
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3604c7a4-0186-3386-bb22-0f23dc58f476.roa
File: 3604c7a4-0186-3386-bb22-0f23dc58f476.roa (raw, json)
Hash identifier: X1c5ZpJn1wpoAH+UcMONtEd1qxzxFrmIwURH1b4j6DQ=
Subject key identifier: E1:59:86:72:D3:B2:0D:F8:E0:02:29:9D:10:4B:91:4C:ED:5F:E2:33
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFB7D85578FE944B001A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3604c7a4-0186-3386-bb22-0f23dc58f476.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 19157
IP address blocks: 23.86.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:b7:d8:55:78:fe:94:4b:00:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=b4ba4424-c022-45a1-8cb2-c7811c6f85b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:4c:13:f6:c4:78:76:2f:12:67:be:11:02:
c3:98:a4:7d:6a:12:75:a6:74:15:17:35:16:6d:9c:
a7:6d:4e:d4:66:c0:ed:f3:01:16:d4:c8:0d:20:e0:
47:2b:4d:0a:63:e2:4f:e3:7e:21:45:a8:5d:41:16:
19:1d:14:a6:68:c2:95:7e:e5:e2:5c:b9:51:e4:13:
15:fb:1e:14:38:f2:33:11:07:9f:ac:29:e8:53:2d:
a9:ee:27:51:b5:43:a3:b6:67:b0:96:29:ab:8a:db:
b4:ff:00:c3:59:36:e2:b3:58:a6:a6:de:78:51:4f:
a4:2e:c9:f9:b8:2b:ea:83:07:b7:0c:73:cd:45:43:
36:aa:5c:3f:04:95:67:f9:1f:db:1a:79:52:dc:9d:
6a:19:45:c5:0c:74:0d:a5:37:74:48:20:60:d7:c1:
06:be:51:5a:59:10:c5:f1:44:f8:1b:c9:83:df:10:
71:12:a5:a0:e8:ea:7d:d2:d3:ed:8a:db:8a:f2:30:
b0:6a:5c:0e:09:53:2a:db:e7:41:c9:d5:8a:b5:19:
fb:a1:f2:d5:18:9a:fd:db:5d:da:42:d4:58:27:f7:
cc:28:08:91:52:f6:bb:43:ff:a5:49:77:cd:37:36:
0b:68:8b:18:1a:24:54:1e:a2:f1:3a:9d:4d:81:ce:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:86:72:D3:B2:0D:F8:E0:02:29:9D:10:4B:91:4C:ED:5F:E2:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3604c7a4-0186-3386-bb22-0f23dc58f476.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
23.86.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:6c:bf:a6:c6:87:07:ec:c8:21:ea:b4:53:a6:5e:a8:70:c1:
b9:88:d0:d8:3a:23:4f:28:cd:57:94:1c:4a:26:c3:43:76:8d:
47:25:37:84:c6:0a:24:01:79:6b:79:ad:28:d7:5b:2f:1f:40:
8a:7d:2c:1b:06:de:b8:93:9b:05:6c:b7:6a:01:76:f1:2f:65:
bc:7a:a5:5c:32:3d:f5:97:95:12:37:51:8a:a3:94:cf:f3:2a:
f8:ac:c6:53:eb:fd:31:cf:54:de:aa:1d:75:e1:6b:9a:b8:78:
5e:ff:3c:46:8c:80:44:88:d0:59:75:c1:2b:bb:d7:94:59:83:
9c:5c:88:fb:2e:b6:15:45:f9:9f:c8:4d:de:ab:05:1b:95:e4:
65:a9:88:ab:d1:1d:46:5a:24:57:d0:63:99:bb:3d:f6:0b:d6:
f4:73:10:55:70:6a:ba:af:42:83:71:44:89:3f:89:b9:92:58:
7b:1e:69:4a:b9:a5:09:46:14:53:b2:a5:43:4c:76:ea:36:69:
fd:0f:71:61:a7:4b:68:2b:43:b3:99:b7:e0:52:8e:41:4f:42:
d2:12:35:ab:f1:bc:94:d4:d8:15:e6:ec:96:8f:29:01:84:b2:
be:ba:6a:6b:ef:57:cc:08:af:b0:70:33:d8:d9:c7:ff:2d:27:
77:d3:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:21 2026 by rpki-client