
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0f8be0e-785d-312d-a92a-2977e2cf31cd.roa
File: a0f8be0e-785d-312d-a92a-2977e2cf31cd.roa (raw, json)
Hash identifier: MZSnm+O+/F5SYRC+lYpFbL5tZxIWDeeiqAgi+zrv5B4=
Subject key identifier: 7A:3D:0F:90:E5:26:DB:D3:3C:08:BA:55:62:8F:3D:59:9D:D8:45:FE
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D39CF703471D5DE326B978A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0f8be0e-785d-312d-a92a-2977e2cf31cd.roa
Signing time: Fri 20 Mar 2026 01:00:32 +0000
ROA not before: Fri 20 Mar 2026 01:00:32 +0000
ROA not after: Thu 18 Jun 2026 01:00:32 +0000
asID: 274195
IP address blocks: 209.61.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:cf:70:34:71:d5:de:32:6b:97:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 20 01:00:32 2026 GMT
Not After : Jun 18 01:00:32 2026 GMT
Subject: CN=70f14588-a0b1-4ad3-9e5e-8d00cec95ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:45:d3:e6:59:3b:8d:d0:c1:e9:ca:47:07:
79:ac:c8:d0:5b:66:38:cb:15:54:dd:b9:4f:98:ad:
b8:2b:dd:53:be:e0:15:09:fd:1c:6c:03:6b:38:db:
4a:e8:44:6a:32:52:c2:f7:a1:07:21:41:74:6a:f9:
60:42:3e:00:d6:eb:e0:6b:ac:eb:3a:60:05:61:7b:
34:4d:93:3b:f1:ce:89:1a:88:43:ea:19:3a:87:41:
89:a9:22:ba:c8:88:15:12:91:58:d6:7a:b4:04:47:
35:d1:05:bc:da:c9:c1:78:c3:2e:c3:d5:2c:33:12:
22:9d:79:ac:3d:91:8c:ae:88:48:44:b4:22:55:c7:
d9:a9:d6:34:95:c3:bc:24:7d:be:fd:86:7c:99:37:
50:4b:ec:77:ef:2a:11:02:e1:25:9d:e2:7d:bd:b9:
cf:c3:ae:1f:4f:99:97:5c:31:3a:69:4b:86:0b:43:
b7:86:f3:41:72:d1:10:85:c7:e8:d9:d3:8d:6a:d8:
55:d0:7e:f9:78:51:ce:45:73:04:97:9d:d7:2c:1b:
f2:15:f1:00:37:23:d6:ad:35:e9:bd:1f:aa:4f:db:
ff:84:71:d5:d1:8b:70:0e:82:88:04:f4:02:1d:48:
71:1f:96:7f:b9:fd:ca:1b:0b:53:b8:af:70:32:80:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3D:0F:90:E5:26:DB:D3:3C:08:BA:55:62:8F:3D:59:9D:D8:45:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0f8be0e-785d-312d-a92a-2977e2cf31cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
209.61.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:23:c0:ee:24:0e:b9:f6:12:ed:fd:bb:61:69:f8:67:c3:04:
5b:e5:84:da:8f:95:78:d3:4d:44:8b:3f:56:7f:c9:44:4b:4f:
2a:b8:01:29:a8:a0:fe:2a:79:66:86:79:6b:68:8a:00:55:33:
6f:11:00:e4:b3:0a:0c:50:45:33:05:c4:44:7d:b5:a3:47:15:
2e:4f:b7:94:de:2c:ee:f9:d0:69:ed:5d:23:3d:86:69:51:4e:
19:dd:7c:40:0b:28:8e:77:91:1c:6e:d9:39:3b:c0:2c:aa:fe:
5c:0a:6b:95:35:bd:a3:6f:e8:e9:43:a3:53:1d:70:e1:3c:04:
a8:7f:52:03:02:22:a9:03:38:5a:83:b6:0a:de:60:9a:36:2f:
32:03:a6:38:4d:92:c2:ae:f2:b4:1c:2a:90:91:01:83:17:13:
8c:6a:a3:84:a2:08:89:b8:c8:4f:1e:79:8c:60:c0:57:21:b4:
e8:db:b3:03:cd:3d:6e:79:d4:96:9f:34:b6:0a:be:4b:d3:49:
4b:90:8d:a6:e5:06:b5:43:e0:5a:08:3c:41:c2:f0:18:61:ca:
e3:a7:66:fb:cb:8a:5b:8a:0a:2b:4a:a3:6b:dd:6b:c3:a9:f5:
66:3e:0a:95:39:19:59:76:71:50:16:de:e3:a7:91:77:10:a6:
d7:39:a5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:51 2026 by rpki-client