
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa
File: 5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa (raw, json)
Hash identifier: FP4lEzw9dhBpvYihTSxzzBViEr7WGIf9NwqiwqCJ9bI=
Subject key identifier: 1D:89:8B:F8:28:EC:1E:B4:1F:F4:6D:7E:0A:ED:D5:1F:6A:82:DF:26
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584D1F4A0EB245280E05D8B89840
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 852
IP address blocks: 209.171.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:0e:b2:45:28:0e:05:d8:b8:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=ecf062a7-8083-49ae-8ada-1171eaba422c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:7e:2b:5e:6f:bd:3b:d9:ed:bd:41:e9:5b:
b5:10:6f:9b:8e:e2:b8:6b:4f:0b:8e:1e:1f:df:c4:
9d:52:b3:2c:27:2a:7d:38:3d:a7:e3:4e:b5:32:66:
48:b5:e5:05:8c:50:d6:e6:44:d1:aa:11:a2:99:e3:
b9:94:f1:4b:bc:2a:cf:3c:2c:7a:98:a8:51:3e:8d:
81:b1:db:00:23:e1:df:76:5f:98:b8:9e:54:c7:56:
57:59:b2:ca:e7:50:a9:89:71:f2:9b:93:f3:29:b3:
98:b6:51:22:e3:99:84:db:8e:12:f0:38:bf:c1:8a:
ad:f3:32:4c:8e:09:1a:c3:3e:f9:52:b1:b0:3a:cd:
91:b7:62:91:62:b0:11:77:2f:5e:2c:1e:8a:31:be:
83:75:c7:95:32:81:bf:b1:bd:57:10:94:64:ed:4b:
d7:5f:f2:c2:86:3a:94:2a:6d:15:a5:29:e6:2b:79:
0c:e7:07:9c:b1:74:be:64:00:7f:40:e3:7b:3c:36:
10:e5:aa:6a:74:3b:eb:27:57:72:d0:3b:ac:47:46:
43:c7:81:85:1e:e4:5b:ac:58:d0:e5:bf:be:14:2b:
b3:9d:70:b7:06:fd:32:36:18:47:27:9b:65:f0:95:
ef:6d:b9:e2:c4:a4:8b:e9:2d:f9:f5:51:08:35:00:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:8B:F8:28:EC:1E:B4:1F:F4:6D:7E:0A:ED:D5:1F:6A:82:DF:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:da:88:b5:a5:ab:77:34:c2:9c:cb:96:62:66:bb:e3:bf:26:
b6:e0:c7:fe:c7:2f:3a:91:a7:ab:16:e7:6c:f1:be:52:96:2c:
a9:14:0d:f7:49:2c:e1:d1:82:a5:21:aa:b8:11:a8:d8:b1:69:
a8:bb:a9:fd:26:fc:e4:8a:a3:95:35:76:4c:cc:c6:04:5f:eb:
31:62:de:18:b9:54:fd:cc:86:52:3a:03:98:0f:42:07:17:5a:
42:7c:80:ed:d2:34:b6:ac:eb:3a:12:fe:19:8f:e9:cc:d8:fc:
45:04:d6:eb:aa:e6:c4:8b:e4:d5:12:89:21:1c:f9:c4:80:e0:
5d:83:10:e2:b8:14:7f:dd:2d:4a:c9:9c:0c:37:d1:31:f1:7c:
b5:a9:9f:2e:05:f0:53:60:cb:ee:83:73:08:b0:51:8a:71:0f:
af:29:83:a3:f9:f8:22:14:19:23:8a:38:1f:17:f4:2c:f5:20:
d2:49:f8:86:68:e4:f0:fb:97:81:96:42:d6:5f:b5:54:6a:6f:
fb:88:db:18:02:28:f3:a9:e0:2b:ae:f1:dc:bb:f9:f1:90:67:
c6:c0:45:99:b9:68:84:6e:e8:55:9d:83:bb:e0:27:db:01:ff:
85:15:cc:36:8b:d0:fa:20:ca:6b:b6:e9:d1:86:44:d5:94:1c:
de:1e:52:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:52:28 2026 by rpki-client