
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/71e37659-e7c7-3451-968b-7b80386600a8.roa
File: 71e37659-e7c7-3451-968b-7b80386600a8.roa (raw, json)
Hash identifier: nATySpHmZv4E/kTkMKiUkf2j9xu/KqW24dOEsXQ0uvA=
Subject key identifier: 91:E3:5C:C7:6E:09:6E:75:E6:45:04:C8:D0:03:11:C4:D5:7F:DC:D9
Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial: 010D0C9F4328584D571FA73EAFBEBF25F2830220
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/71e37659-e7c7-3451-968b-7b80386600a8.roa
Signing time: Mon 30 Mar 2026 13:00:30 +0000
ROA not before: Mon 30 Mar 2026 13:00:30 +0000
ROA not after: Sun 28 Jun 2026 13:00:30 +0000
asID: 54238
IP address blocks: 209.151.220.0/22 maxlen: 22
209.151.220.0/24 maxlen: 24
209.151.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:1f:a7:3e:af:be:bf:25:f2:83:02:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Validity
Not Before: Mar 30 13:00:30 2026 GMT
Not After : Jun 28 13:00:30 2026 GMT
Subject: CN=b9999ded-d9cb-4de3-99f7-0d4fdf49b996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:c3:c5:dc:fd:3c:ba:6d:2a:17:f6:2e:db:
46:7e:32:60:9c:80:92:82:52:7e:fa:6c:43:12:d5:
0d:1a:5a:7e:4f:a8:96:c9:db:3a:93:1b:a5:5a:41:
c5:a8:5c:59:9e:16:02:4a:4c:2e:c3:05:7f:e0:83:
a1:f9:93:11:f7:d4:96:43:30:6a:91:18:12:da:2d:
fb:ca:db:65:72:cb:ba:7c:7e:49:2f:8b:94:8e:f3:
a0:f5:d7:11:7b:bb:ff:49:a3:7b:eb:f0:2d:0a:de:
10:9e:e1:59:c5:db:8a:11:81:4f:6b:b5:0f:2c:06:
46:e2:8d:d9:ae:46:d8:0a:1f:c4:31:e0:ff:c9:48:
30:f1:40:cb:f8:4b:90:1a:83:8c:d5:78:6b:a2:93:
eb:3a:b9:18:f1:85:41:70:e4:35:7d:39:1e:2b:d4:
07:6c:5c:b2:93:d8:10:d4:2d:68:ac:aa:75:47:36:
ea:9f:a5:bf:36:aa:4b:c7:6f:77:5b:24:a0:17:0e:
43:5c:45:dd:18:21:15:94:73:94:92:e2:f8:1f:49:
14:7d:03:ea:82:11:5f:b7:3b:7b:7d:a8:4c:23:91:
be:a5:85:2c:13:2d:d9:5d:de:1a:15:00:53:19:79:
30:58:cd:5c:f0:73:ab:9b:b5:7a:ed:cf:50:08:25:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E3:5C:C7:6E:09:6E:75:E6:45:04:C8:D0:03:11:C4:D5:7F:DC:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/71e37659-e7c7-3451-968b-7b80386600a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
X509v3 Authority Key Identifier:
keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:90:16:77:a4:78:74:74:50:f2:8b:9c:4c:ff:62:8e:ae:79:
54:f6:90:a2:32:df:77:74:7f:c2:0f:e5:0a:9d:f4:3b:9a:dc:
d3:a2:2d:ff:da:f1:ea:c9:8e:33:e3:32:f2:28:6d:83:5d:fd:
fd:56:05:29:2e:07:82:0d:a5:b4:0b:e4:7f:7d:5f:18:92:06:
f3:33:b4:d5:34:09:10:7b:a9:b7:0f:c9:c5:de:00:0e:7a:30:
9a:cc:7d:1b:91:04:b1:c5:32:10:c6:cc:04:e1:f7:76:6e:f1:
27:57:b3:3a:1c:b0:fa:4b:ed:e2:1b:0c:f2:37:4d:31:c7:66:
e0:99:e0:e7:e8:ba:e4:50:57:0c:e9:14:63:c5:a6:12:8b:03:
8c:bd:7a:35:e0:34:83:9c:92:84:31:bf:25:74:ab:ac:e1:f3:
68:12:91:c0:c9:bc:61:ed:77:d5:26:5f:f2:5e:f9:5b:bd:bb:
1f:89:a3:98:cc:11:57:7a:c1:2d:01:16:f6:93:e6:7b:ea:74:
c9:f5:31:71:f4:c0:31:4b:04:58:87:95:0e:1a:0c:ae:45:2b:
14:a4:52:72:37:ef:fb:81:56:15:99:70:87:21:03:ec:63:59:
60:d0:52:12:41:0d:22:ca:e3:10:63:22:ae:4b:a8:7f:c2:66:
85:21:f0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:27:09 2026 by rpki-client