
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8c0b0b9f-e79d-33f6-967c-d2d14c2cd85a.roa
File: 8c0b0b9f-e79d-33f6-967c-d2d14c2cd85a.roa (raw, json)
Hash identifier: E58Fb7mwEtiVP09lfZxE2FOu4wON33i8IDnuLr3+9Vg=
Subject key identifier: 9C:3A:F6:C7:A7:3C:3B:FE:01:9A:01:8B:84:67:02:42:2F:3E:BF:49
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584D19B4AB55087DE0AB276E5C48
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8c0b0b9f-e79d-33f6-967c-d2d14c2cd85a.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 852
IP address blocks: 209.115.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:ab:55:08:7d:e0:ab:27:6e:5c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=e8ab00b8-5916-4602-893b-4d27d47bf865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:85:03:6d:62:4b:8c:1e:20:00:51:53:9c:
f5:f8:07:b6:b8:4e:3d:7f:d6:b3:66:a6:17:8e:93:
00:25:f4:c2:a7:f3:01:62:d1:f4:10:f7:e6:43:4d:
54:b5:b2:db:1c:66:42:89:b1:6b:dd:39:03:cb:bc:
1d:73:02:1f:34:e0:cb:02:09:e1:25:b0:35:d8:95:
b9:12:2a:fe:63:24:22:d9:fd:fe:23:c0:50:27:f7:
7e:21:ee:51:48:b3:54:dd:f6:dd:76:02:ef:96:5e:
d1:f3:8b:c0:97:1a:f0:1c:2e:32:52:f2:09:6b:ed:
b9:76:76:9a:38:ff:2a:4a:1d:ad:41:e7:c1:e4:ce:
ab:51:9f:92:51:d7:8c:fc:07:d1:b0:e0:6c:3c:7e:
c2:16:f7:b4:64:a4:c8:75:57:37:1d:f6:62:19:3a:
20:96:44:0a:d8:b5:c5:66:4e:2d:51:64:8c:5e:ed:
e3:a9:9a:76:6d:2a:56:ce:18:23:34:32:b9:6b:56:
89:e3:38:47:c1:30:b8:45:cd:05:7d:fc:76:89:81:
64:5b:33:4f:32:00:97:fe:4b:64:ba:36:cf:73:2e:
48:74:f4:e4:5c:bc:dc:ff:0b:d3:96:2d:0b:ac:e1:
e6:17:5e:ed:9e:d2:f3:36:ca:cc:32:9b:17:c3:2e:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:F6:C7:A7:3C:3B:FE:01:9A:01:8B:84:67:02:42:2F:3E:BF:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8c0b0b9f-e79d-33f6-967c-d2d14c2cd85a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.115.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:4b:ba:e7:18:9f:65:3c:88:ad:b2:cc:49:d9:1f:0f:89:32:
d3:ff:81:fd:8d:0b:6c:a1:72:18:0a:27:b1:dd:4a:4b:07:07:
1b:7d:0c:c5:d5:d6:96:ef:7b:07:1c:81:12:1e:4b:ca:dd:cf:
96:7d:a3:27:6e:73:b3:5d:b7:f6:f3:26:c5:16:60:0e:f7:de:
cd:9c:b9:76:31:16:9f:db:ed:43:78:1a:b2:91:55:33:19:3e:
26:92:10:e9:6e:8f:89:10:34:5d:e0:5d:7b:ab:4b:16:bc:0a:
f4:e6:6a:47:bb:3e:dc:28:ea:cc:22:76:7c:0e:f7:9c:6f:ad:
57:86:ff:2f:92:f9:ab:07:fd:dc:18:3e:c1:3a:b2:af:58:f1:
19:bb:9d:fd:7f:d7:d5:42:35:57:a1:70:ca:44:89:b8:98:7c:
96:10:05:8d:72:94:6d:05:9f:1a:22:a5:ff:cc:55:0c:5f:10:
7a:64:d4:f8:10:32:75:d5:16:c1:fb:d1:36:e8:d2:c9:ef:56:
bc:4c:eb:54:fb:c9:07:cc:34:3e:ba:9e:1f:99:8c:12:e1:07:
c1:6f:d4:c7:be:9f:1a:15:49:f9:b2:1a:b3:a5:93:cd:78:41:
97:69:a7:bc:ab:19:58:fd:c4:e7:c3:b0:9e:0c:31:04:e1:d4:
67:a2:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:51:52 2026 by rpki-client