811a-b964e8f7e11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:92:33:f2:c7:2e:75:8e:1f:aa:3a:a3:07:
6a:90:8f:44:61:08:42:bb:d2:f9:0d:8c:83:c8:a9:
a7:4e:14:e9:16:34:c1:44:14:7d:ba:8e:21:d3:f4:
2e:b4:f9:ab:3d:14:a7:84:db:91:40:f8:03:7b:2e:
0e:a7:70:12:5a:15:b3:bc:2d:e0:5e:b8:f0:11:40:
04:e2:91:23:93:36:a6:24:a8:1b:86:a4:c7:50:2a:
3e:65:b2:fb:a7:9e:64:32:5a:95:74:16:82:f6:e2:
36:65:47:8d:1e:3e:20:a0:4c:f2:b0:f2:61:55:e7:
a1:ed:ea:7c:99:26:41:c5:e1:eb:a3:4a:4c:88:e2:
9d:02:5a:fa:48:19:87:59:83:b2:c7:08:ca:8b:f0:
84:63:00:f7:bf:53:5c:15:23:37:76:bb:6c:86:ba:
4d:ca:a7:b3:9b:30:d6:ba:a6:62:8e:85:78:53:0e:
66:40:8f:f4:fe:c4:df:0d:10:09:c1:f8:41:0a:23:
f3:18:82:06:e7:df:0d:ef:64:63:36:c2:75:a8:66:
ed:64:e3:bb:2f:18:93:60:c1:f9:fa:ae:58:be:15:
98:6b:c8:b1:01:d8:96:2f:8e:df:72:da:ca:ab:63:
49:6e:c6:2e:a3:48:ce:e3:5c:f1:79:92:ec:c0:14:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D6:8A:C0:6A:1D:CF:89:FB:E1:28:97:10:AB:28:41:33:53:21:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
X509v3 Authority Key Identifier:
keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
sbgp-ipAddrBlock: critical
IPv4:
96.46.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:03:4c:df:94:25:d8:07:fb:5d:d5:ea:e8:72:60:3e:30:5b:
66:44:6c:22:a8:a8:50:53:12:12:52:91:5f:b5:b5:8b:0e:94:
4f:a6:df:7d:de:11:f3:fa:6c:92:d4:86:ae:a1:83:42:4c:7b:
2a:9f:c0:18:3d:81:09:40:f7:14:12:07:9c:7e:d1:44:09:1f:
b1:2a:8b:f2:c8:5f:bc:72:c2:2c:3d:ef:69:68:45:d9:31:39:
b0:45:c8:04:e3:47:a6:28:ad:1b:92:f3:36:81:46:1e:6b:30:
e8:d2:67:16:5f:27:9b:93:32:03:91:96:4b:bd:a2:4c:f0:a4:
14:0b:af:91:ef:74:05:02:f6:b2:34:54:15:b8:0a:c2:12:e1:
f0:7e:fe:42:35:83:85:1c:8e:c4:d0:ef:c6:22:73:e7:54:a8:
55:da:e6:a1:b8:16:2a:f8:b4:de:05:ba:ff:a4:13:ea:45:67:
46:62:83:e6:d4:70:8f:20:2a:9d:1f:56:39:fe:6a:ba:a4:6d:
70:f0:f2:ab:c6:4b:27:3d:26:66:43:ca:23:14:8a:76:58:92:
14:b5:9b:80:4d:5c:44:98:4f:9c:c9:8c:d4:96:e5:b4:38:43:
7f:29:1e:62:86:cb:f2:e9:32:11:ca:8e:0a:7d:c6:01:65:44:
0d:a5:b6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:53:08 2026 by rpki-client