
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/bf5e62e5-92c5-3f09-9051-299422a6cc1a.roa
File: bf5e62e5-92c5-3f09-9051-299422a6cc1a.roa (raw, json)
Hash identifier: nVi2YGIkCzNsviEqOERDG1Jb9V1XO34NEK2IZm0VsNg=
Subject key identifier: C1:E7:84:BE:24:A5:04:B6:87:50:66:F1:28:B9:65:26:17:FC:1C:6D
Certificate issuer: /CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
Certificate serial: 010D0C9F4328584D5243C4CE637CCB26A0B552F8
Authority key identifier: CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/bf5e62e5-92c5-3f09-9051-299422a6cc1a.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 0
IP address blocks: 69.58.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:c4:ce:63:7c:cb:26:a0:b5:52:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=17759c4d-8d66-4fb4-8155-f28f972ec48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:6c:49:d2:5f:8c:ee:7d:04:cc:33:d1:2c:
f9:bb:52:42:e8:4d:e5:d3:cd:00:e2:b4:99:31:c4:
c0:b4:c0:2d:64:79:ad:e9:e9:17:5c:df:ff:8e:c6:
92:3f:d9:87:57:7d:97:f4:4e:05:a0:3a:e2:bf:62:
d6:e4:38:0a:60:c0:1f:05:7f:36:dd:76:4a:60:99:
31:93:ee:26:6e:bb:32:af:b5:76:ef:09:7f:67:0d:
85:11:97:c1:aa:92:5d:f7:6d:d5:fa:27:60:97:d6:
9e:83:e6:d7:8b:81:fb:17:37:f0:ca:4c:d4:06:88:
1d:c6:ef:c2:4b:af:51:15:75:34:6f:e7:45:1d:df:
b0:95:10:1f:ac:8d:40:49:c8:d6:26:e6:e0:ad:02:
08:eb:fa:ca:20:fb:70:80:6c:8f:7c:e4:bb:e0:d7:
48:a1:0a:35:42:f6:c4:5e:32:a2:84:36:fa:76:f5:
a1:02:65:fb:c5:08:8f:ad:dc:e2:11:cd:fb:8d:4c:
81:1f:1f:cb:f7:a1:c9:f9:f8:fe:fe:f0:4e:9b:cf:
d3:f8:94:a5:8f:33:f4:f4:57:c2:39:c2:8a:11:e3:
3d:f7:e6:77:3d:51:fb:0c:87:69:3b:e2:0b:49:20:
1f:1e:75:ef:1c:4b:88:98:8a:86:44:a0:bc:d7:93:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E7:84:BE:24:A5:04:B6:87:50:66:F1:28:B9:65:26:17:FC:1C:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/bf5e62e5-92c5-3f09-9051-299422a6cc1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.crl
X509v3 Authority Key Identifier:
keyid:CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
sbgp-ipAddrBlock: critical
IPv4:
69.58.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:14:fa:a7:58:5d:63:70:56:47:97:ea:cd:fc:a9:37:45:04:
46:2f:bb:0b:70:86:95:7a:ab:10:3d:8b:05:07:48:c4:66:d6:
4c:04:0f:61:f9:72:25:de:27:d5:a2:d2:8a:5e:75:01:0b:d3:
fa:03:09:25:a4:80:88:1a:c1:5e:f3:1c:de:1c:ce:2c:4f:ec:
2f:df:5e:42:4e:c8:c2:79:9d:95:fe:07:57:5e:b7:d7:d1:3e:
48:95:d0:02:ef:e5:67:25:b6:34:00:e1:ea:98:9c:e0:70:92:
c6:6e:c0:37:74:94:a4:f8:94:fa:ba:23:da:91:cf:b8:74:e9:
34:52:ca:e9:00:02:0f:c3:ce:81:33:5e:df:c4:ba:00:b2:da:
7f:36:66:96:ae:0b:b3:24:3e:b2:b0:68:03:03:bf:41:20:d6:
96:f4:3f:53:ec:62:08:6b:d1:64:9c:e6:5d:ab:4f:5e:43:c4:
52:b9:7c:72:c3:8e:91:fd:5c:cd:00:cd:e6:08:4d:36:e0:3b:
0e:a5:33:ef:42:fc:11:d5:c9:3e:23:53:c2:48:8a:d1:12:00:
23:4d:a4:c2:a5:1f:00:0e:e5:68:85:66:36:af:76:c4:64:f2:
a1:7b:93:c1:47:28:e4:d7:99:6a:ac:30:48:7c:ab:83:c9:34:
95:81:2e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:50 2026 by rpki-client