
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
File: e51d6345-d432-370c-9bcf-1a0a6bc53063.roa (raw, json)
Hash identifier: voI2+3XpNhUg99E3N9jGSvCQPFMQg4SeJAEHKpAGV5w=
Subject key identifier: 4E:D3:C3:C8:AF:1C:7C:F1:56:E5:82:D9:A5:BC:4B:7C:D8:82:17:5B
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584E1E447AC4F8CFBE1566F92E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
Signing time: Tue 09 Jun 2026 21:00:12 +0000
ROA not before: Tue 09 Jun 2026 21:00:12 +0000
ROA not after: Mon 07 Sep 2026 21:00:12 +0000
asID: 20115
IP address blocks: 172.220.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1e:44:7a:c4:f8:cf:be:15:66:f9:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Jun 9 21:00:12 2026 GMT
Not After : Sep 7 21:00:12 2026 GMT
Subject: CN=25f45f3e-b666-4e29-b73e-bce4a48d3387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:fb:d5:00:0c:83:b1:f6:7e:93:3a:c8:89:
63:bd:d6:71:50:20:7c:ec:ee:97:2c:92:26:22:14:
01:0e:6c:16:d4:e3:c6:32:03:c4:c9:7f:b7:29:ce:
08:7c:c9:bd:d1:8c:f8:7f:36:3f:29:16:de:e8:9e:
57:35:67:8d:e3:ef:a6:ee:71:08:bc:e7:63:10:95:
78:9f:9e:b7:69:66:a7:cb:26:62:b7:70:00:37:ee:
cd:ad:e7:7f:0e:e3:83:cd:ae:d3:94:4a:7d:67:e0:
a5:8a:8d:ea:f0:d7:95:23:3e:23:80:51:7a:53:30:
ab:83:2c:d5:67:ae:52:30:3b:65:20:9a:28:5f:e7:
85:04:44:46:52:eb:07:52:f9:d9:6e:a9:5d:ff:33:
89:51:84:6c:cf:e9:0a:41:b5:62:5d:7e:55:9a:f2:
7a:42:e5:11:9e:7e:3f:75:bb:b3:6c:a2:13:68:70:
70:73:24:d9:a0:e1:89:52:f9:65:71:0f:d8:93:14:
ff:ba:5e:a1:16:a3:2c:97:28:8f:e3:37:e6:af:14:
2f:f1:37:04:ee:6c:c5:0a:6b:9a:41:e0:54:e1:ea:
9f:9f:52:a3:c0:3f:8b:ea:dd:b1:99:06:0d:a4:7b:
6a:a4:5e:43:21:31:8f:bd:53:57:a5:6a:64:86:c9:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:C3:C8:AF:1C:7C:F1:56:E5:82:D9:A5:BC:4B:7C:D8:82:17:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.220.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:ef:8b:b5:b4:ce:80:94:e9:44:44:db:87:0b:13:37:19:d8:
41:2d:0a:5a:1e:32:e7:d1:30:30:0c:e1:fa:87:0e:03:7d:54:
50:49:44:29:93:27:0d:5d:50:1e:7f:5d:66:aa:ca:ca:6c:18:
d2:e4:9e:6b:b4:0a:b6:df:17:2c:48:bb:75:5c:6e:8e:f2:13:
cb:79:23:ca:e0:a6:8c:71:9b:84:c7:0b:70:e0:03:2d:60:fe:
18:c4:73:0b:d2:7b:67:c1:9d:e0:77:25:a1:45:8c:ca:49:53:
65:94:74:ff:5b:7c:55:09:b7:63:fa:80:f1:c4:4d:75:66:ce:
97:2a:1b:3f:31:46:61:90:4e:ee:a3:1b:06:41:99:14:1b:75:
b3:1d:91:41:8d:44:0c:db:a8:ed:9e:83:d9:fe:0c:aa:89:97:
5c:2d:a3:45:51:0c:4f:b2:32:8e:ae:89:63:57:3e:8b:1d:b2:
a7:c7:01:50:d7:e4:be:e1:ed:a6:5a:fc:28:d7:10:04:f7:18:
1b:49:ff:e0:0b:f7:c3:9d:59:0d:be:c2:c1:4c:5f:f1:d5:bf:
a0:78:fe:79:f8:39:d3:5f:c5:5e:f1:76:4e:04:ad:bf:42:b4:
14:cf:ce:08:30:ad:25:0b:18:d6:5c:38:09:09:fd:df:8e:30:
0a:63:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:23:43 2026 by rpki-client