
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa
File: ab844670-ed3c-32c6-85dc-3ed39dee509e.roa (raw, json)
Hash identifier: qXe+xsXrkVC/SqjNyKjPK2rqI8EH5ti+n47/ws16jx4=
Subject key identifier: 8B:FD:D5:1D:77:C4:5F:5F:0B:BB:FA:75:4B:AF:7D:C6:91:16:15:35
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F4328584D1F4A1396842D81492D4E2480
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 13445
IP address blocks: 144.196.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:13:96:84:2d:81:49:2d:4e:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=fa7aa95a-bf34-49f1-9542-6d433d028ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:4b:82:48:a6:7f:e3:43:e5:1c:8e:b0:bf:
76:95:dd:81:6f:eb:42:b9:07:89:0b:9b:14:7e:3e:
fe:be:12:14:19:26:ee:77:a3:fb:09:53:43:b7:78:
50:72:a1:f3:3f:2c:1d:01:f6:74:dd:e8:10:c4:0a:
e7:56:b4:9b:71:62:d0:50:f7:dd:14:ff:29:e1:24:
bf:68:bd:18:63:09:9a:d6:8b:2f:0b:79:5d:c9:f1:
3e:25:51:4a:4e:8d:43:20:f9:6c:8e:5e:0d:b2:93:
9f:c6:70:f9:7d:fb:b3:6f:1e:b5:8d:d8:27:e2:56:
14:2c:2c:1a:32:e6:74:7e:c5:c1:40:4c:63:7f:4f:
90:f6:9c:54:f1:e9:5a:04:ee:13:d0:41:73:e6:7c:
6b:b9:04:68:59:15:ed:83:76:68:dd:c5:dd:82:e7:
8b:1b:2c:56:f9:1d:7e:99:5d:1e:19:ef:d4:1b:82:
f0:49:22:9f:dd:64:e1:4b:0c:d1:da:30:46:82:97:
cb:57:ef:88:82:ad:44:53:b2:a7:18:a9:31:56:07:
36:09:ae:da:fb:80:a7:ed:71:a0:28:5d:a7:36:32:
42:8d:e9:78:27:4e:06:2d:30:b4:56:57:16:1e:82:
47:dd:15:13:bd:ba:75:d4:59:e0:f8:19:96:da:6c:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FD:D5:1D:77:C4:5F:5F:0B:BB:FA:75:4B:AF:7D:C6:91:16:15:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
144.196.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:fc:dd:bf:8b:cd:24:2b:1d:75:75:27:07:c2:b3:dd:a8:7b:
cf:1b:d2:0d:a0:8d:a4:8d:5a:05:32:9a:e3:f2:cf:80:65:61:
00:36:16:d1:ad:a5:34:b6:7a:f1:51:25:5a:14:6f:16:67:b8:
7b:67:ed:ca:69:04:27:bc:01:56:cb:65:fd:89:dc:4d:83:68:
a8:53:f4:d2:14:27:0d:5f:2e:82:41:34:54:51:23:77:e9:33:
37:d4:9b:08:e9:09:29:6e:d6:11:05:5a:e1:c5:0f:2d:ac:60:
96:ee:af:98:7a:48:6e:6a:22:26:a7:da:ec:7e:f5:96:a1:04:
4d:cc:27:77:9f:67:42:0a:68:53:70:4d:80:9c:38:fc:03:fa:
57:e9:9a:0a:0b:1e:81:69:af:94:c3:b1:6e:e5:ac:0b:ed:8a:
2e:a2:12:84:2a:31:39:5a:56:5f:68:61:93:bf:ac:e4:45:c3:
64:d5:e9:35:a2:d9:39:e3:bd:7b:e5:5f:4f:65:5a:50:84:9d:
8a:ed:aa:bf:fb:44:bb:c3:39:fc:0a:a9:98:75:3e:24:44:e6:
86:df:8c:f6:ea:40:3a:b2:ff:a8:ad:48:47:2e:7f:b5:ac:8d:
25:5b:33:bf:60:d0:c9:b6:28:fd:87:6b:c6:32:1d:17:c7:7d:
30:6d:41:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:02:29 2026 by rpki-client