
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa
File: 0d00392d-06ad-38f3-b449-d981399ddfac.roa (raw, json)
Hash identifier: UQXVgHkfRe8RGM++25WNmg3O3nUEkji8Kzo62H2tfSo=
Subject key identifier: 29:E8:FA:8B:28:BF:73:EE:9F:10:71:64:C1:09:B3:45:C1:0B:79:60
Certificate issuer: /CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
Certificate serial: 010D0C9F4328584D95F00CBE2C28BC0B22E3F000
Authority key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 557
IP address blocks: 64.45.64.0/18 maxlen: 24
65.18.0.0/18 maxlen: 24
65.18.64.0/19 maxlen: 24
65.18.96.0/20 maxlen: 24
141.114.0.0/16 maxlen: 24
204.197.0.0/17 maxlen: 24
207.166.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:0c:be:2c:28:bc:0b:22:e3:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=c3d548f1-44e8-4d56-a5d9-3a93ce041f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:44:cf:48:63:23:78:32:95:ad:62:11:06:
25:6a:08:b9:3c:d9:7b:c3:18:df:8d:c6:a8:5a:e1:
1c:9e:41:26:90:87:9a:b3:30:3f:1a:2a:84:ca:0e:
16:46:fe:d5:12:ad:97:03:bb:a8:d0:0d:20:97:a7:
42:bb:7e:af:90:f7:ff:3a:99:1d:b3:81:4e:79:e2:
20:cc:47:78:00:44:a6:16:72:8f:35:43:b9:e9:07:
3a:fe:41:76:5d:39:ed:86:d6:b8:4f:97:ea:0e:9b:
d7:ce:ad:b3:b1:45:be:c5:fc:07:10:29:e9:17:5d:
3b:ac:73:79:f0:3a:c2:34:d3:ae:03:45:0e:3c:dc:
63:7b:3d:93:58:56:bc:c5:39:4b:24:a5:f6:ba:28:
02:06:dc:ad:c8:43:37:35:4d:c8:b1:c0:96:7c:3f:
a9:46:0f:4b:9b:ed:95:39:69:fb:cd:0a:b9:2b:34:
2f:33:1e:5f:23:1f:22:fa:29:cd:b3:fe:f0:3c:73:
d6:a8:db:1f:f4:b0:50:6c:79:39:ef:58:e0:93:31:
97:1e:de:29:37:54:7b:a5:76:aa:58:17:53:47:ef:
b0:4b:27:c5:4c:9f:4a:af:ca:38:30:20:c3:2a:0f:
51:49:5b:a3:c3:2d:54:69:a4:43:20:70:8e:66:3b:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E8:FA:8B:28:BF:73:EE:9F:10:71:64:C1:09:B3:45:C1:0B:79:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl
X509v3 Authority Key Identifier:
keyid:B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.45.64.0/18
65.18.0.0-65.18.111.255
141.114.0.0/16
204.197.0.0/17
207.166.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f5:3f:11:ab:6c:84:98:7d:16:75:7a:f4:e1:7b:13:e7:07:
d8:af:c5:94:60:63:37:9c:c0:f9:ea:28:d4:6b:d3:31:20:e3:
09:b6:2d:c8:83:26:b6:76:73:fb:27:6b:83:1c:bc:8e:71:84:
d2:14:42:41:bc:d9:ec:08:91:4c:08:67:af:ae:54:68:d9:43:
47:00:9f:40:6a:81:c5:b7:14:70:c3:eb:cc:2a:bf:92:23:85:
98:5c:2c:b4:09:79:6f:0e:4b:be:86:0f:18:ec:20:86:c3:c7:
af:df:e9:05:cb:09:38:57:0f:b4:ec:7d:8a:0d:43:2a:8d:35:
3e:af:dc:5c:d7:5b:b2:0d:4a:01:2e:0b:bc:58:c2:fb:cf:d2:
a6:1f:7a:90:cb:72:b5:a8:c0:48:9f:3b:ff:68:b2:43:04:4e:
0a:bb:e7:2b:73:13:fd:86:b8:cb:ae:a5:7a:3f:d8:b0:f6:50:
ac:30:95:6f:06:fc:c3:41:24:9f:71:29:d6:18:5a:b0:01:93:
df:0d:ff:13:8b:9e:48:d6:2a:dc:d5:6e:46:4d:8d:b4:e0:69:
39:0f:e8:ba:9b:f2:d0:12:a9:a7:7b:22:82:ad:01:d1:25:1b:
3f:00:3a:b3:ca:c7:a3:38:df:d1:01:ff:df:f6:32:ec:ad:d5:
60:39:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:20:06 2026 by rpki-client