
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/fa55ef3b-2da3-336f-b84b-03c819b5d17d.roa
File: fa55ef3b-2da3-336f-b84b-03c819b5d17d.roa (raw, json)
Hash identifier: SNMffC6v8JlaDy86h8Ou1AhasGi6ZUoojLh6DXAwdBs=
Subject key identifier: 44:10:BC:1A:FA:0A:8D:CA:EC:84:01:79:46:AA:DE:B6:AA:DC:FB:99
Certificate issuer: /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial: 010D0C9F4328584D297A3E3E2CD62B08E7921958
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/fa55ef3b-2da3-336f-b84b-03c819b5d17d.roa
Signing time: Sat 14 Mar 2026 04:36:01 +0000
ROA not before: Sat 14 Mar 2026 04:36:01 +0000
ROA not after: Fri 12 Jun 2026 04:36:01 +0000
asID: 11911
IP address blocks: 160.254.20.0/24 maxlen: 24
170.61.240.0/24 maxlen: 24
170.61.241.0/24 maxlen: 24
170.61.242.0/24 maxlen: 24
170.61.243.0/24 maxlen: 24
170.61.244.0/24 maxlen: 24
170.61.245.0/24 maxlen: 24
170.61.246.0/24 maxlen: 24
170.61.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:29:7a:3e:3e:2c:d6:2b:08:e7:92:19:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
Validity
Not Before: Mar 14 04:36:01 2026 GMT
Not After : Jun 12 04:36:01 2026 GMT
Subject: CN=44d41b17-8fd0-4860-8ba7-a81b72de5bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:60:ab:bd:44:c7:13:3c:b1:4b:80:ad:bf:63:
a5:c2:92:0e:17:06:be:ff:3b:e3:f7:a3:6d:28:b6:
72:4d:11:16:12:cb:15:c9:ab:a9:e5:b1:58:5a:cd:
21:5b:f0:73:32:76:e2:51:a9:c3:c1:8d:bd:9b:41:
5f:f2:01:45:a1:6c:dd:e5:c3:6d:09:bd:39:62:3d:
78:a2:08:a9:3d:91:28:8a:62:26:a1:97:a2:a5:80:
4f:f5:87:23:f1:85:a2:94:49:c5:47:f0:b5:c4:2f:
df:ea:e3:6b:e1:82:3d:8e:4f:f8:00:43:87:a6:c8:
0b:5b:28:3e:4e:4a:e0:96:7f:8b:6f:a8:a2:b4:80:
5a:74:62:1d:6c:b2:30:bd:6a:4f:78:3a:fb:64:96:
12:a6:1a:65:bf:5b:a6:e5:b1:1a:6e:83:96:09:25:
cc:73:88:ed:3e:92:54:eb:62:54:42:95:73:ed:be:
2e:07:45:ab:ea:a3:e2:2a:bb:30:0c:55:73:e3:fe:
48:2f:7c:7c:a0:94:30:99:42:d1:4d:1b:ed:f0:42:
17:8c:27:3d:1f:74:05:32:9f:06:57:db:7e:53:f6:
dc:8c:0c:77:8e:51:49:85:df:44:5a:70:e7:07:02:
01:f2:f9:68:1c:f4:ab:99:90:c0:84:7b:0d:00:57:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:10:BC:1A:FA:0A:8D:CA:EC:84:01:79:46:AA:DE:B6:AA:DC:FB:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/fa55ef3b-2da3-336f-b84b-03c819b5d17d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
X509v3 Authority Key Identifier:
keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
sbgp-ipAddrBlock: critical
IPv4:
160.254.20.0/24
170.61.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:6f:e6:8a:43:9c:04:92:8b:c0:a7:33:12:2a:0f:61:96:51:
53:58:40:79:f1:75:19:dd:f2:8e:01:ed:02:82:21:fd:d7:a1:
e8:14:9f:1b:50:f0:78:f5:83:6f:6f:95:1e:a1:99:0f:a0:ed:
b2:cd:8a:95:eb:a9:3f:3f:15:7e:4e:e5:c7:6f:7a:bc:00:40:
5a:f3:8b:6c:42:c6:d5:e8:30:4b:f1:fe:01:c2:23:f8:6a:49:
65:34:62:4b:e2:ac:35:15:a1:d1:e7:59:a6:b9:f9:33:50:c5:
17:44:ad:ef:e4:bc:03:98:9f:02:cc:23:54:75:f1:e6:dd:8f:
84:30:6f:84:2d:43:eb:ae:14:47:73:d8:d4:0e:ba:0b:6b:5a:
8e:5b:c3:70:5e:88:d9:9c:68:9a:0a:cc:8c:61:8d:b0:03:b2:
5b:c3:c5:37:5e:38:dc:b9:0e:6e:21:d5:5e:8e:92:74:06:3b:
8e:f4:7e:8a:bf:eb:93:f9:05:f3:07:8d:d7:4e:57:b4:fd:2e:
81:91:4b:8a:ab:88:e8:d0:60:74:aa:11:e8:4f:11:fb:85:88:
3e:3e:69:cd:b0:aa:b2:84:ca:58:db:7c:8a:6a:73:c8:75:93:
e2:62:32:f1:56:4f:0d:4b:b8:0f:a5:4b:ba:1b:ad:f4:a1:64:
f2:f0:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:39 2026 by rpki-client