
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/8e15c1af-21cf-36cb-8007-f5f39145eb9d.roa
File: 8e15c1af-21cf-36cb-8007-f5f39145eb9d.roa (raw, json)
Hash identifier: rRGtnZM58zHRLEFb9n+CIb/Hs6IRVUKX8jEfEHjJ7bE=
Subject key identifier: F9:5B:90:56:29:0A:49:9D:3A:D8:60:5C:B5:8A:48:B5:8D:A9:B9:35
Certificate issuer: /CN=ac4576d4-b383-4f58-8da4-316d12d38f36
Certificate serial: 010D0C9F4328584D07ACE2B0DB3C7E3BD6844D80
Authority key identifier: 88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/8e15c1af-21cf-36cb-8007-f5f39145eb9d.roa
Signing time: Mon 02 Mar 2026 02:00:31 +0000
ROA not before: Mon 02 Mar 2026 02:00:31 +0000
ROA not after: Sun 31 May 2026 01:00:31 +0000
asID: 7029
IP address blocks: 170.124.0.0/18 maxlen: 24
170.124.64.0/18 maxlen: 24
170.124.128.0/18 maxlen: 24
170.124.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:07:ac:e2:b0:db:3c:7e:3b:d6:84:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4576d4-b383-4f58-8da4-316d12d38f36
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : May 31 01:00:31 2026 GMT
Subject: CN=552dde47-a883-4b2f-a1c2-3158d314cbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:37:28:51:85:5c:6b:19:86:55:ef:bb:97:
5f:fe:6b:ec:a1:6f:54:14:ce:9e:dd:a0:f7:9d:82:
73:d7:af:a9:fa:33:c1:1b:46:47:5a:4b:ba:2a:11:
06:eb:72:62:21:b4:63:18:72:6f:ba:0f:35:72:57:
ba:8e:c4:e4:78:2d:9f:5f:48:84:e5:c2:80:dd:02:
c8:cb:98:9a:d5:a5:98:32:f2:73:69:22:c4:38:97:
23:1c:75:8c:bb:3f:11:80:0d:23:3b:20:fe:24:11:
12:2d:d8:83:a3:4c:f8:d7:43:24:22:37:64:fc:c8:
5b:02:83:f0:c1:09:5d:4f:ab:85:23:c0:f8:fd:eb:
66:ca:6c:45:25:72:58:21:33:03:b4:e5:06:16:3a:
3d:c2:e0:e0:f6:41:0c:e4:a7:34:e4:87:94:09:66:
52:9c:e4:25:ac:e7:3b:e8:51:c7:41:fa:4a:57:9e:
5e:14:0a:38:c9:f0:4f:65:1f:a9:d1:03:64:ec:f7:
d1:2b:fc:93:87:e9:c4:9a:38:b4:9f:29:5f:7f:3f:
47:db:d1:4e:51:9e:05:ed:5c:a2:57:19:41:42:4c:
5c:c7:c5:ab:84:57:b8:7c:d4:f4:99:8a:32:75:4e:
99:a9:bd:e7:24:7e:c2:b6:34:4b:fb:05:0b:d6:3f:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5B:90:56:29:0A:49:9D:3A:D8:60:5C:B5:8A:48:B5:8D:A9:B9:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/8e15c1af-21cf-36cb-8007-f5f39145eb9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.crl
X509v3 Authority Key Identifier:
keyid:88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer
sbgp-ipAddrBlock: critical
IPv4:
170.124.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:ac:87:ce:b6:90:8e:c5:b7:0b:cc:cb:d9:bc:f7:0d:83:7a:
23:45:4a:d8:a6:71:ff:cc:18:6e:52:64:af:74:bd:83:f9:93:
8a:57:56:c7:f7:08:4f:15:d0:e5:5e:e0:1c:f6:0b:b8:dd:59:
46:35:46:4d:aa:3e:eb:17:0a:f8:b3:d2:2b:88:22:8b:ed:89:
b1:86:d4:eb:1a:ac:83:96:c8:a6:df:03:1c:b6:31:41:32:3c:
83:72:f6:23:a7:42:50:3f:96:09:4b:76:24:94:c6:c6:e3:f4:
f7:d8:a3:21:69:db:8c:19:47:a6:96:d1:b7:2c:9d:c6:95:01:
77:a0:e9:44:3b:02:9b:f4:eb:6d:66:80:8c:ed:21:5d:fa:4c:
dd:d5:50:9e:12:e4:c5:6d:a9:85:86:2c:30:2e:36:be:52:52:
0c:dc:c8:b5:a2:0d:b9:88:81:80:38:1e:2e:a1:ca:30:b0:c5:
cf:e8:a0:fd:4b:74:30:57:bd:66:c3:6a:95:9f:b9:b9:de:3d:
39:43:6a:23:4b:8b:a6:c0:7b:4b:8b:0c:eb:72:39:90:2d:9b:
24:11:a0:88:03:36:d5:15:54:65:84:1e:fb:91:a3:22:eb:b5:
ea:69:2f:eb:2c:a5:ed:5f:8f:57:08:39:83:f1:c4:b0:3c:45:
85:46:12:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:48 2026 by rpki-client