
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/12b1ecb8-b779-358d-a49a-235a7e7cdfbb.roa
File: 12b1ecb8-b779-358d-a49a-235a7e7cdfbb.roa (raw, json)
Hash identifier: Lb4lB+fFemFtOXTrgfR0JiedUNkHT1Azo/RdqDK4Cug=
Subject key identifier: C9:95:CC:0F:91:4A:17:DF:94:74:2B:EB:D3:52:66:F1:13:02:7E:EC
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584D19B4AC2A19A6E5323F62D3C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/12b1ecb8-b779-358d-a49a-235a7e7cdfbb.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 852
IP address blocks: 209.20.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:ac:2a:19:a6:e5:32:3f:62:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=7c3e22e4-52ff-4213-ab38-5e19cb3fd33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:45:8d:51:b4:d4:94:72:06:94:8c:77:cf:
14:fd:27:f2:6c:a0:5e:14:4e:26:b7:06:1a:78:ab:
59:50:06:4a:e3:87:dc:b7:0d:f1:61:1a:b0:5c:ee:
02:db:e0:a5:ea:05:02:9c:7a:3e:22:c7:b0:d2:d4:
71:25:bc:0c:72:14:9d:30:4e:ed:9b:20:f0:5e:4c:
74:6f:a0:35:36:26:1f:fe:37:8c:db:d0:b4:20:79:
7a:4d:33:90:aa:84:4f:04:d9:d9:4d:9a:bd:8f:1b:
5d:93:3a:39:a2:a9:dd:04:a8:6e:56:d4:f5:23:97:
8c:7f:72:d0:bc:5d:0c:22:23:e4:50:fe:d0:9d:77:
42:07:07:33:29:51:d9:54:97:23:4d:6b:bb:12:77:
a9:e3:fa:bc:75:88:78:6d:58:11:4f:f1:51:b3:51:
a4:e8:d3:4b:e7:05:70:67:35:92:54:30:87:9b:bf:
41:cc:7e:0a:e0:eb:c4:3d:c3:d1:59:cb:a5:1a:4a:
0d:75:6b:d6:98:a8:7d:e7:85:72:f3:11:4b:b8:d6:
7c:5d:3d:94:8c:34:74:b0:74:c7:1e:64:5d:bb:38:
f2:27:73:93:8b:c2:32:82:9c:25:25:eb:fe:a6:ab:
d8:df:27:54:e1:36:3c:f9:7b:20:89:e6:97:3b:9a:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:95:CC:0F:91:4A:17:DF:94:74:2B:EB:D3:52:66:F1:13:02:7E:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/12b1ecb8-b779-358d-a49a-235a7e7cdfbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:ff:a3:e2:74:0d:65:e7:5f:21:6b:9c:8e:d0:cc:2e:17:bc:
f8:9e:28:57:ea:fe:43:1c:0a:d1:23:a3:08:29:ec:af:ef:09:
8b:9a:0f:51:fd:8f:95:52:f7:39:42:a0:64:76:3a:2b:7e:f3:
f3:52:b7:40:80:10:00:3f:dd:e8:78:f7:f1:50:45:a6:de:6d:
c2:12:ba:47:89:28:80:11:c8:46:66:1b:4a:fc:e5:8e:74:46:
81:ad:39:b0:f5:04:da:28:07:f6:e5:0b:0a:e5:c7:f9:14:b4:
15:8d:d7:08:2e:58:92:53:00:3a:fe:3c:16:e5:50:b1:4a:a9:
95:3a:4f:bb:45:6b:41:0f:df:52:8d:05:c2:41:bf:7a:6d:f4:
34:4f:62:3a:e1:d6:ae:d0:88:4b:b6:d8:7d:be:96:1a:6e:36:
5d:a2:58:0b:60:ad:65:ee:7f:ed:27:4e:ae:c4:64:b4:b6:90:
c3:2f:66:3f:0b:13:55:a9:c4:72:96:86:23:37:1e:21:27:38:
b8:8c:c3:c0:ab:8e:e6:45:83:cb:6d:6b:68:8d:71:30:37:85:
b5:d7:1e:0b:77:6d:ef:dd:ce:3e:16:b2:6d:7f:6b:09:c5:34:
b8:8a:0d:c2:07:9c:ce:97:61:4c:cf:ea:18:e8:af:d0:44:e1:
f6:78:82:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:53:06 2026 by rpki-client