
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa
File: 3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa (raw, json)
Hash identifier: MKCiokLdcmO3eOTksORnPVxo4arf7U5tLO+NaSF3SCg=
Subject key identifier: 70:10:73:90:C0:99:89:0B:A5:5E:F5:52:63:35:EF:75:31:3A:94:C1
Certificate issuer: /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial: 010D0C9F4328584D0EA7B43DDFEA9441AFDFFC40
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 400025
IP address blocks: 136.228.46.0/24 maxlen: 24
136.228.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 15 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:b4:3d:df:ea:94:41:af:df:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=b7de65fa-ad43-42a6-8b41-ebe75496f28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5d:99:2e:aa:fb:b7:f0:51:5b:ab:34:f2:4d:
5a:72:7a:dc:c9:5b:33:22:52:01:63:3d:0a:95:8e:
cd:a1:69:05:2a:f5:62:a2:aa:cd:1b:bc:f1:1a:77:
a3:53:ea:16:92:15:dd:06:c9:6e:ce:5a:b2:b2:f8:
f3:ba:74:ff:2e:20:83:ae:07:18:1b:df:2e:2d:36:
77:ba:7a:f0:71:fb:40:a6:42:32:13:a7:09:c9:a1:
76:cc:18:67:19:10:79:d0:65:40:a9:49:7f:6a:cf:
3e:95:43:83:46:46:7b:1e:eb:12:9e:c2:4d:6b:d9:
6b:cf:e0:87:a6:dc:97:98:5b:40:b6:a2:98:7a:4d:
e9:c5:b7:24:7c:d5:54:0c:40:da:ce:75:76:72:c2:
36:1e:0f:ad:cd:c5:60:f7:8b:1b:95:59:a0:56:ce:
02:59:e8:33:26:e9:ee:12:3e:7f:40:ae:c3:b1:12:
84:ac:43:67:ea:54:60:04:3e:b0:36:03:e0:a7:6f:
01:ea:f5:b2:0c:46:ef:3b:3c:c4:ee:98:97:dd:58:
83:ab:79:52:42:b5:ce:72:d4:8e:ba:82:56:75:d5:
9f:b4:71:fc:40:eb:37:90:6e:4a:c8:89:33:fc:9c:
81:a0:5b:04:26:18:98:a1:0b:5e:02:83:f3:65:97:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:73:90:C0:99:89:0B:A5:5E:F5:52:63:35:EF:75:31:3A:94:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
X509v3 Authority Key Identifier:
keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.46.0/24
136.228.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:9b:be:72:bb:54:56:f8:4d:f3:e8:b4:53:e9:dc:c4:6a:2f:
7b:e8:bd:77:ed:3f:27:a6:c3:7f:4b:a7:8e:fc:c3:25:50:ba:
68:da:81:7f:9c:82:ed:88:f8:bc:57:35:d6:6e:c4:ce:b4:c2:
03:8f:08:b5:61:f1:21:a3:15:54:d2:0a:fd:7e:0e:80:e3:c8:
4a:33:57:4f:3e:da:36:ab:70:20:fe:dc:3b:89:f1:e2:5e:b9:
74:5c:c8:3a:f3:42:ba:18:34:d5:b8:be:0b:ef:24:21:96:82:
84:7e:8d:a3:bf:c4:e6:c2:d4:ec:45:e8:25:09:89:fb:33:46:
47:be:a8:1f:a3:0c:e5:87:1d:47:78:75:a9:de:e8:99:92:1f:
76:de:45:85:f5:3f:18:a4:01:8d:2b:0f:de:fb:00:0e:31:d7:
d1:f0:5e:cc:cd:ac:45:8a:c1:ba:0e:5e:a4:be:30:08:53:2b:
d8:29:9b:46:5f:8d:3f:24:81:b3:e6:35:78:d1:86:47:20:27:
df:e0:f9:5c:ec:19:29:52:44:04:a9:2b:aa:af:63:3b:7b:90:
84:3b:bc:20:88:c6:be:d5:b4:87:13:4d:1d:6e:77:89:86:28:
80:21:11:37:34:56:cc:35:2c:ce:8f:bd:63:e5:39:f0:97:d8:
9b:24:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 13:51:09 2026 by rpki-client