
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae6d0ba-4b2f-3a7e-9aaf-d49d0e8dd1e8.roa
File: 5ae6d0ba-4b2f-3a7e-9aaf-d49d0e8dd1e8.roa (raw, json)
Hash identifier: eG4Jas+GRpXJeI/tSWvTNhwNChkd093VrYCCV/EtOB8=
Subject key identifier: CD:27:8A:FC:BC:B0:C4:FE:73:13:3B:6C:B0:A5:53:79:3D:7B:BC:DC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D6C0FC1A684733B374831B300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae6d0ba-4b2f-3a7e-9aaf-d49d0e8dd1e8.roa
Signing time: Tue 07 Apr 2026 01:00:23 +0000
ROA not before: Tue 07 Apr 2026 01:00:23 +0000
ROA not after: Mon 06 Jul 2026 01:00:23 +0000
asID: 16625
IP address blocks: 72.247.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6c:0f:c1:a6:84:73:3b:37:48:31:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 7 01:00:23 2026 GMT
Not After : Jul 6 01:00:23 2026 GMT
Subject: CN=671448cb-29fd-476d-9609-f35fe7745f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:28:84:43:b5:fb:49:37:92:5f:d5:8c:b0:
94:f5:65:0c:60:30:83:77:d9:e7:58:52:30:60:67:
42:2c:59:7d:52:35:d0:6e:f5:49:dc:cf:41:b1:96:
0e:1a:8b:cc:76:ec:fa:39:4d:28:99:31:e1:f4:89:
51:f3:b6:ec:2d:02:e9:86:eb:43:d2:0a:97:fc:8a:
4d:4a:ff:1f:e6:69:df:f0:fa:a5:4c:8b:fc:e1:1a:
95:ee:d3:e2:5e:a3:5d:1d:51:f8:85:2f:56:d7:aa:
9d:b1:1f:f6:43:4a:33:1c:48:af:af:a6:0f:14:68:
26:62:5c:e2:7c:65:f5:a5:4b:c1:28:01:c8:cf:32:
23:d1:ad:ba:74:fe:c1:e0:c7:3e:a6:ff:27:f5:57:
fe:f5:0f:79:ba:e0:f6:57:ac:ca:84:72:47:54:d1:
69:9a:cf:37:ad:a3:bf:da:b6:8a:d0:17:3b:32:1f:
21:83:17:a6:bb:8e:39:45:bf:14:fb:3c:2d:64:dc:
50:b6:13:ac:4e:b1:4a:9a:5d:35:9c:c1:b2:c3:07:
6d:39:2f:21:1e:f3:be:40:9c:85:63:d1:b1:a0:c7:
63:a7:7a:ef:94:bd:1b:45:c9:d5:00:79:37:ce:bd:
af:37:90:b6:7e:44:a6:7f:4f:e6:d9:ee:84:a0:ba:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:8A:FC:BC:B0:C4:FE:73:13:3B:6C:B0:A5:53:79:3D:7B:BC:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae6d0ba-4b2f-3a7e-9aaf-d49d0e8dd1e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.247.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:c7:31:43:dc:42:49:9c:df:99:84:ec:63:12:cb:07:6f:fd:
23:da:69:08:04:60:8d:7c:d0:90:c8:76:a4:fc:12:1c:64:f2:
06:3f:33:e4:48:f9:70:54:53:5b:59:7a:3f:8f:da:4a:f5:60:
fb:86:06:37:a2:cd:34:34:4f:39:5d:73:70:23:ce:93:bb:84:
d7:09:e0:1d:b6:44:ee:a8:35:3b:31:01:77:15:bf:11:76:81:
3d:48:f5:46:5a:66:d6:0b:5e:65:6e:d9:da:b3:e2:28:de:b4:
47:f4:21:20:bd:f7:08:c1:b4:8d:4f:34:35:f9:dc:43:3a:2a:
2e:92:55:41:fc:05:52:b2:7e:cd:d0:de:09:14:2a:b2:fb:0e:
72:e9:c7:a2:4e:f8:28:d0:5c:92:7d:cc:54:7d:5d:f4:13:5f:
65:40:db:b9:e4:b0:13:26:6a:43:c4:ad:17:00:c2:54:e2:e6:
fc:aa:ba:11:49:c7:59:93:3f:5e:40:8d:53:47:54:e8:01:27:
87:b7:02:8b:cb:61:88:83:26:d3:c9:32:13:65:5e:50:30:b7:
91:6d:58:ff:a9:fc:3c:c2:be:df:b9:f9:bf:a5:bc:03:f2:7c:
f4:6b:15:dc:d4:a3:bc:98:27:5b:00:58:03:5f:0f:99:9d:fe:
30:92:78:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:48 2026 by rpki-client