
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f327878-34f4-37c7-b9c6-c0434b46273c.roa
File: 3f327878-34f4-37c7-b9c6-c0434b46273c.roa (raw, json)
Hash identifier: pbl5JXNlasUTF0QstzNa8MY2+fyO1pNLwa3/3rNjHT8=
Subject key identifier: D4:C8:4D:65:C6:2F:08:8A:3B:AA:54:53:94:9B:1C:3A:1E:50:E8:25
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584D0D4256C4548943589B66FD00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f327878-34f4-37c7-b9c6-c0434b46273c.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 15247
IP address blocks: 208.38.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:56:c4:54:89:43:58:9b:66:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=0137511d-769e-4363-a723-fa81b7365b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:06:98:e7:37:fe:e2:3c:ba:85:e3:29:3c:
6f:57:20:a5:69:3a:57:bc:ba:5e:f5:0e:32:f2:37:
a0:8b:01:9b:7f:cc:7d:c0:d6:44:27:0a:6e:33:62:
71:f9:e1:2d:e0:8a:01:96:cd:d7:cf:4b:aa:d1:79:
78:91:33:26:73:78:c4:be:be:af:3d:78:2f:28:7f:
c8:8b:98:ec:39:62:8b:f2:99:2f:de:70:fd:88:f2:
5b:04:a1:bf:4a:e1:8d:fa:5a:d1:f2:a7:44:55:d4:
3c:fc:36:6c:10:87:ce:e8:d5:cc:8d:79:d4:d4:30:
6f:f7:a5:03:98:41:bd:c2:8c:ed:8c:e6:dc:30:ed:
b8:6e:ad:01:17:83:fe:24:e6:5d:80:0c:cf:ed:da:
b2:a4:dd:e5:3a:83:04:19:4b:bd:53:4c:c4:ad:4a:
fb:c4:fb:3f:47:bf:a1:e2:f1:10:13:76:96:93:30:
6b:a0:86:bd:d7:c5:a8:fb:d6:e1:f5:94:31:ba:ea:
98:41:79:8f:1f:01:0e:38:02:2e:d2:99:88:6b:32:
8e:50:6c:d4:88:ae:c9:15:8e:bb:3e:f2:49:e0:98:
73:fe:46:2a:41:e0:7b:51:26:db:1a:5e:6b:d4:06:
bf:31:2b:a5:6d:2e:b0:96:4d:4a:d1:6e:c7:ac:2a:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C8:4D:65:C6:2F:08:8A:3B:AA:54:53:94:9B:1C:3A:1E:50:E8:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f327878-34f4-37c7-b9c6-c0434b46273c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
208.38.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:05:4d:db:fc:df:73:4d:ff:85:38:a0:5b:62:a1:d5:00:1e:
46:fd:b4:f3:ef:32:8c:59:d2:08:49:e4:0f:b1:69:eb:1a:82:
60:44:74:3b:c5:d7:ee:1b:7a:6e:a6:6e:23:50:28:3e:36:e0:
63:0b:0d:d1:44:b6:c5:f7:a6:df:34:2b:84:c1:a6:b9:76:bf:
79:b7:1a:33:2a:48:06:45:2d:ce:52:a3:af:04:f1:bd:75:a8:
78:ab:61:54:06:9f:bb:bf:55:2b:79:90:3c:73:95:75:50:75:
b5:e1:bb:6f:b7:e9:91:ad:0a:44:3e:34:cd:25:53:76:b3:86:
f7:72:be:c5:d3:5c:be:50:77:d4:d4:0f:3c:92:55:ec:8c:a7:
fb:26:7b:88:56:a1:ff:67:11:1f:49:cd:7b:12:50:14:b2:87:
e1:49:20:06:f7:3e:db:9a:ad:1b:21:3d:71:1e:5c:f0:cd:a2:
e6:f2:1d:fe:3b:f6:19:0a:33:f7:1a:33:b0:11:64:64:1a:f3:
8e:60:8a:e6:6e:f7:64:da:8d:7b:40:3b:d8:87:72:fd:56:19:
03:f3:0f:64:cd:e7:e1:cc:f6:39:1f:a7:01:d5:f8:8e:8e:b0:
73:e7:b2:0a:93:79:26:ef:1d:ca:79:41:15:3a:10:19:64:b1:
f5:3b:bd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:55:44 2026 by rpki-client