
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa
File: a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa (raw, json)
Hash identifier: Q0ABedTKfuFY9PiNu3pdLsNjE7MABV7szlSYC8w6olQ=
Subject key identifier: ED:D4:55:15:91:5E:8A:EF:02:3B:DF:5F:B3:16:CC:A4:E0:3B:6A:37
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFF24FBA81B57BBC00DF80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 71.44.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:f2:4f:ba:81:b5:7b:bc:00:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=cc51d204-9825-4083-b314-d73ee8b74653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:8d:35:16:d1:c6:d9:7b:cf:77:a0:65:11:
07:ef:25:d3:38:f6:e1:62:23:a2:1a:df:29:68:c4:
97:95:1a:4a:a0:81:9e:18:7a:93:7a:f3:9b:ce:14:
10:3c:50:cb:21:61:e9:0e:09:24:52:e8:5e:1d:53:
1d:dd:2a:b1:d1:fc:42:91:9f:52:95:74:96:7a:3e:
a7:d8:d4:4a:17:18:21:47:6a:8e:69:be:96:ae:25:
8d:43:a2:ad:92:be:b0:df:b0:1b:71:38:74:6c:e7:
14:f4:94:0e:98:49:68:cc:b9:e5:6f:0f:a8:67:50:
64:ec:22:9a:81:36:22:d9:5b:ed:99:c8:47:fa:b2:
a0:08:e4:fe:bd:5f:85:17:a8:a5:9b:0c:e8:d9:85:
27:b2:1a:46:bc:4d:f8:c7:d0:1b:78:f0:e4:b1:87:
ff:86:7c:58:11:bb:f3:1e:c1:fe:23:47:b6:08:bb:
c2:50:6f:5e:e2:4b:7b:3d:01:f5:c3:8e:c9:81:e2:
48:a8:c5:3d:26:ca:c2:34:5e:3c:ff:df:a0:1c:56:
4f:7f:0e:02:6a:46:82:84:9d:2e:33:95:3a:87:5a:
89:62:99:b9:21:04:5e:0f:9f:58:58:c5:22:af:75:
48:78:e8:ea:4f:0b:6f:06:c0:ff:23:a1:30:23:bf:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:55:15:91:5E:8A:EF:02:3B:DF:5F:B3:16:CC:A4:E0:3B:6A:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
71.44.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:5c:aa:69:69:31:54:ea:87:a2:80:1b:90:c0:b7:29:6e:a0:
c5:37:6a:ca:4d:8a:f6:25:04:1b:b2:96:e4:dc:e1:7e:ea:26:
d7:7d:e1:e8:51:fa:02:8b:65:e6:86:46:4e:fa:29:97:b7:b8:
39:9a:e7:c5:4e:a3:e3:96:a8:b3:5f:26:5b:38:98:b2:9f:ac:
72:67:c6:5b:11:94:6d:14:52:ed:d1:44:ab:71:6b:df:a9:3e:
0b:74:ae:6b:1e:57:ef:10:a7:77:a6:23:1b:79:f8:f2:68:96:
0f:6e:d2:83:3e:0c:ba:e7:68:76:ac:1d:d4:7b:2a:ed:50:5d:
d2:22:09:02:04:73:6a:85:0c:5d:82:c0:af:b6:41:3a:77:ae:
21:a3:f2:a0:6b:b2:7c:13:47:fe:e9:aa:de:4c:87:f8:5a:be:
70:c8:bb:bd:79:39:b7:8c:7b:69:6a:32:94:44:00:bf:f7:f6:
e6:c5:c9:d3:2f:cb:29:e6:2c:72:ef:f6:0a:58:6a:cd:8b:5c:
84:dc:c4:20:ad:ef:82:b5:12:f0:fb:49:8f:17:8c:31:52:58:
c3:cd:1a:42:6a:28:ac:fb:0a:cc:12:61:d9:43:ea:82:0b:5b:
39:16:d8:9f:1f:d0:36:4a:e3:88:70:ba:66:a5:9a:88:3e:36:
d3:d2:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:47 2026 by rpki-client