
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
File: da715157-9227-3031-a55c-e864ec645b9b.roa (raw, json)
Hash identifier: 5lEYhMaOx5jlb4w7aLCvDLkPhlJ6x6wotbEm2yLK+mM=
Subject key identifier: D1:6A:19:5D:DE:FF:86:DA:1E:66:5E:4E:EC:6C:4F:C1:58:D1:9D:E6
Certificate issuer: /CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
Certificate serial: 010D0C9F4328584D1B1A104BFF7A57EEDADE2E50
Authority key identifier: 4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 611
IP address blocks: 138.73.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:10:4b:ff:7a:57:ee:da:de:2e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=12ab303c-4c28-4b47-b693-0803f3cc8766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:bc:43:e7:60:cc:87:d2:be:cb:c1:c3:f3:
89:f0:d6:d6:82:07:fe:4c:94:fc:41:e1:64:3f:84:
bc:b8:be:49:e7:b1:12:14:bf:3f:57:ab:e1:ea:89:
ad:ad:d1:fb:30:b6:cb:c1:e5:9b:82:a6:b3:f2:55:
1b:fb:bd:b6:28:eb:60:96:3a:80:1e:80:95:5b:9b:
23:49:a8:67:64:3f:1e:df:39:55:fc:a1:94:86:ee:
46:86:1e:cd:d8:cc:8a:ab:8d:67:a6:c2:e6:ad:a3:
95:6f:04:34:11:3b:2f:72:83:99:84:29:2c:3b:ab:
fc:fc:e5:39:ac:1a:63:82:c8:08:a1:98:64:7c:a6:
14:10:43:06:76:39:0a:25:fa:de:94:69:bd:95:9f:
c1:e7:42:f8:d3:b1:a7:c8:c0:42:a9:cd:53:53:4c:
3d:e3:3f:63:5a:f4:6e:ba:2b:27:2c:5c:f1:52:f7:
7a:b8:de:db:f1:06:c0:12:61:7b:f9:23:6c:57:29:
01:a2:18:b4:99:f0:95:55:56:0f:07:72:c6:56:13:
86:09:0c:ca:90:ae:1d:02:7c:a3:f2:b3:30:65:e5:
df:dd:b1:61:c1:c1:5b:6c:34:53:12:b9:e2:c9:26:
c7:3c:92:b8:d2:7b:3d:67:63:21:2a:cc:60:34:90:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6A:19:5D:DE:FF:86:DA:1E:66:5E:4E:EC:6C:4F:C1:58:D1:9D:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.crl
X509v3 Authority Key Identifier:
keyid:4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
sbgp-ipAddrBlock: critical
IPv4:
138.73.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:a1:86:16:d8:83:07:5e:52:aa:3d:52:1b:10:38:80:3e:45:
51:39:9f:f1:26:46:6c:10:05:e2:7f:01:13:65:ff:4d:11:f3:
3c:0f:60:8b:e0:94:a6:80:df:34:ea:55:21:e4:14:0c:b5:d2:
1d:e8:92:af:94:03:7c:0c:45:2b:29:88:60:db:89:7f:32:cd:
e4:d5:49:f3:93:68:87:0c:68:05:d1:c9:d6:39:fd:89:c8:76:
4f:b6:74:97:b6:98:b7:d4:a8:38:f9:43:58:2f:e8:13:c4:77:
d2:d9:d1:b9:52:98:17:93:91:93:86:ae:d6:6d:29:b9:00:70:
91:a5:c9:37:5c:17:04:6d:d0:7c:99:bd:0c:4b:3c:1b:17:84:
3f:d1:e6:0f:c6:14:07:63:f9:44:4d:0d:6c:23:97:23:99:4b:
0e:0a:d8:2d:90:06:2c:a9:ee:62:b9:51:98:0e:41:92:a8:98:
f1:88:11:dd:c4:c2:88:78:45:ca:83:ca:8b:20:03:da:25:9b:
06:22:f2:b9:e7:45:d1:1c:18:81:fd:0a:73:7b:17:c4:37:0c:
5a:92:5b:53:6e:af:cb:9b:5a:7b:ef:22:2e:53:2e:88:5a:58:
2b:90:f1:43:e1:4a:ba:b0:df:11:0f:c4:14:d1:55:79:dc:4a:
8d:ee:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:21 2026 by rpki-client