
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa
File: a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa (raw, json)
Hash identifier: m3lFCmKJVYBsrUCpTlgSWInquUfB58y4MjtsMKgfyQQ=
Subject key identifier: 98:48:89:DD:06:58:34:E7:E3:B1:A4:C9:45:DD:9C:1E:BF:8D:5B:AE
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFE8B06A05700038E1F720
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 20115
IP address blocks: 172.220.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:e8:b0:6a:05:70:00:38:e1:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=bde85e1c-8ef7-4dc1-b9a6-198f974266a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:34:a1:b7:c0:0b:9d:f2:bd:35:ae:38:e0:b3:
dc:00:5d:cc:c1:8a:2c:d0:86:1b:2f:7a:82:66:3d:
38:b3:6a:db:cd:fd:91:71:f0:cc:38:58:d5:cd:a3:
0a:c7:2b:35:db:f1:fa:60:25:93:b1:48:63:ec:ea:
d7:82:5f:10:03:b4:71:56:81:1a:47:88:e7:44:d2:
9c:ff:2b:fe:5e:52:69:01:5e:92:ba:72:70:aa:d5:
84:09:bb:1f:4d:43:83:66:87:d9:88:b9:53:4f:9b:
29:44:a4:23:05:a2:58:26:1a:80:a8:1f:76:12:48:
dc:0b:cf:b9:c1:6a:ef:cc:f7:8a:1d:e3:de:cc:e6:
b5:a7:9a:bd:f7:09:26:bf:64:22:62:4f:23:f4:ab:
c4:d8:ce:6a:06:ec:4a:91:42:63:06:1d:4c:e5:8d:
29:57:84:fa:94:28:e1:33:ae:88:59:bb:ea:8b:55:
41:f9:ae:05:47:6a:2e:4c:70:0b:b1:e1:58:46:d0:
fa:66:a1:3d:f9:db:f6:92:15:50:50:0c:8d:ec:23:
99:fd:82:d9:c4:f6:19:6c:0c:b3:bc:e8:10:0d:8e:
9e:ef:07:68:9c:77:f4:eb:b8:6e:49:11:b8:27:71:
b6:f2:6c:f4:54:86:c3:04:b4:6a:4a:57:c9:9c:d8:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:89:DD:06:58:34:E7:E3:B1:A4:C9:45:DD:9C:1E:BF:8D:5B:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.220.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:db:48:fc:bc:9e:ad:10:bb:12:d0:ac:9c:f6:4e:f6:aa:c2:
65:52:f0:f6:98:11:82:58:f2:54:c4:ad:c3:cf:31:39:34:13:
b2:5d:3d:26:66:73:db:5d:5e:1a:5c:1e:f7:50:64:bc:1a:13:
6f:d7:4f:40:82:98:54:e4:13:1f:06:42:99:c8:16:82:0b:ba:
d3:ac:43:f9:4b:02:22:60:05:32:5e:35:4c:8e:33:8f:cc:a2:
15:b4:89:32:44:b4:76:22:f3:71:a4:ec:23:b2:eb:18:f5:dc:
93:cb:c6:7d:6b:27:d1:e4:1c:5e:04:fc:81:56:2e:eb:00:7e:
f7:9f:2f:29:8e:fe:02:25:1f:4d:22:c9:38:84:e4:47:30:a4:
65:b8:41:77:2f:3f:e6:72:e5:e2:dd:ec:a1:e3:d5:11:7f:85:
11:2e:00:2c:8c:2b:89:0d:0d:26:d6:a3:f5:0d:8f:b5:a5:7d:
5a:86:83:c6:41:57:1b:45:2a:35:83:df:ec:47:c4:fb:5a:93:
1a:d5:0f:cd:5c:18:8f:db:06:08:cd:a6:ed:41:57:54:30:df:
d0:71:f9:22:c9:88:d9:eb:dc:e9:cd:c6:c8:e3:d3:a4:c0:23:
b6:a8:a5:ab:a0:c9:0e:e7:db:a0:66:02:25:a8:45:9c:7b:ef:
e1:06:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:53 2026 by rpki-client