
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa
File: 8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa (raw, json)
Hash identifier: d5DmAln+Dcl3YjAEiPbQkkWRy7KKInr6hyfU7cKKxeg=
Subject key identifier: 30:07:13:7A:A8:D9:1B:2E:A8:E6:80:83:8F:DF:76:85:E2:F7:A5:7B
Certificate issuer: /CN=5a060f48-6584-4864-ba80-2bac55c51550
Certificate serial: 010D0C9F4328584D1F4A45B35C77A6B44E432A00
Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 40861
IP address blocks: 216.168.20.0/24 maxlen: 24
216.168.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:45:b3:5c:77:a6:b4:4e:43:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=3b1e7100-bd6e-4eff-88d0-c4e85a5f1fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:aa:f3:cf:ab:13:62:08:dd:d6:bf:9b:03:
64:c2:61:75:1d:d6:5c:51:88:10:37:f5:a0:79:b4:
87:7c:08:85:f5:51:1b:1c:b4:45:5d:84:fe:93:8c:
28:41:92:31:33:ea:9b:fb:81:68:ff:8d:7e:b2:54:
64:10:f1:e6:16:52:54:55:e0:46:33:26:cf:05:8b:
36:cf:4a:c1:15:bc:79:25:f5:cf:f9:9f:fa:ed:e0:
8f:e5:c1:7c:44:83:7d:e4:8c:0a:99:ec:50:91:38:
47:8f:9a:e4:b7:e4:1a:16:98:84:b5:ed:f2:75:fc:
04:bc:32:84:87:44:f7:db:42:21:d1:66:10:68:8e:
89:c3:78:5e:b8:88:94:69:dd:fe:12:18:fc:92:96:
8b:0e:87:f1:40:1e:b8:82:aa:c2:a5:82:6a:46:fa:
d5:b3:7f:af:a4:7d:b7:af:cf:3f:03:06:19:da:d3:
1c:13:f1:79:a2:9b:55:ae:b6:ab:0a:98:a5:8c:b1:
80:2a:70:e1:89:f3:7f:a3:d8:c7:74:1a:1b:b3:6f:
d3:16:50:d7:cd:06:40:9f:73:3b:13:1b:26:14:ce:
b8:1a:96:b0:dd:99:7f:b7:2e:ec:f8:36:7a:b8:1b:
89:a6:f0:b7:0b:54:aa:cd:2d:9f:76:9f:fe:cb:2f:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:07:13:7A:A8:D9:1B:2E:A8:E6:80:83:8F:DF:76:85:E2:F7:A5:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl
X509v3 Authority Key Identifier:
keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:ad:9c:10:fc:cd:1a:f6:be:03:90:27:44:aa:3f:d5:d3:79:
95:0e:fb:35:4d:6a:32:29:18:10:ec:01:da:0b:0b:45:fb:16:
07:79:57:40:a4:8b:95:df:02:93:1f:df:0f:93:08:c7:c2:f9:
e9:71:41:8e:5a:48:ce:60:c6:1c:34:dc:e9:21:82:fa:9f:73:
38:1b:45:7d:a4:12:7a:b1:0b:92:36:70:57:da:1a:1b:c0:8c:
22:dd:a4:a9:4d:cf:4d:31:43:19:a7:f3:37:a9:50:60:3d:8c:
3a:23:a6:23:0d:92:f4:c4:20:66:dd:3a:cb:96:ad:de:7f:64:
41:21:d9:d8:af:af:18:7d:7d:e9:3e:0f:c9:a0:26:24:e3:41:
9a:c9:f6:0c:d1:3a:fa:bc:4d:f9:0e:35:c2:04:d2:97:9d:46:
b9:cf:3b:34:01:e2:ae:6c:3c:a3:58:1f:37:e1:3b:d5:9b:cb:
03:9d:0d:6c:fe:ef:60:23:11:ee:af:83:c2:1f:e6:fa:b7:25:
93:e7:01:31:22:7e:ed:22:fd:47:c3:8d:7f:65:8c:ad:56:ec:
54:e0:f1:06:b3:44:e0:5d:7e:aa:b5:d9:f5:50:e6:c0:d0:9d:
a9:87:2c:50:db:cd:c8:34:e6:49:dd:4e:f0:8e:d9:f7:4f:a9:
93:f0:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:59 2026 by rpki-client