
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc4af5e-a96b-3f1f-bddf-d083422110ee.roa
File: cfc4af5e-a96b-3f1f-bddf-d083422110ee.roa (raw, json)
Hash identifier: CF522AvXqwlSOzZOf92sp+9+YDdR6hUPtBn6plF/KgQ=
Subject key identifier: 47:F0:DD:D3:3E:10:08:A5:B0:5A:9F:50:80:34:1D:94:05:99:A2:1D
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFB8758D7177189A935C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc4af5e-a96b-3f1f-bddf-d083422110ee.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 20115
IP address blocks: 174.87.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:b8:75:8d:71:77:18:9a:93:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=8c7cd540-959c-4cb9-ae14-498d7d74bee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2d:8f:82:08:1f:6c:c6:95:f4:82:84:09:3d:
5a:2f:d4:ee:d7:97:a7:0e:83:fb:98:60:dd:ef:e5:
0f:1a:a3:15:38:24:70:0d:11:b1:c8:2e:17:88:d0:
49:6a:53:9f:04:97:73:e8:78:36:c6:36:2a:ed:4c:
35:e6:b5:fd:6d:53:85:27:f4:b3:2c:58:06:85:94:
e0:1e:82:a4:ea:90:08:80:30:43:45:84:fb:ca:24:
7a:4c:e2:87:98:77:b1:f5:39:43:fc:97:c3:07:e7:
b6:3d:96:d8:9b:eb:1d:78:80:9a:0d:a3:86:03:dc:
89:85:fd:a7:ef:b9:98:3d:02:b7:44:22:2a:b6:a7:
ce:18:3f:dd:f6:70:02:a6:49:d9:af:77:db:85:23:
33:7e:4a:4c:86:4d:53:52:14:bd:81:dc:b9:95:93:
54:7d:16:e9:ec:1e:22:b6:a8:fd:7c:90:0c:46:38:
ba:bd:51:3d:44:6f:e4:d2:e0:e7:1c:3c:15:89:57:
fe:09:09:ce:33:9f:ce:a7:c5:92:99:8a:d5:9e:10:
a3:2d:18:a5:84:27:36:85:34:16:ff:37:84:f3:5a:
63:04:ac:29:51:89:a0:fa:1d:9a:45:97:7b:c3:84:
42:de:12:13:a5:20:64:f5:9e:b9:89:24:23:54:e9:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F0:DD:D3:3E:10:08:A5:B0:5A:9F:50:80:34:1D:94:05:99:A2:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc4af5e-a96b-3f1f-bddf-d083422110ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
174.87.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:cf:26:86:5c:d2:a1:a0:cb:18:8a:26:df:ea:cb:22:ce:9d:
62:c7:a8:7d:7c:48:c4:c5:8c:b7:6e:6d:de:2e:7d:49:53:7b:
ba:9c:0a:64:e1:7a:63:64:7a:28:26:fc:62:ed:d8:93:35:bb:
b8:46:00:2c:77:f6:5e:67:08:5f:0e:f4:c1:10:99:60:0d:13:
1e:0e:9f:d2:ec:77:bb:a8:4c:b8:b1:4c:69:15:e3:1c:05:75:
26:89:90:ad:26:5d:33:6c:24:22:f7:e9:a2:15:52:4e:6b:c4:
02:64:c4:6f:b4:a7:a8:0c:f3:57:70:63:11:9f:b2:97:c2:6b:
30:9e:d4:b7:2f:04:ec:f0:6f:91:6b:fd:ec:52:cf:9b:f9:8d:
6c:86:a2:b5:19:97:6e:9b:1f:98:1d:07:29:75:71:98:06:50:
c2:de:6b:2b:88:30:15:a4:93:ce:f2:ab:cc:78:c5:1f:4c:b9:
78:04:f4:6c:07:36:31:e7:20:ff:db:21:4d:96:8f:b4:bb:27:
47:44:f9:5c:69:0b:c7:33:ad:bf:de:8f:12:8f:c0:fc:ac:af:
fe:1a:ee:18:e1:fd:35:09:d3:2a:a1:a8:c9:6f:a8:37:77:4e:
3d:4d:ca:41:52:dd:b9:f4:13:a8:b9:02:e8:e6:f5:57:6d:11:
40:7d:49:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:22:54 2026 by rpki-client