
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa
File: 17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa (raw, json)
Hash identifier: t7Bndxhogmu7nX4xaJwlyj5OgpB58g3Jh4N8RmcY1iM=
Subject key identifier: A6:DB:45:2E:09:9F:5F:A2:DC:11:87:9C:79:33:C1:9A:36:DF:91:21
Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Certificate serial: 010D0C9F4328584D524354C6012F7F6C8D0473C0
Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 16880
IP address blocks: 216.99.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:54:c6:01:2f:7f:6c:8d:04:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=cf1069d8-e853-4479-8e31-387869517ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:df:a1:60:56:c1:c6:5a:87:73:2d:90:2e:
aa:fb:01:06:3d:25:8d:7d:e9:64:5c:26:13:6c:ad:
7f:71:90:a4:52:4b:bc:f2:e6:d8:b6:18:ea:de:db:
66:5a:23:5d:e1:75:90:fa:4b:65:6f:08:12:9f:b3:
04:2f:e2:5f:07:5e:ce:2c:f9:6b:c3:e9:6f:31:88:
cd:d4:8e:33:ff:85:11:df:df:3e:c8:1a:cb:19:cd:
c5:70:a2:ea:c3:7f:3d:61:3d:62:f9:39:d8:e9:47:
47:3c:d5:39:16:f6:ae:64:48:b7:dc:c0:42:82:ea:
48:02:4d:01:03:e4:3d:af:e1:14:a5:fa:5a:f1:97:
8b:92:db:b0:86:de:32:e3:66:f4:e3:53:cc:e9:a0:
a7:39:c7:30:55:80:2c:12:1f:0b:87:62:6e:a4:8f:
fd:c7:ee:06:95:66:1d:e3:5f:86:48:41:32:89:3f:
5d:9b:f6:73:80:13:ef:c9:80:ae:c8:6d:e4:17:37:
a5:f0:45:fa:6f:b9:2c:77:2b:14:e3:1f:d5:b5:6b:
0a:f8:6f:73:bb:d4:50:6e:f4:27:38:e6:00:43:dc:
da:8f:8f:a0:02:09:4e:d6:24:d4:98:7a:0e:68:5d:
d4:fc:1e:fd:62:bd:88:2b:4a:69:07:46:32:cb:45:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DB:45:2E:09:9F:5F:A2:DC:11:87:9C:79:33:C1:9A:36:DF:91:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
X509v3 Authority Key Identifier:
keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.99.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:43:85:51:f5:f6:42:ff:97:06:d3:b3:58:6b:ba:f6:21:6c:
7e:18:8d:b5:2a:f7:b7:9c:19:ba:3f:25:fc:f3:df:99:48:a8:
a4:2b:c5:82:31:4d:8a:1e:e8:6b:07:51:86:73:76:42:8e:4d:
e4:1d:8e:21:a3:77:72:3e:40:90:2f:e1:6e:17:8d:d5:1f:b5:
07:fd:64:97:3b:28:3c:1b:f7:5e:6b:53:81:1e:3b:93:6c:db:
76:5b:c6:3c:89:2b:71:5a:1b:23:8c:dc:4f:44:05:d4:d3:9f:
2b:18:2b:66:5a:9a:1f:a9:ce:8e:9a:83:c0:93:1b:a4:ad:bc:
57:df:c6:44:34:92:f8:bf:7e:9e:4e:3c:98:72:70:f0:18:ea:
10:0c:29:d3:fb:e2:78:d7:a8:d3:71:5d:42:4b:c2:86:7d:a6:
81:80:57:73:72:fb:2d:0a:1a:0e:cd:15:83:b2:da:b0:c6:49:
26:0f:cc:9b:fb:64:f7:ef:97:02:52:60:f8:41:58:fb:0b:da:
1f:90:e2:05:7a:a8:d6:7f:da:f8:4a:19:37:bc:25:1f:d6:26:
4f:cd:a9:3f:44:98:b4:33:e7:73:9e:8f:65:b3:6c:38:2e:26:
40:e1:61:d2:da:13:1f:63:3c:9c:e6:b0:3a:f2:16:f8:4b:67:
7e:fc:33:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:02 2026 by rpki-client