
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa
File: ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa (raw, json)
Hash identifier: KRCI58kjjbGpHPflTwuz5DpCgZzuhVd9dEinOVSxhJU=
Subject key identifier: 3E:DC:5E:2D:4C:EF:75:78:96:82:6A:38:AE:D8:4A:33:8B:A6:B5:F4
Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial: 010D0C9F4328584D3DFFAFCE88D8C26E97310380
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 14618
IP address blocks: 216.24.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:af:ce:88:d8:c2:6e:97:31:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=c57699ca-6b20-4302-b44f-8f4490d23808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:6d:13:db:e8:22:2c:04:a2:e2:5d:e9:1d:
e0:01:2d:dd:74:4f:a0:51:1e:d6:41:f8:4e:8e:d3:
f6:01:f5:6b:5a:35:66:1c:3d:e4:70:a8:46:66:3a:
19:bb:b7:e4:f8:6b:e0:3f:5a:ca:69:9c:58:39:ba:
4d:d2:92:5d:7a:75:e3:02:8e:68:2b:bb:0d:40:6f:
b5:3f:d4:bc:1e:23:c7:4c:a5:23:44:38:dd:12:2a:
b4:3c:76:e8:52:ec:16:12:64:c9:a0:23:84:c7:4b:
e6:84:23:31:fb:c3:6b:a0:2d:0e:58:23:09:92:13:
0b:fb:32:37:9f:8f:24:c6:6c:bc:e0:f0:56:29:7b:
46:64:89:09:7d:da:00:39:49:d4:9d:9c:af:d5:33:
6c:f6:61:22:9f:80:f1:ca:34:c8:b4:db:77:d0:a9:
5f:ff:97:15:f8:61:da:3f:d4:27:6a:ec:44:1f:e0:
3f:84:83:54:10:21:7f:36:a1:ec:22:67:96:b6:63:
02:bd:77:cc:a1:91:16:8d:26:03:5d:a9:ee:8f:16:
ad:1e:71:d5:cc:c6:34:38:e8:a3:cb:c9:2c:e7:7c:
a5:16:21:44:4b:af:82:81:d2:4e:a0:0f:7b:3e:e5:
64:fa:78:dc:74:74:f1:ed:5c:f3:7a:e2:83:68:d3:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DC:5E:2D:4C:EF:75:78:96:82:6A:38:AE:D8:4A:33:8B:A6:B5:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
X509v3 Authority Key Identifier:
keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:01:ce:21:44:b4:c7:49:1d:aa:9b:6f:f0:b0:e4:93:9f:aa:
a9:d4:eb:e8:04:60:41:fe:41:29:1d:66:5a:18:dc:87:58:70:
2c:ca:40:17:20:fe:5d:2b:98:18:df:76:41:96:73:f4:02:a1:
6f:cf:ef:29:46:cb:77:84:b6:99:43:59:77:96:75:46:f0:44:
84:89:1c:0d:5b:97:7d:14:92:54:c9:9d:05:83:1a:06:1c:f0:
3f:09:a9:5f:9f:4e:c6:21:32:c2:8b:4e:56:80:e0:49:b2:89:
f4:75:5b:40:70:eb:6c:24:93:ec:39:da:2e:91:ba:cf:b8:6f:
40:6a:5c:d2:60:4d:fa:74:1a:8e:e6:6e:b8:98:3f:da:56:f3:
f4:6f:8e:4b:0d:e2:50:9f:3e:f7:31:a5:26:e4:bb:74:41:63:
f5:cc:c8:d7:c4:58:6a:c3:9f:53:19:a5:b6:4e:67:72:3a:72:
da:f7:81:23:3e:e2:12:dd:07:bc:d7:75:f1:ea:2e:41:63:2a:
1c:b2:d0:62:e1:cc:5c:8a:61:98:39:88:8f:3e:e8:00:c5:06:
7b:26:97:4f:e2:fc:48:54:c3:28:7b:62:a0:b5:e9:ba:5d:04:
28:fe:61:41:cd:0d:c4:57:f3:92:a3:37:01:f4:9b:fc:47:f6:
24:4d:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:24 2026 by rpki-client