
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5663ad8d-b171-3a10-8eab-3806dcec8bd7.roa
File: 5663ad8d-b171-3a10-8eab-3806dcec8bd7.roa (raw, json)
Hash identifier: rO9ba7KE2527DqpWHM88TloafC87ReS38QqkeS9kUPI=
Subject key identifier: F7:C8:9E:F3:39:34:13:27:1E:77:ED:D1:8C:BC:DA:71:94:86:93:B2
Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial: 010D0C9F4328584D4D5A304FDA558E95E6CDFAC0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5663ad8d-b171-3a10-8eab-3806dcec8bd7.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 11260
IP address blocks: 162.222.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:30:4f:da:55:8e:95:e6:cd:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=b6eb46bc-ff91-45db-8078-f8113da45a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:c7:5d:aa:5e:8d:24:e2:95:30:3d:e9:e8:
d7:4b:bf:5f:97:f9:19:d9:76:bf:7a:a1:0a:16:a7:
75:e0:43:34:0b:e6:5a:d5:01:bd:bc:80:69:2f:3d:
77:1d:a8:e7:e1:ff:91:1b:9c:1a:e5:ee:83:eb:4e:
94:f5:7b:73:26:05:2b:d3:3e:0e:3b:ad:2e:c8:45:
28:d1:bd:da:d8:4b:72:f1:bf:ef:db:fb:b8:42:a7:
89:2b:b4:76:e5:53:e8:84:d8:06:3d:dd:ea:18:5e:
fd:16:db:27:bb:f3:d0:b8:25:7d:d8:84:af:f3:68:
75:07:b6:7d:a0:6b:7a:bc:5b:7f:ef:dd:ac:cc:eb:
a0:18:07:bb:8d:23:1d:c1:ae:fd:df:ab:66:27:71:
09:be:06:8a:8f:39:82:17:4d:38:d3:ca:f8:57:d3:
79:ea:80:fe:4c:f9:23:19:a6:87:6f:54:b1:9d:b8:
4d:0a:e2:fd:8f:e0:21:e2:3c:93:f2:89:ff:4d:13:
1c:d6:a9:17:92:00:5c:62:23:85:a2:c3:f7:6f:af:
3a:46:63:4a:ab:a0:a7:c3:0f:85:06:47:7a:6d:a3:
45:0d:fd:e7:ba:d5:c9:8c:ba:8c:12:6c:1f:0e:f6:
c7:dd:09:ac:30:e5:6e:0a:fa:2d:dd:ff:ad:33:aa:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:9E:F3:39:34:13:27:1E:77:ED:D1:8C:BC:DA:71:94:86:93:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5663ad8d-b171-3a10-8eab-3806dcec8bd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
X509v3 Authority Key Identifier:
keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:ce:1b:9a:ab:48:62:6e:d9:5c:4f:b8:ae:93:3f:ca:b0:fc:
b1:1b:79:af:a1:cf:5e:42:ee:9c:46:77:bc:4c:0d:24:29:78:
19:69:55:99:a9:7e:4b:44:13:3e:55:d9:ef:f4:a0:33:09:08:
8e:28:32:32:f8:4e:75:40:bd:97:66:aa:2f:1a:8b:14:c4:55:
ee:ad:7a:14:9c:e7:0a:6e:9d:fd:59:40:ab:70:ab:22:44:ac:
8d:7d:fd:aa:4a:e5:94:9f:b8:c8:99:25:8e:98:06:fd:5d:c4:
f1:c2:22:af:a0:cf:ed:3f:81:c2:01:33:00:6e:cc:44:5d:a7:
28:ce:7f:82:44:b7:a3:3a:ef:2d:5c:79:83:27:8f:ce:a2:c8:
a9:2a:56:62:53:f7:19:bf:ed:b5:df:20:ba:fa:69:81:11:8d:
b3:ec:28:9d:aa:de:d9:ff:64:8b:02:68:b5:d5:95:71:3b:f5:
13:ae:05:d5:a1:9d:b3:b0:fb:e6:de:81:91:49:2a:f2:98:c7:
f0:a6:d4:f9:66:59:2a:86:6d:ed:76:bc:6a:48:b0:50:49:82:
69:10:d6:25:b0:2d:90:e3:c7:77:da:0f:bd:90:a9:9f:3c:be:
b0:10:f9:dd:8a:fd:dc:fd:d5:7d:53:c7:2b:82:12:84:dd:49:
cc:33:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:36:09 2026 by rpki-client