
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa
File: e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa (raw, json)
Hash identifier: Y1ggu6CTmQ8hBohiwUiMn8h5hGlKp935eXHVpFfqOfM=
Subject key identifier: FB:E7:75:E7:B0:63:E1:56:65:E5:C1:5E:3E:04:92:7F:02:05:E1:50
Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Certificate serial: 010D0C9F4328584D5234ED5F46187CBB4AF01B88
Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa
Signing time: Sat 28 Mar 2026 18:44:30 +0000
ROA not before: Sat 28 Mar 2026 18:44:30 +0000
ROA not after: Sun 31 May 2026 01:00:31 +0000
asID: 22423
IP address blocks: 24.231.96.0/20 maxlen: 22
45.42.72.0/21 maxlen: 21
45.58.96.0/20 maxlen: 20
65.38.64.0/19 maxlen: 19
69.9.64.0/18 maxlen: 22
104.159.0.0/22 maxlen: 22
104.159.0.0/24 maxlen: 24
104.159.4.0/22 maxlen: 22
104.159.20.0/22 maxlen: 22
104.159.32.0/19 maxlen: 19
104.159.64.0/22 maxlen: 22
104.159.108.0/22 maxlen: 22
104.159.112.0/22 maxlen: 22
104.159.116.0/22 maxlen: 22
104.159.120.0/23 maxlen: 23
104.159.122.0/23 maxlen: 23
104.159.124.0/22 maxlen: 22
104.244.64.0/22 maxlen: 22
138.229.16.0/20 maxlen: 20
144.208.96.0/22 maxlen: 22
144.208.100.0/22 maxlen: 22
144.208.112.0/22 maxlen: 22
160.20.232.0/22 maxlen: 22
166.48.158.0/24 maxlen: 24
166.48.160.0/23 maxlen: 23
166.48.188.0/22 maxlen: 22
166.48.192.0/19 maxlen: 19
166.48.232.0/21 maxlen: 21
166.48.254.0/24 maxlen: 24
170.100.208.0/22 maxlen: 22
170.100.212.0/22 maxlen: 22
180.181.160.0/19 maxlen: 19
192.214.128.0/20 maxlen: 20
192.214.144.0/20 maxlen: 20
192.214.224.0/19 maxlen: 19
192.214.255.0/24 maxlen: 24
199.189.76.0/22 maxlen: 22
199.241.128.0/21 maxlen: 21
199.241.128.0/23 maxlen: 23
199.241.130.0/23 maxlen: 23
199.241.132.0/23 maxlen: 23
199.241.134.0/23 maxlen: 23
205.233.150.0/24 maxlen: 24
205.236.43.0/24 maxlen: 24
205.236.80.0/24 maxlen: 24
205.236.89.0/24 maxlen: 24
205.236.120.0/22 maxlen: 22
205.236.120.0/24 maxlen: 24
205.236.121.0/24 maxlen: 24
205.236.122.0/23 maxlen: 23
205.236.226.0/24 maxlen: 24
206.180.240.0/20 maxlen: 20
206.180.240.0/23 maxlen: 23
206.180.242.0/23 maxlen: 23
206.180.244.0/23 maxlen: 23
206.180.246.0/23 maxlen: 23
206.180.248.0/23 maxlen: 23
206.180.250.0/23 maxlen: 23
206.180.252.0/23 maxlen: 23
206.180.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:34:ed:5f:46:18:7c:bb:4a:f0:1b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Validity
Not Before: Mar 28 18:44:30 2026 GMT
Not After : May 31 01:00:31 2026 GMT
Subject: CN=86890b8b-b400-4e6f-a623-2b18270c72ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:6d:49:a0:88:9e:d2:56:d2:b7:7a:c0:c5:
