
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/dd6ee553-32c1-334f-8156-64c37a894a34.roa
File: dd6ee553-32c1-334f-8156-64c37a894a34.roa (raw, json)
Hash identifier: 40ZItUAArELFW6uLn3uZqpQGslWa9sbDch3/72RgXyw=
Subject key identifier: E4:36:74:6A:8E:BD:C6:E3:6A:B9:07:59:49:24:03:C9:41:44:EB:BC
Certificate issuer: /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Certificate serial: 010D0C9F4328584D4D5A5A858BD273DD026DF060
Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/dd6ee553-32c1-334f-8156-64c37a894a34.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 40555
IP address blocks: 208.87.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:5a:85:8b:d2:73:dd:02:6d:f0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=162d99fd-dd85-417d-a2b6-be3e6af0ec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:84:96:28:3e:97:f8:0d:49:35:a7:3b:89:fd:
f9:d6:2c:44:99:2c:e9:0b:c4:81:21:36:87:9f:93:
fd:ea:da:27:7f:1d:e4:8d:fd:a4:4e:c7:1a:8e:d6:
37:9c:8c:1b:6d:70:cc:2e:ab:2e:c0:70:0c:92:15:
8b:1e:d2:c2:a2:6a:b4:4e:c5:43:f7:d1:5b:d5:00:
3c:b0:6a:fb:1b:f2:b9:a2:f5:d9:7a:82:2c:24:82:
46:9e:1d:ca:57:f4:26:ad:06:7a:22:b4:3f:ff:2c:
de:de:f5:a0:4b:45:ea:8f:3c:eb:40:98:ff:5e:d3:
71:8d:99:31:0f:44:6f:fc:4a:a4:5d:bb:e7:77:c8:
80:c1:04:fb:9b:d4:69:98:f3:70:71:65:a9:2a:b2:
4d:b1:aa:0b:1d:77:71:70:a7:08:63:81:e1:c3:ba:
71:1a:94:6c:13:e4:fa:4c:78:20:32:f7:35:7c:3b:
35:01:58:3b:6a:9e:bc:96:7a:16:95:cb:b8:ce:c5:
04:24:a1:55:a8:a9:65:df:8a:98:62:37:32:b9:ce:
62:9e:6d:a7:e0:74:45:06:fc:2a:23:c0:3a:a5:d7:
69:b5:ae:03:50:b0:93:a5:8a:65:27:2a:b7:05:1f:
83:a7:f0:03:f0:d9:ee:25:84:c1:62:0e:20:cc:8b:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:36:74:6A:8E:BD:C6:E3:6A:B9:07:59:49:24:03:C9:41:44:EB:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/dd6ee553-32c1-334f-8156-64c37a894a34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl
X509v3 Authority Key Identifier:
keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
sbgp-ipAddrBlock: critical
IPv4:
208.87.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:9a:83:eb:86:0e:13:83:7a:83:7e:cf:a2:d1:da:29:7a:72:
15:60:97:b3:5c:cd:25:01:86:e4:c4:dc:34:c6:b4:ea:8e:b4:
aa:6d:67:93:40:5b:8b:ed:5a:e8:62:d4:5c:e2:89:71:e5:33:
77:22:00:23:f2:80:b1:49:23:7b:3d:6e:d4:ed:7b:21:0d:d9:
67:77:57:c0:e6:9b:d3:cb:04:c5:d5:95:9d:93:27:73:e7:26:
17:f9:13:5f:c2:e4:bc:0d:df:c4:50:d1:06:f1:60:0d:69:44:
6c:1e:49:3a:58:34:63:ba:4b:48:23:25:00:e8:4e:96:a8:cf:
e9:b4:be:ff:fa:be:8b:8b:0a:05:8a:98:3c:84:b8:17:fe:12:
07:0a:6f:05:2d:35:37:e8:94:9a:43:e3:36:f1:e8:00:d0:98:
e5:3e:f9:4b:71:dc:15:1d:5a:b0:be:b4:db:cf:e9:25:1f:4c:
5c:7c:13:12:07:98:8b:f3:95:c6:9b:fa:e4:ce:53:e3:ed:51:
f4:da:9e:22:e0:47:1e:9d:15:9b:79:50:cf:51:27:40:6c:3e:
10:39:be:07:90:80:78:ba:f2:0f:15:e8:93:7c:84:90:a9:21:
a1:46:08:c4:96:6f:f2:5d:e7:2b:d3:a0:1d:84:d5:a9:01:94:
d5:79:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:13 2026 by rpki-client