
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa
File: c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa (raw, json)
Hash identifier: MRIYVjVG1he9yzIk161t/YO85DUl2zOMW/k0CAp/aZ0=
Subject key identifier: 70:58:BF:C9:FE:72:E7:4E:38:6A:F9:A6:DE:B0:ED:87:1B:5D:98:47
Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial: 010D0C9F4328584DA6B01480390C24783AB68400
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa
Signing time: Tue 28 Apr 2026 01:00:24 +0000
ROA not before: Tue 28 Apr 2026 01:00:24 +0000
ROA not after: Mon 27 Jul 2026 01:00:24 +0000
asID: 13807
IP address blocks: 24.72.216.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:b0:14:80:39:0c:24:78:3a:b6:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Validity
Not Before: Apr 28 01:00:24 2026 GMT
Not After : Jul 27 01:00:24 2026 GMT
Subject: CN=23d05d9a-2f66-49ea-a9c5-b73ea39b194d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:55:31:c2:b6:f9:71:e5:ea:34:63:d7:5f:
0d:2b:57:11:6e:71:0c:a1:f6:0c:8e:c9:f8:12:c6:
9e:c0:2a:46:a0:0a:03:41:f6:3a:47:75:c4:e6:f4:
c0:a9:77:c3:9e:c0:32:fb:94:4c:22:ee:1b:6b:d1:
39:0e:94:45:2b:9d:ff:cf:d0:a6:89:26:6d:5b:aa:
20:bd:c4:81:0a:73:2e:fc:5a:1e:e1:0d:0d:36:ba:
7f:fe:d0:b9:53:a1:df:37:4c:d9:de:2e:1f:bf:e8:
01:6b:e0:f8:c8:28:28:75:5e:44:80:79:76:b0:6d:
bf:6c:f8:fc:6a:32:03:c0:a0:82:a2:d8:72:12:07:
26:25:5c:ad:ce:52:e1:b2:e0:81:4c:00:2d:ef:b7:
69:7a:1a:48:8e:64:42:ce:4b:99:9d:36:98:8c:dc:
da:7d:bb:43:4d:00:95:59:f0:71:b3:94:13:41:9c:
95:67:93:f2:f5:6f:19:02:58:dd:4f:9e:0f:2e:e3:
71:ad:d2:42:c4:a5:27:2c:d1:05:17:c8:65:86:e4:
68:f4:3b:b5:59:65:16:d4:65:42:00:c1:5d:64:18:
20:d2:2d:0f:ef:5c:bf:00:22:af:43:b2:aa:69:8b:
4a:2e:44:68:20:f5:97:85:af:91:c9:fb:08:87:7f:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:58:BF:C9:FE:72:E7:4E:38:6A:F9:A6:DE:B0:ED:87:1B:5D:98:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
X509v3 Authority Key Identifier:
keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
sbgp-ipAddrBlock: critical
IPv4:
24.72.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:cf:32:56:44:10:1f:b3:7a:34:e3:b9:1f:65:26:6a:3a:94:
ce:d5:50:85:e6:1c:56:84:77:34:07:e9:cb:72:7d:bf:c3:a3:
31:b3:18:a7:7e:55:0e:32:0f:eb:08:23:0f:69:f5:56:3e:83:
93:11:79:bb:d5:f2:27:83:97:8c:ad:e8:53:b0:81:6f:aa:fd:
2c:f0:73:6d:c8:83:d9:36:29:91:c3:df:ad:67:5c:1e:e1:cc:
49:3d:ad:14:6c:b7:c3:52:fa:db:d2:a5:2e:0d:df:0d:3d:12:
a7:55:14:6f:82:cf:3e:65:0e:56:a6:0f:1d:86:f0:9a:70:d1:
04:fe:b9:ca:10:7e:ad:5d:2b:c4:2b:a2:64:a1:ef:b0:3c:19:
02:2a:45:52:63:e9:4b:ee:69:79:28:4f:02:de:42:f3:c3:76:
2d:18:e5:df:3a:fb:ae:4a:22:48:01:69:2c:8b:50:2b:97:e0:
35:b4:d9:0a:8f:6f:87:13:73:72:82:36:59:93:9f:97:57:e3:
48:a1:14:89:40:50:10:74:a3:68:92:e0:87:cb:70:d0:21:b1:
01:48:e6:eb:a6:2e:95:dd:f6:1f:3b:6c:7a:be:57:b0:04:6c:
85:24:4d:f1:79:99:43:ad:53:1c:6d:a6:ce:ad:ed:02:98:7d:
5d:68:de:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:12:16 2026 by rpki-client