45:1e:98:d9:8e:57:13:0f:99:ff:0e:1a:22:9f:46:
b7:42:8c:b9:f5:5c:e5:43:b5:c6:ba:64:58:99:7c:
d4:e9:5c:0e:52:36:ac:ea:84:d5:3c:e8:4d:58:4d:
72:bc:1e:4b:11:8e:fe:2b:ad:e5:52:ff:98:f0:79:
ca:e8:f4:42:fa:21:e7:2f:8b:fc:b9:eb:80:e1:98:
cf:ca:91:f1:c3:94:37:2a:d5:f1:c3:46:6a:52:9b:
69:c3:00:1a:9b:5f:0a:86:8e:b9:17:49:d8:8b:81:
1e:99:cd:71:e5:34:cb:04:23:0a:be:54:31:b7:da:
60:3d:f4:bf:ac:91:8f:1a:5f:b3:ff:00:7d:0b:db:
78:78:05:86:d6:25:20:9a:d5:ea:a7:8b:d5:6a:3c:
80:cf:41:9f:a2:8f:1c:77:36:93:e0:39:4b:2b:82:
52:21:c5:3d:f2:5e:ce:8f:ab:cd:f2:16:83:e7:29:
68:43:e4:fc:9c:4d:43:3e:89:bd:03:50:65:23:da:
7c:27:7e:48:3e:8e:ba:14:c8:72:20:28:53:c0:ee:
d1:f3:df:d0:81:82:bf:40:31:42:5d:86:4e:1f:4a:
6b:23:97:41:f4:00:ff:bb:dd:58:e2:61:ec:e0:7e:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E7:75:E7:B0:63:E1:56:65:E5:C1:5E:3E:04:92:7F:02:05:E1:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl
X509v3 Authority Key Identifier:
keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
sbgp-ipAddrBlock: critical
IPv4:
24.231.96.0/20
45.42.72.0/21
45.58.96.0/20
65.38.64.0/19
69.9.64.0/18
104.159.0.0/21
104.159.20.0/22
104.159.32.0-104.159.67.255
104.159.108.0-104.159.127.255
104.244.64.0/22
138.229.16.0/20
144.208.96.0/21
144.208.112.0/22
160.20.232.0/22
166.48.158.0/24
166.48.160.0/23
166.48.188.0-166.48.223.255
166.48.232.0/21
166.48.254.0/24
170.100.208.0/21
180.181.160.0/19
192.214.128.0/19
192.214.224.0/19
199.189.76.0/22
199.241.128.0/21
205.233.150.0/24
205.236.43.0/24
205.236.80.0/24
205.236.89.0/24
205.236.120.0/22
205.236.226.0/24
206.180.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:93:3e:e8:68:6c:9a:12:e7:5a:27:bc:e6:cf:bf:5d:94:55:
34:63:6b:a2:41:52:5d:91:a6:ab:19:ea:61:fb:4a:77:e6:df:
0d:57:54:f0:97:96:d3:1a:5b:e2:f8:eb:7b:82:4e:47:52:97:
e2:b7:7e:1a:20:f1:a8:01:73:b8:61:de:42:d4:39:6d:fb:fa:
d3:65:a2:95:fa:3f:99:0e:e5:fa:a1:34:24:c3:17:ff:e0:0c:
81:44:d9:d7:68:9d:e9:61:f5:75:b1:09:39:3a:11:e1:a2:79:
f4:1b:81:2d:51:5a:e5:98:30:57:ba:f9:d2:21:a5:ef:3d:23:
80:d8:1a:1d:88:2e:55:e0:e3:aa:84:6d:f3:f4:97:d2:a1:0d:
0e:65:a4:3d:7f:79:31:71:2d:10:5c:66:2d:bc:66:f6:30:5f:
2a:28:c3:c7:1d:06:4b:cc:d0:9a:a2:8c:cc:7b:ba:27:f2:02:
9b:aa:1b:05:14:46:d9:d5:50:5d:ba:40:b8:a9:f7:45:75:53:
65:d6:03:9c:94:5e:e5:5f:a9:91:73:e4:d9:91:91:04:3f:4f:
b6:aa:53:9b:2c:08:0a:5d:70:b0:e9:67:2d:99:99:d2:33:b2:
0e:58:12:86:5f:f3:93:21:1f:e3:cf:ed:58:d7:35:15:37:b2:
81:03:df:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:51:43 2026 by rpki-client