
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/facc50b6-c426-360d-8c24-fc9a1c7a54b9.roa
File: facc50b6-c426-360d-8c24-fc9a1c7a54b9.roa (raw, json)
Hash identifier: uWi60tFrub/NpOakNMRebmCydMn45dDDX4H6KDLLt7Q=
Subject key identifier: CD:22:8D:F8:1E:07:2E:06:98:0D:81:24:D8:51:27:11:3A:AD:13:00
Certificate issuer: /CN=ec2c9ce7-041a-4f47-8928-4a1f5b344908
Certificate serial: 010D0C9F4328584D55BA47564C030365AAF99800
Authority key identifier: 3C:0E:F3:12:24:78:E1:73:3D:2B:53:D7:7D:CF:D0:1A:DD:58:83:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/facc50b6-c426-360d-8c24-fc9a1c7a54b9.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 55105
IP address blocks: 150.252.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:47:56:4c:03:03:65:aa:f9:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2c9ce7-041a-4f47-8928-4a1f5b344908
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=de101326-27ee-40d9-87e3-0ad8add2867f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:47:18:9c:b7:67:66:e2:e6:95:0e:4f:5a:
b2:42:3d:5e:c9:a8:46:6b:f6:26:12:14:58:92:1f:
ee:d0:95:41:d2:88:82:a4:bc:80:de:e4:b0:04:c1:
48:55:c1:52:22:46:a7:f4:7d:1a:18:19:d8:54:89:
b6:0c:b7:17:42:ac:14:82:13:78:03:4e:f6:58:e5:
0e:32:df:33:23:e2:61:1d:bf:fa:e1:62:01:de:3d:
47:40:8a:a0:f3:a6:ea:1d:a0:de:ca:dc:3c:6b:e6:
ef:51:a9:c1:d6:77:63:66:6f:a8:83:3b:4d:6b:a7:
81:b4:b6:3d:80:35:b1:c9:cc:4e:8a:7c:69:86:91:
b3:25:33:1c:52:19:8e:4d:36:d6:fe:e2:e3:84:e9:
31:9d:fd:4e:50:0d:ef:78:b7:13:b6:99:d5:24:31:
b4:e8:85:83:fc:75:d8:d5:ae:63:df:96:5d:c7:7b:
51:3d:71:e7:d9:67:8a:25:6b:c8:e6:84:b7:9d:70:
b9:ff:d5:a3:f3:85:ec:d8:c4:98:1c:32:f9:a9:a9:
01:d7:c4:97:bd:d1:fe:86:94:a0:33:88:2f:d2:04:
7e:9f:03:49:41:65:95:0d:98:26:e6:37:ba:0e:f5:
2c:6d:cd:82:0c:fc:9e:0a:fe:4c:a0:8f:da:82:4a:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:22:8D:F8:1E:07:2E:06:98:0D:81:24:D8:51:27:11:3A:AD:13:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/facc50b6-c426-360d-8c24-fc9a1c7a54b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.crl
X509v3 Authority Key Identifier:
keyid:3C:0E:F3:12:24:78:E1:73:3D:2B:53:D7:7D:CF:D0:1A:DD:58:83:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer
sbgp-ipAddrBlock: critical
IPv4:
150.252.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e1:7c:b2:53:70:3b:8d:f3:c4:37:a3:5c:e9:3a:0e:60:4f:
a9:c9:c2:66:32:aa:1b:52:99:72:a7:d9:e4:f4:84:0b:31:e3:
76:96:8d:0a:04:5d:c8:ce:5e:07:bd:dc:1c:e2:3f:85:3f:7f:
3f:77:6c:ac:f5:d1:0b:0c:9f:ad:92:84:39:34:8b:11:46:c1:
a9:98:58:b6:af:2f:0b:74:6c:f5:68:01:08:e0:a6:b6:92:98:
2b:b3:6e:e6:cf:32:82:c0:d4:86:5c:7c:f0:dd:43:0e:1e:07:
69:45:c1:8d:8b:09:ee:2b:8b:95:30:a8:a7:34:6c:77:e5:58:
7c:d3:65:b8:26:9c:fb:a0:78:9b:61:14:10:5a:4c:0e:f9:cf:
58:54:0a:7f:ef:46:54:c0:ac:64:50:56:30:af:ba:f0:8d:a6:
6b:30:78:37:8d:72:26:56:4e:1e:11:d7:c6:1c:5b:44:c1:fa:
98:ab:79:b5:4b:2f:73:84:a3:41:97:71:23:0e:5a:f7:69:e7:
63:3c:4e:2a:11:2e:3a:f9:74:84:40:76:87:2f:64:f7:0d:7d:
77:8c:e1:b2:0b:57:2f:32:b8:f7:3d:6a:ee:25:70:29:3d:83:
55:db:47:77:e1:be:53:f0:e7:47:f5:4c:15:77:7d:3f:77:21:
0f:53:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:52 2026 by rpki-client