
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa
File: 9b933b8a-dbdd-3487-9952-d09b51c4e640.roa (raw, json)
Hash identifier: ip3TQXNzW2pNzO7p3F7GuRBXeMoXixhdyahpzuk6F9s=
Subject key identifier: E3:BC:F5:5B:BE:37:95:CE:CC:24:3F:CF:FA:75:FB:12:63:82:33:CF
Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial: 010D0C9F4328584D746FC0D11B3F6B88BB14E800
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 20454
IP address blocks: 69.160.36.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:c0:d1:1b:3f:6b:88:bb:14:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=dc508b2f-940c-4c81-ade3-3c2a776b3111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:1c:1e:f4:ab:6d:c7:88:df:e0:f9:1b:36:
07:6f:24:40:3c:98:53:5a:32:7c:68:b2:94:7e:9e:
5d:01:bd:98:b6:95:75:98:15:80:19:26:b5:fb:a6:
2d:65:5e:ba:57:6e:c3:bb:1b:71:58:53:74:00:ee:
69:29:69:9b:f4:c4:2f:d1:a2:89:1f:4d:ff:1e:91:
7e:4a:9b:72:77:8e:61:ba:93:e7:0b:eb:49:d5:08:
8a:c2:fd:a4:5b:ea:58:16:14:65:26:cc:5b:0b:fb:
5b:3b:5e:68:a4:91:e1:a6:50:b5:ca:d5:58:09:71:
03:dc:b2:c8:57:20:bd:12:d4:f1:93:70:b8:7a:d4:
f9:ec:c3:10:66:88:f9:50:17:63:8d:c3:7f:83:cc:
41:7a:6a:ca:b3:9e:86:32:1b:83:24:48:13:ce:92:
52:96:04:14:12:ee:36:e0:c5:04:6c:0a:7f:02:80:
6e:f4:db:f6:98:69:37:46:23:5f:2d:3a:6e:70:8f:
df:41:9b:0c:26:83:ce:a9:29:5c:28:b7:2d:90:0e:
19:62:21:f8:78:95:45:71:98:f9:db:18:2d:7f:31:
40:4d:ef:0c:f9:2d:88:7f:11:30:a0:9e:fd:96:01:
42:e8:18:e2:63:67:88:59:8c:ba:d8:ef:e3:7e:03:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:F5:5B:BE:37:95:CE:CC:24:3F:CF:FA:75:FB:12:63:82:33:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
X509v3 Authority Key Identifier:
keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
sbgp-ipAddrBlock: critical
IPv4:
69.160.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:ce:3a:1f:ad:62:6d:dd:4f:ee:01:c6:82:4f:9b:70:8c:fe:
d5:1d:85:e2:a5:35:c9:47:d8:27:05:0c:6b:25:43:50:ab:06:
43:5d:d3:e5:86:6f:37:8d:a5:9e:52:c6:6f:37:0a:01:5f:cc:
17:d0:37:01:47:8c:47:18:45:25:13:a0:a1:19:db:62:b2:c3:
a5:20:33:42:fc:d0:d8:5d:3c:73:1c:e2:e7:74:e8:59:00:18:
3c:d2:2d:46:37:44:5b:92:51:6a:07:e9:5c:e6:1a:1d:2f:b0:
29:78:63:76:9f:67:98:d7:75:7b:78:16:e4:85:c6:4a:4a:74:
c9:11:e9:70:b1:fc:72:e6:51:dd:85:8e:22:5d:9a:8e:a9:46:
ed:59:27:2a:fb:ad:8e:7e:60:35:7c:e7:a4:4e:d8:6a:a1:e3:
fc:75:b3:a7:fb:bd:c4:d1:82:61:e5:e1:de:5f:c0:ef:1d:a6:
85:15:b8:da:c3:8f:12:44:5f:ee:7c:b9:f5:aa:cf:45:48:16:
9e:22:52:fb:12:ee:10:f9:41:4b:cd:ac:2a:30:58:bc:01:82:
24:70:63:1e:7a:3f:8f:7a:4d:90:f1:3c:09:ae:14:b4:05:71:
b6:19:fd:3a:bf:0f:80:88:58:1b:73:e3:7e:e4:65:03:b0:63:
80:82:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:06 2026 by rpki-client