
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa
File: 0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa (raw, json)
Hash identifier: i9nVenzK0BGlrTBrWIUW19pAHKaUdEEUFDE3YLPNp8E=
Subject key identifier: 68:9E:AD:B1:D2:A5:1E:3C:17:72:61:55:0A:0B:B4:7C:70:1F:BC:10
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFBC6F9AE62A92089E18C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 72.31.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:bc:6f:9a:e6:2a:92:08:9e:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=2d0cd687-76b4-47ff-8a79-315b154c13c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:b6:fe:c7:fa:87:36:bb:2c:41:fe:29:6d:
a0:d4:33:ca:c8:29:ec:1f:53:32:2b:a0:df:a5:87:
06:93:4b:0d:68:4b:56:46:0f:ee:b3:fd:91:80:5f:
4e:a7:db:5b:70:b9:a3:40:65:53:b1:b2:00:7d:bb:
64:b0:9f:21:bc:db:0e:6b:37:39:fa:ba:09:c3:80:
d9:c5:27:48:76:07:62:a0:8d:54:18:a4:96:b7:87:
a3:28:6f:52:a9:a7:c5:dd:f9:c8:28:55:68:14:db:
d3:cc:14:78:f0:06:44:fa:3d:92:17:52:63:b1:5f:
7c:f6:9e:af:b4:cf:49:08:41:b3:f9:ab:74:49:1c:
d2:5a:d7:a2:9d:9d:5d:32:76:d1:00:80:25:6e:0b:
95:9e:0f:2f:69:01:61:ec:db:71:2c:5f:50:dd:81:
de:c8:cd:58:fa:02:d6:38:20:cc:f6:36:91:a4:f3:
d3:57:33:ee:e8:91:17:df:ac:ee:21:9f:f3:7e:16:
fd:d0:33:7d:ce:31:91:e7:8d:8e:eb:e3:49:0f:2f:
c9:59:a4:6e:60:64:8e:ca:77:7d:39:76:7a:19:bf:
2a:7d:cf:dc:a8:ef:13:50:45:a2:e5:d9:e9:3e:2d:
69:02:68:f9:51:f4:81:b8:8e:9d:59:a6:a7:93:d2:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:AD:B1:D2:A5:1E:3C:17:72:61:55:0A:0B:B4:7C:70:1F:BC:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:15:27:07:c7:c2:e9:38:67:e6:f3:63:c9:47:40:65:c6:82:
db:d1:d0:87:21:9a:28:87:80:01:38:90:5b:62:d6:51:aa:ec:
ee:c8:48:47:5f:ff:35:31:32:61:86:f2:af:ce:4d:6b:a7:c7:
dd:a7:30:a1:c1:1d:30:9e:64:12:04:d9:e0:6b:2e:db:aa:aa:
12:79:1b:2c:d4:71:95:30:05:e9:88:ae:36:5d:7f:90:32:c0:
52:ae:cd:ba:61:9e:0f:b1:1e:b8:64:bc:74:8e:29:e8:76:b3:
b1:5f:f0:57:9a:f2:e6:e3:a8:27:6e:20:59:24:d1:ed:2a:18:
08:a5:d8:7a:30:76:56:ca:5f:a9:7e:f5:eb:1e:e0:82:f2:15:
26:fe:e9:5b:f1:c6:da:cc:a3:61:f7:85:86:17:cc:3d:7c:93:
6c:8b:d2:8f:c9:c4:11:3f:21:5d:49:84:67:d6:7a:c1:90:a4:
dd:49:01:9c:07:7e:a8:11:c0:13:54:36:e8:21:7f:a1:2f:da:
60:d6:06:ba:53:39:02:61:cc:6e:4f:72:e6:9c:93:60:a6:56:
d1:fa:ab:1f:ea:55:c2:9f:7b:f2:7d:4f:94:bb:4c:25:4b:f7:
cf:9a:3b:33:19:dc:53:98:c8:ed:ea:ae:55:02:91:51:24:5a:
16:a9:b7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:44 2026 by rpki-client