
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/c5aa83e8-493a-39fa-8ecd-9bc15934e3c2.roa
File: c5aa83e8-493a-39fa-8ecd-9bc15934e3c2.roa (raw, json)
Hash identifier: 3zYVUKtZlOcSF9+6IhHtR+2XX0gjjGAIkUxagia1r38=
Subject key identifier: 43:2A:62:24:61:A1:59:51:54:EE:29:A2:25:29:FB:6A:41:8D:59:50
Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial: 010D0C9F4328584E253F19D90787213F2B0E8700
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/c5aa83e8-493a-39fa-8ecd-9bc15934e3c2.roa
Signing time: Fri 12 Jun 2026 09:00:11 +0000
ROA not before: Fri 12 Jun 2026 09:00:11 +0000
ROA not after: Thu 10 Sep 2026 09:00:11 +0000
asID: 32723
IP address blocks: 216.6.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:3f:19:d9:07:87:21:3f:2b:0e:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
Validity
Not Before: Jun 12 09:00:11 2026 GMT
Not After : Sep 10 09:00:11 2026 GMT
Subject: CN=30c9ba8b-f3af-4c42-ad6d-aea520a0cee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:65:6d:0a:bd:a0:0e:a8:12:8d:11:01:47:cd:
f0:ea:72:11:d8:09:82:3a:c5:33:18:09:e3:ae:e0:
7f:66:0a:12:8b:00:21:62:d2:e3:4c:0f:46:99:27:
5a:03:2c:1e:d6:88:ae:22:7e:8c:3b:37:ec:da:45:
fe:40:00:cd:4c:71:da:47:9a:15:7f:c0:d5:27:3e:
86:17:20:e2:85:9e:df:2e:66:0c:1d:14:2a:f7:40:
6c:17:e3:94:50:65:7b:09:b4:91:b5:0d:1d:8d:6a:
d8:2f:4e:3f:5e:3c:d9:56:81:7e:ea:07:cd:d8:63:
5f:cb:25:e4:be:3b:69:e0:cb:60:90:2a:c8:b9:18:
1b:a4:2c:68:2e:6c:fc:20:3a:3c:f7:ac:10:7d:79:
d0:f1:80:f5:44:23:5f:82:f6:b2:e9:8c:f0:e5:12:
1c:8c:d1:e5:ba:a5:ae:56:37:7c:0d:92:8e:8c:08:
2b:dd:7b:55:43:87:39:7c:4a:e3:3f:e2:d3:ba:d2:
e0:1e:77:5d:ee:73:8d:a9:b2:69:16:00:7c:59:5a:
dc:b5:04:4c:59:48:dd:83:c9:63:6e:94:10:1b:8c:
d6:9b:96:ce:5d:39:06:02:f9:c3:56:23:5c:cf:ae:
25:b8:99:22:cd:1a:b1:dd:a4:cc:18:5a:c0:c0:cd:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2A:62:24:61:A1:59:51:54:EE:29:A2:25:29:FB:6A:41:8D:59:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/c5aa83e8-493a-39fa-8ecd-9bc15934e3c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
X509v3 Authority Key Identifier:
keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
sbgp-ipAddrBlock: critical
IPv4:
216.6.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:95:36:cd:e6:c5:94:9e:14:ea:3f:e6:3d:17:fc:38:35:a4:
79:7a:d1:a6:4e:78:1a:bf:9c:4d:ef:7c:74:99:65:a0:f4:45:
31:80:3a:d3:0b:7a:9c:1b:79:62:09:4c:02:03:9b:2a:df:10:
15:1d:8c:c4:2a:d5:db:ce:ac:93:0d:3c:a3:34:31:b5:2f:a9:
1e:f0:7e:2f:f5:27:26:af:d3:1b:0f:4c:b4:7e:f8:48:58:c4:
74:49:74:8d:1c:b1:f1:08:5e:53:30:fb:b5:ac:a1:38:fb:de:
ed:b9:5a:ed:01:33:09:f6:2a:0b:1b:b0:0a:20:c3:5a:b5:ca:
fe:e2:30:02:79:5b:bc:5f:6d:42:05:d1:4d:c9:bb:f9:f5:f7:
7d:34:a2:e5:18:a0:7b:f7:ff:92:69:5a:7d:b4:aa:ab:3d:37:
ad:a2:fc:b1:dd:73:e7:e8:84:83:bd:07:38:51:5e:e4:42:19:
ad:18:27:5b:4c:96:9a:0c:3e:c0:b7:fc:8d:c7:67:0d:fc:5a:
d3:10:17:c3:17:9a:04:dd:b2:fb:ba:11:a8:a4:68:8b:0e:37:
d9:b6:56:c2:bc:f9:98:73:96:33:77:8e:92:3e:48:20:ec:95:
d0:a5:9b:c6:c4:76:c7:ab:9a:53:42:6c:0e:57:cd:cd:ef:bf:
3c:69:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:39 2026 by rpki-client