
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/6e3018e5-a486-34f5-abce-f0836a28d661.roa
File: 6e3018e5-a486-34f5-abce-f0836a28d661.roa (raw, json)
Hash identifier: ZNAgPCvss3jEZrbvHB3GEu/wdyRTkiKyFeeZtQJ3u7E=
Subject key identifier: 27:92:DC:A1:67:93:A1:11:20:1F:89:09:E9:0C:64:0A:15:78:F2:08
Certificate issuer: /CN=09716e22-4f48-41d8-87e0-e9b48691fcc5
Certificate serial: 010D0C9F4328584D5234F0FF60294F34DD3DE540
Authority key identifier: 74:A1:57:D1:3F:3C:74:FF:09:76:AE:A3:4C:78:AA:A9:75:63:04:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/6e3018e5-a486-34f5-abce-f0836a28d661.roa
Signing time: Sat 28 Mar 2026 18:44:32 +0000
ROA not before: Sat 28 Mar 2026 18:44:32 +0000
ROA not after: Fri 19 Jun 2026 15:17:48 +0000
asID: 30350
IP address blocks: 72.53.176.0/21 maxlen: 21
72.53.184.0/22 maxlen: 22
72.53.188.0/24 maxlen: 24
72.53.190.0/23 maxlen: 23
2604:c400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:34:f0:ff:60:29:4f:34:dd:3d:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09716e22-4f48-41d8-87e0-e9b48691fcc5
Validity
Not Before: Mar 28 18:44:32 2026 GMT
Not After : Jun 19 15:17:48 2026 GMT
Subject: CN=27069db6-5306-4229-ab93-7775d33a3d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:14:02:1a:e5:c4:ba:1e:0d:ba:a1:62:d7:20:
ae:07:89:84:2f:33:1e:a8:a2:80:df:63:2b:e1:48:
d7:46:07:fd:f2:3c:09:8e:81:c3:c7:8b:93:4c:67:
d6:7a:c0:93:c2:a1:40:1d:d9:f8:46:64:f8:ab:e6:
aa:a4:56:56:62:71:36:a7:3a:0e:bc:e3:75:b1:2e:
89:62:7b:d2:25:27:71:22:1d:ca:a9:21:49:8b:2f:
ad:e6:d9:35:ea:20:79:38:58:ed:39:a4:c0:bd:41:
f4:85:d0:3c:d7:81:bc:12:08:21:60:82:9b:f8:06:
fa:2c:ab:11:4c:ef:45:ae:26:aa:df:28:02:a5:d3:
c5:a5:db:be:e2:84:4d:82:6a:49:3a:a1:b2:9d:9e:
98:b6:b4:6f:a7:6e:b9:05:f6:d9:b8:aa:1c:af:ec:
35:b4:e0:9c:3c:91:05:90:d7:d3:82:0b:3c:3c:f3:
76:fd:7f:d0:0e:93:aa:a6:db:b6:15:90:45:f5:6e:
a5:51:68:67:e3:9d:f6:86:ee:06:7c:1d:57:ae:3f:
75:0b:59:75:ae:9c:17:8f:4a:c6:b0:6f:26:6d:6d:
f4:ac:40:72:56:0e:fe:89:16:58:7c:af:99:3e:ca:
e0:8f:5f:6d:06:3c:3a:20:5a:c2:7e:7f:05:41:24:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:92:DC:A1:67:93:A1:11:20:1F:89:09:E9:0C:64:0A:15:78:F2:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/6e3018e5-a486-34f5-abce-f0836a28d661.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.crl
X509v3 Authority Key Identifier:
keyid:74:A1:57:D1:3F:3C:74:FF:09:76:AE:A3:4C:78:AA:A9:75:63:04:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5.cer
sbgp-ipAddrBlock: critical
IPv4:
72.53.176.0-72.53.188.255
72.53.190.0/23
IPv6:
2604:c400::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:db:3a:29:cf:90:f6:e2:fd:e4:09:3f:04:02:0a:93:22:7d:
e6:3f:bf:54:69:44:af:88:56:f3:9a:70:36:b7:5a:40:d6:d5:
c3:a9:f9:d5:85:b0:5d:ba:28:58:12:ba:a0:3d:bd:2c:c8:42:
63:0e:03:c5:72:86:c6:5d:86:0b:12:ea:99:c7:a5:9f:5e:a7:
84:68:29:38:fd:d2:80:32:e8:64:1f:bf:f3:b8:a5:db:73:1a:
83:3a:8a:40:d2:e9:4c:b6:70:62:bd:39:5e:7e:36:73:6d:44:
3e:6e:04:d6:a2:4e:d8:54:37:ee:10:80:f7:b8:28:6d:e3:5a:
4b:d3:6c:3e:5a:e3:24:55:62:de:0f:7c:8c:ee:91:cd:da:01:
ee:93:d3:88:87:22:82:34:f9:0e:9f:a8:af:c5:77:91:53:68:
06:87:17:7a:32:56:6a:58:79:3f:3f:e7:76:e6:be:b6:2b:e4:
4e:8b:51:fa:b3:ea:e0:71:80:58:b8:a4:3e:25:cd:a8:6b:33:
f0:c2:df:49:f0:88:1e:98:c5:2d:04:c2:ce:1b:ec:e5:fd:f7:
88:8e:0c:4f:06:26:e2:e1:e7:a8:d4:74:c0:6d:4f:75:c6:a4:
eb:6a:bb:f5:20:01:df:12:36:c3:b2:7f:20:39:14:18:ce:3f:
9d:c2:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:23 2026 by rpki-client