
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa
File: ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa (raw, json)
Hash identifier: l6dGeAVUFPIrL0hC2ho603HRlMOVyAskp/JNrGF18lQ=
Subject key identifier: 8E:DB:B8:AF:3D:69:8B:28:E2:F2:94:35:4C:F3:2D:B3:49:A4:C3:61
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFEF029A8F53C88FA59E40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 72.31.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:ef:02:9a:8f:53:c8:8f:a5:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=be66db5b-d65a-4373-b9f1-6ea11e877cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:d7:14:cf:4f:a5:43:a5:1a:3e:34:2f:c2:
83:0b:8b:88:bf:81:20:54:97:74:56:8a:ed:a9:b8:
99:fc:e0:5c:59:55:83:c7:71:9d:06:b1:bb:c0:15:
0a:03:34:2a:40:a2:8c:bb:8d:38:3f:5c:b9:fb:6e:
7e:e0:61:5e:61:9b:68:01:96:d7:9b:be:c7:08:72:
f5:55:e9:01:b0:fc:1c:df:37:38:b1:f5:f9:cb:c3:
c8:02:c6:82:07:af:17:fc:d1:9a:5f:6f:ed:1f:e4:
51:58:16:b6:81:ed:f5:ac:9b:d5:c9:1e:d4:e8:5e:
b1:af:68:5d:ee:ec:b6:83:62:8d:71:52:c0:e8:8f:
e6:62:22:74:e7:d1:a7:f2:cd:fa:57:f6:bc:9e:44:
12:1d:22:21:12:6c:5a:6a:63:2a:20:da:60:8b:37:
ae:06:ce:df:ef:ce:25:60:14:47:7d:39:58:a6:eb:
75:92:dd:23:2d:97:81:0d:07:ea:f1:1d:03:a5:62:
29:33:ea:76:5e:fc:19:6f:03:98:d4:18:81:ea:0c:
da:d7:ea:d6:2e:61:e1:90:4d:d3:a4:9b:61:be:bd:
25:aa:f5:29:52:ed:ec:05:42:03:8a:23:b4:0b:5e:
02:5b:d2:22:75:78:d6:f1:ed:4c:0d:7e:70:ce:03:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DB:B8:AF:3D:69:8B:28:E2:F2:94:35:4C:F3:2D:B3:49:A4:C3:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:b8:07:f8:0f:7a:17:f9:8f:4c:2c:b5:e6:dc:fb:12:98:14:
97:e2:6f:7d:69:01:16:a5:1c:52:2a:af:b6:23:53:19:56:0f:
3c:0b:22:db:9a:89:d3:4a:54:f2:ac:74:76:44:74:40:91:7f:
56:c4:ef:82:98:ec:f3:d0:35:c3:31:48:f9:84:97:b9:e7:73:
1e:41:0d:93:5e:29:ae:ce:52:52:df:de:34:3d:39:97:95:99:
b5:4a:5c:a5:d8:cf:5b:f6:20:6a:6e:6a:cb:e1:e0:38:0f:09:
3f:81:66:82:db:bd:dd:02:c3:d5:f3:30:65:49:45:79:f3:43:
9f:4e:25:9b:14:9f:3d:c1:78:31:5d:1d:3d:1e:3c:3e:20:8e:
56:0c:39:07:11:67:c9:98:b5:d1:84:13:db:ce:83:24:b5:61:
4d:05:e9:de:90:76:1d:ef:2b:2a:64:78:0e:c5:50:f5:1c:dc:
b1:17:44:ba:fc:00:b8:87:69:a1:fb:c2:af:78:db:54:c0:35:
0b:9a:49:58:55:93:13:e4:24:b1:3a:aa:38:c1:a6:6a:5f:44:
62:5b:e5:e2:86:36:fc:b5:dc:48:cf:96:03:7f:00:c7:97:22:
63:83:f8:6c:57:e9:65:5c:a5:4b:49:54:4e:24:3b:47:1e:9c:
16:e3:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:01 2026 by rpki-client