
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa
File: 3b563e0a-43f7-39c7-9202-f9be0846f377.roa (raw, json)
Hash identifier: gDTeY4Pr9X7cRTorWebSiAMJSBeTYIoTs4CGnPslrSE=
Subject key identifier: 00:99:12:46:5E:C8:F9:F3:16:90:E2:D5:5D:35:98:86:3A:A8:C3:28
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584D1B19FDDB61A8A23A851A43BA
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 852
IP address blocks: 206.108.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:19:fd:db:61:a8:a2:3a:85:1a:43:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=2fad3991-b9b4-4ce5-8ffc-d10cbe46061c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a2:38:29:2d:38:cf:94:82:d8:c3:75:71:39:
56:71:27:02:6e:ce:d2:74:08:46:d7:58:1b:87:b7:
cf:33:fd:b4:74:58:ac:83:d8:7f:a1:7c:ed:db:e2:
a7:be:9b:13:e8:bc:64:a0:12:65:f7:df:a8:aa:b7:
d1:9a:37:07:be:2b:c7:fc:87:2c:95:76:c1:a6:58:
1a:e5:16:e5:9a:cc:c8:72:8b:d0:64:12:b6:58:bd:
c7:bc:67:b8:a8:52:ae:27:ed:37:49:ba:8e:0d:32:
65:9d:49:f2:68:57:35:d8:1e:05:00:c6:3e:7a:32:
e8:31:9a:b6:c8:ee:65:4b:ef:23:44:a0:b5:35:5d:
81:9c:24:64:c0:59:14:d3:25:04:88:70:5f:62:05:
67:bb:ea:75:ef:3d:da:f0:34:b9:dc:87:64:9e:5f:
6c:76:11:11:d9:d4:fe:da:2b:95:7c:7f:da:05:65:
a6:1d:c8:b8:4e:37:66:5b:df:ae:80:05:c2:60:87:
a5:19:72:38:51:8e:18:b1:4b:bd:ea:d9:06:f7:45:
01:17:32:46:1f:9c:ae:b7:09:f1:d6:fe:6a:2f:08:
08:a2:f2:cc:30:22:5c:d3:39:62:5b:39:2c:aa:08:
65:5f:98:8b:bc:08:3e:68:e2:1e:02:9e:63:36:5c:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:99:12:46:5E:C8:F9:F3:16:90:E2:D5:5D:35:98:86:3A:A8:C3:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
206.108.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:c7:93:f8:57:c1:21:95:da:68:83:f4:48:1d:50:d9:b4:b8:
72:7d:c5:d5:f8:53:0f:8a:a4:d6:fa:f2:49:f8:0d:03:87:54:
0d:66:de:57:d6:84:00:53:42:f2:fb:b8:31:18:80:a7:ae:ee:
e8:7a:6d:23:16:75:54:d5:36:14:bb:a1:3c:26:c3:d3:5a:49:
08:a6:5d:f8:cc:0b:ce:52:a7:ff:48:5b:16:48:82:57:66:c0:
bd:1d:dd:14:37:c4:59:bc:f9:d5:a0:c2:c8:ec:3a:ca:52:80:
ac:c2:47:0f:90:ce:2d:bd:db:04:58:14:cf:0a:ba:49:41:28:
49:5b:fb:19:ba:0a:51:f0:78:b8:90:f1:34:40:bf:a1:fd:78:
7f:aa:b8:30:f1:82:94:9a:e4:0b:58:23:43:11:1b:b6:6c:0a:
96:0c:60:44:09:b7:17:d9:92:38:96:28:48:c2:83:45:86:a4:
9d:dd:3a:69:db:f5:71:6c:e9:4c:10:98:18:e0:ab:86:bf:77:
9a:4e:c1:9a:47:53:32:d1:a3:f0:ab:4d:af:0e:1e:6f:f7:21:
23:2f:e7:9b:84:52:a8:81:bf:13:ca:24:14:56:2e:82:d2:af:
77:81:3d:49:25:14:d7:e6:36:32:6a:a6:b0:e7:f2:c8:85:fe:
c8:5f:de:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:55:43 2026 by rpki-client