
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa
File: aa7afe85-abe8-3328-9407-af87c4793bd8.roa (raw, json)
Hash identifier: ljdAfnyNjy1P3blu1Sf+ML0btFE7JT59eMibNISJlio=
Subject key identifier: B7:2D:CB:77:7C:23:37:03:0F:BA:90:A1:91:61:E6:56:1C:0D:A4:BE
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFEFEC3EB3D61CC5E3AD40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 75.112.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:ef:ec:3e:b3:d6:1c:c5:e3:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=b2b56eb7-9ee3-4d08-9acb-3768c1c8f41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:34:8a:29:95:ec:d5:66:dc:42:4e:4e:8f:
7a:04:69:f9:21:33:ec:ed:91:00:f4:cd:98:4a:f7:
61:c1:58:de:57:6d:3d:09:ed:60:05:fd:5f:43:f4:
33:3e:c8:8f:90:97:30:15:5f:29:37:7a:fd:39:8b:
f0:94:e9:6c:57:36:77:ac:23:22:07:2a:0e:46:62:
e9:df:4d:b0:14:31:27:67:5b:25:45:b0:2a:19:ca:
42:f4:c4:9b:9f:75:aa:c2:a9:7a:fc:c8:6c:07:e4:
ef:9b:1e:a3:eb:ef:a0:72:37:c2:f2:e4:9a:7c:4c:
ea:0a:82:45:e6:f4:ba:1f:10:60:fc:36:97:f2:16:
41:65:e6:29:66:d1:ca:6f:fa:e1:73:e5:cb:e3:de:
90:2b:5f:30:13:6d:00:e1:93:e2:66:1b:5f:01:e7:
1c:b8:8d:e5:72:30:fd:18:b3:a1:07:24:c9:7e:dd:
47:b5:fb:8a:1a:a1:af:eb:40:46:8b:62:8d:ae:07:
92:f2:bf:d6:11:d8:82:ab:db:7c:4c:38:d9:ff:26:
8a:05:f8:cc:22:b9:7c:35:89:43:6c:dc:b8:9a:cb:
e8:bc:24:b6:16:34:d1:bd:54:d3:99:48:ca:2f:b1:
79:f2:8b:67:9d:48:38:e4:57:b7:ff:22:43:4c:6d:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:CB:77:7C:23:37:03:0F:BA:90:A1:91:61:E6:56:1C:0D:A4:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
75.112.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:f5:51:d2:62:b9:6e:d7:dd:25:18:50:25:01:8a:58:f5:14:
11:c3:ce:86:22:35:a3:73:0e:25:a7:0a:7c:6f:b0:58:01:a5:
27:d7:10:1b:77:af:1a:50:5e:f8:01:4c:d7:2b:0b:ee:cd:ed:
03:d3:ea:01:9a:ba:ac:41:ff:99:65:a4:24:20:86:74:c8:89:
a9:ab:03:ad:37:62:6c:cd:63:93:ad:21:22:ae:10:13:59:eb:
65:73:28:4c:94:52:fe:cf:56:11:0e:69:69:31:c7:85:29:f8:
2d:47:ba:39:3e:5b:97:34:8b:b9:84:da:2d:06:35:29:38:ae:
f3:73:79:8c:09:f0:27:2a:e8:90:72:23:0f:5a:61:b3:cc:0b:
30:fa:d5:cd:77:6b:35:28:c5:7a:9a:b0:db:6b:57:4a:18:b2:
3c:9f:e0:bb:6c:cc:11:b4:25:2b:eb:ce:b3:b3:31:0d:22:f2:
49:d5:0f:7d:e5:6f:a8:e5:87:bf:8f:e7:ce:03:b9:a1:c8:73:
fa:17:c7:a0:12:fc:37:ed:21:c6:3b:b1:df:4e:8f:d7:22:05:
37:4f:dc:46:07:1b:cf:79:c2:05:86:7e:b2:92:88:02:1c:d9:
b0:bb:1c:00:05:12:09:96:18:94:76:4e:06:d3:b4:38:8d:6a:
8d:68:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:46 2026 by rpki-client