
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/9fb0202b-1f2c-30d0-8296-5e0deaf1c048.roa
File: 9fb0202b-1f2c-30d0-8296-5e0deaf1c048.roa (raw, json)
Hash identifier: reK93ZgAV6wxdA2oRSEOu+mWyHfyMULz+B/fSHlVRUc=
Subject key identifier: 7D:89:86:B4:34:FA:C3:24:E9:70:6D:0D:50:74:4D:00:8C:84:17:D0
Certificate issuer: /CN=7572dc10-0f90-44cf-ad9d-a07f934047c2
Certificate serial: 010D0C9F4328584D44FA334D230B2C0C0A3BDFB0
Authority key identifier: C1:68:53:EB:8B:92:E4:61:7F:25:BA:97:53:4E:16:1C:86:6E:E8:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/9fb0202b-1f2c-30d0-8296-5e0deaf1c048.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 55222
IP address blocks: 162.211.96.0/21 maxlen: 24
2605:1240::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7572dc10-0f90-44cf-ad9d-a07f934047c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7572dc10-0f90-44cf-ad9d-a07f934047c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:33:4d:23:0b:2c:0c:0a:3b:df:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7572dc10-0f90-44cf-ad9d-a07f934047c2
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=81b9b0ef-a401-4027-9177-824822658b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:4d:c7:c3:8d:42:ad:f5:c0:7f:19:82:e9:
e8:f8:18:77:d3:b2:f3:54:fc:59:38:c5:f1:78:2d:
fd:88:2c:16:8c:f8:94:fc:f5:4e:c6:ca:6c:1c:cd:
2c:a1:71:57:37:fc:d2:1c:18:35:a6:72:4f:1f:bf:
20:e4:62:ae:f5:1b:2b:f3:81:2c:c3:6f:c7:fd:f7:
e6:64:d1:dd:be:c7:e0:e4:d0:db:f3:61:83:2f:5f:
89:d8:fd:57:4c:6d:b9:5c:ee:a9:41:1a:95:72:f2:
00:38:90:c7:d2:48:07:fe:36:c0:67:f3:6c:9e:11:
fa:6a:92:48:97:c1:90:70:2f:77:fe:f1:9b:05:94:
62:78:d3:d8:33:aa:80:8b:85:2b:0b:62:d3:0c:e5:
b9:f6:19:34:58:40:f6:62:46:07:b3:b5:e7:b8:0b:
87:78:61:6a:30:81:37:0c:d1:b5:12:3b:aa:6c:9b:
e0:8e:3d:57:53:d6:14:be:fe:16:c1:d8:6e:97:1b:
2d:4c:84:31:eb:6a:74:c8:b8:43:23:9e:07:ac:5c:
b8:a3:70:af:4a:50:96:68:8d:69:2b:54:22:3c:e0:
d6:d5:4d:08:a8:ac:6b:10:c9:4d:7e:22:4f:ca:28:
aa:d5:e3:6d:e2:7a:67:73:9c:ba:b3:8b:55:f0:a1:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:89:86:B4:34:FA:C3:24:E9:70:6D:0D:50:74:4D:00:8C:84:17:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/9fb0202b-1f2c-30d0-8296-5e0deaf1c048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7572dc10-0f90-44cf-ad9d-a07f934047c2.crl
X509v3 Authority Key Identifier:
keyid:C1:68:53:EB:8B:92:E4:61:7F:25:BA:97:53:4E:16:1C:86:6E:E8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.211.96.0/21
IPv6:
2605:1240::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:44:a4:e2:a5:3c:20:b3:7a:1d:4b:59:53:a5:32:0f:c4:e5:
0a:2a:63:14:f8:c5:d6:8f:09:5c:ab:03:97:83:f9:7d:0d:44:
af:e1:9f:ca:ae:c3:de:99:3c:b5:06:1e:77:9d:27:47:b4:40:
74:83:91:85:45:99:a5:a2:19:28:e4:03:a5:f0:43:28:32:7b:
36:37:9e:57:76:24:c1:94:17:7a:5e:92:d0:16:37:b5:26:47:
80:43:2c:95:ad:5a:44:56:6e:5c:21:24:cd:4a:41:51:e4:fb:
c3:c1:a3:56:59:a7:77:2f:ea:c0:fe:4b:c2:97:57:fe:10:54:
81:ea:7d:da:56:22:b0:70:fe:87:ef:4d:48:d7:a3:6c:d3:52:
ed:99:8c:5b:03:23:97:d5:0e:e1:5b:2e:1d:4e:25:95:cd:fc:
41:e7:4f:92:e2:19:00:d6:3d:94:75:d8:18:0b:e9:86:01:0b:
2e:5a:aa:cc:c4:4b:76:a1:52:85:e8:2d:e5:03:c4:2f:88:6b:
cb:55:aa:de:99:04:7b:27:71:7f:07:9f:da:b9:78:00:e2:81:
2e:a2:58:2e:c2:a4:d9:06:77:c8:4c:4c:da:f8:35:75:d7:e4:
04:b2:eb:f4:f4:87:e4:5c:4c:33:2c:e0:d3:17:91:fe:a6:7d:
26:9e:05:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:44 2026 by rpki-client