
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa
File: 30baad33-ed81-3ee8-9ad8-d03d892b9187.roa (raw, json)
Hash identifier: XLBe0KbZKdJVXMQkKoel+drtOuj88+8T3Suf0mgGq54=
Subject key identifier: 99:E0:07:CB:BB:AA:2D:A1:F5:36:26:98:E1:12:47:92:EC:5C:AF:37
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584D1B19F9C6C6C41A4621F5E6C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 852
IP address blocks: 142.169.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:19:f9:c6:c6:c4:1a:46:21:f5:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=8de7e9e3-b96d-40d6-bb39-177ea43a1107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:b1:82:c7:be:f4:e8:14:13:73:77:62:d8:
da:69:a4:e6:5b:0a:23:08:83:40:46:e9:90:55:f0:
88:47:c6:9c:d1:42:91:88:b3:3a:67:3c:2a:08:26:
86:a2:b2:d3:33:c7:cc:ff:21:d5:26:96:b7:52:20:
1e:d8:cd:5b:d4:3f:7c:6b:94:69:fc:db:81:52:32:
3b:ff:53:f6:eb:bf:1f:0b:a5:8a:f4:e1:19:53:18:
31:f2:70:23:39:4a:ad:68:ff:8f:73:0a:d1:70:74:
9b:70:09:9e:b1:51:cf:2f:64:76:f6:23:ac:63:4f:
c9:29:77:94:73:c0:a0:7a:25:f9:e7:ae:fd:9c:12:
2e:a0:30:2a:8e:9b:49:67:b1:23:12:7b:8a:53:48:
10:33:64:34:e9:cc:33:3e:51:bf:75:4f:cf:49:3e:
57:46:c6:97:dc:d1:b3:e8:ca:41:70:fb:ba:36:95:
27:54:59:57:e2:a0:f9:c2:26:42:49:d8:52:2b:76:
64:33:5e:58:18:69:0e:d2:8a:dd:80:37:b9:37:be:
0a:ef:95:2e:f3:b6:03:1d:17:7d:95:1c:d6:cf:03:
69:1f:36:98:13:0a:6e:66:97:d7:ab:cc:2d:ed:8a:
c8:39:06:70:f0:d0:ac:dc:b1:b9:bf:b4:3c:f3:68:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E0:07:CB:BB:AA:2D:A1:F5:36:26:98:E1:12:47:92:EC:5C:AF:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/30baad33-ed81-3ee8-9ad8-d03d892b9187.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
142.169.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:6c:06:2c:c0:96:de:ec:f2:5c:c4:92:bd:a8:0d:67:5a:a2:
e5:73:e0:b2:20:06:88:2e:7f:b9:65:7d:a7:65:a0:7a:84:69:
f0:37:0d:eb:55:24:b4:74:e8:b7:04:1b:55:a4:a5:1f:a2:5b:
fa:d5:b0:6e:94:c7:55:e5:e4:04:66:93:c9:6b:4e:f3:67:cf:
70:4a:92:5b:d8:6c:80:22:6d:98:f3:97:11:82:e9:fd:52:c6:
23:f0:32:d8:33:b8:c9:f8:05:4f:4c:75:f2:23:a5:3e:0b:e5:
5a:82:c8:60:f6:d9:fc:00:d4:c4:e7:13:72:09:c3:38:54:e3:
48:29:2d:ae:35:b6:ab:28:e0:95:05:8a:12:78:b8:21:98:7f:
94:72:66:b2:23:b7:c3:6b:2a:24:a1:f6:51:13:d6:28:c3:43:
95:e7:d2:11:29:92:fa:1d:01:5c:83:e8:3a:5a:b5:8f:90:93:
0b:c8:ca:cb:c5:37:4b:a5:94:de:57:d4:77:9f:fe:9f:ed:81:
74:35:51:c5:fc:b7:38:de:32:5b:f5:ec:e5:9e:03:95:46:21:
6c:50:ff:d1:50:85:65:97:45:b2:23:e0:d8:9b:b5:08:d8:73:
f0:77:48:e7:ff:35:cc:a4:00:da:33:39:f4:bc:72:5c:5a:34:
e4:92:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:53:46 2026 by rpki-client