
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa
File: a6b12d9f-9271-305e-847c-6c6fdf434670.roa (raw, json)
Hash identifier: dV9NIu2q3+MQ0is7rP/BgK3FPuVWlYyq+jSYP5krPbs=
Subject key identifier: 18:88:33:0D:A9:04:AA:AF:EB:20:7A:B6:0E:3D:38:AE:ED:35:51:92
Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial: 010D0C9F4328584D6C0FB768ECD32704AA380C00
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa
Signing time: Tue 07 Apr 2026 01:00:23 +0000
ROA not before: Tue 07 Apr 2026 01:00:23 +0000
ROA not after: Mon 06 Jul 2026 01:00:23 +0000
asID: 160
IP address blocks: 128.135.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6c:0f:b7:68:ec:d3:27:04:aa:38:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Validity
Not Before: Apr 7 01:00:23 2026 GMT
Not After : Jul 6 01:00:23 2026 GMT
Subject: CN=371a0e74-70ec-456f-9815-e78a5e4d7e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:09:31:da:61:5a:43:1c:bc:01:28:6f:2f:
10:7c:4a:10:91:6b:01:2f:66:7e:94:e7:35:9a:4c:
02:70:31:bd:33:d3:e0:fa:8a:cb:d3:0d:39:89:7c:
7a:4a:22:fa:ff:5d:8c:59:19:54:f8:69:1c:a2:8a:
35:a6:45:5a:40:d1:ee:24:db:4d:57:9a:8e:fd:b3:
95:fb:61:14:c2:01:ca:90:03:f0:06:6e:42:ec:26:
43:35:7b:87:a4:55:a2:91:ce:29:ed:8a:77:cc:9d:
04:02:da:b5:28:1b:13:74:9f:c3:d4:94:0a:32:3f:
39:7c:fe:c1:51:9d:bc:6f:be:87:d3:f4:25:87:24:
60:75:3d:c9:ad:1f:63:29:76:ca:76:34:50:c1:fa:
e0:09:16:bc:fc:92:04:36:e3:31:b5:18:87:6f:56:
10:e9:40:61:cb:1f:d7:90:16:9b:24:22:24:55:bb:
b6:1f:23:21:c1:18:67:6b:95:72:34:ce:9e:f1:bb:
e5:a7:21:79:3f:b3:24:79:d3:1e:19:b5:81:d9:bd:
e0:4f:b4:83:a3:89:b3:87:f9:10:38:0c:6f:28:5a:
ad:b1:91:81:87:0f:4e:a0:c2:a6:61:86:1c:6b:00:
d3:21:fd:ac:4e:42:85:72:6b:14:d7:b6:e0:cb:fc:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:33:0D:A9:04:AA:AF:EB:20:7A:B6:0E:3D:38:AE:ED:35:51:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
X509v3 Authority Key Identifier:
keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
sbgp-ipAddrBlock: critical
IPv4:
128.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:ff:35:85:3b:b9:41:a9:c2:01:09:b8:90:ad:8d:38:6c:e1:
7a:67:3d:f0:5d:38:99:37:ca:cb:65:42:c5:21:29:53:eb:93:
a8:96:77:39:75:90:c9:d9:fc:3d:41:be:87:b0:cd:3f:81:4b:
77:bd:cc:46:16:c1:d4:4e:0a:55:4c:c5:3c:0f:cb:ad:f6:39:
67:94:3b:09:a4:16:71:37:f8:a4:ab:50:56:b9:fa:68:34:29:
e5:ed:49:e8:48:70:32:88:b5:34:69:fc:94:dd:a2:0e:5b:2e:
be:c2:76:76:fc:72:32:94:0d:92:b1:4c:2c:78:97:7a:31:3c:
ee:aa:1f:00:d6:b9:50:42:73:55:8c:e1:c1:aa:64:77:c6:99:
d1:c0:e9:d6:6e:b8:c6:bc:86:c5:ab:f5:74:6a:ff:14:ff:08:
e5:08:cd:43:65:8d:4c:01:71:29:6f:23:12:c6:3f:55:61:a6:
14:90:31:90:27:99:ab:27:4b:a0:db:d4:ac:cf:10:b7:ab:3b:
2b:fd:0f:49:f7:04:05:b9:86:a7:ba:49:73:51:13:82:d3:11:
0d:b6:d7:95:86:59:1d:96:cd:de:db:1f:04:89:f5:ca:ee:3a:
4b:d1:0f:a7:9d:4a:8d:a6:b7:61:d3:a8:f5:c8:b4:43:cb:08:
72:6e:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:18:41 2026 by rpki-client