
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1f230f23-438c-3029-9232-7f3ee1529950.roa
File: 1f230f23-438c-3029-9232-7f3ee1529950.roa (raw, json)
Hash identifier: ke9mlRDuKBIg/kQ0+3LgS+xsm9s0ou8fDhWqLjB7srA=
Subject key identifier: 10:8A:C9:5E:6A:BB:2F:83:21:4A:3E:D0:19:EA:A6:24:3B:34:1E:09
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584E577F4368AB0848FE99A6A780
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1f230f23-438c-3029-9232-7f3ee1529950.roa
Signing time: Tue 30 Jun 2026 09:00:12 +0000
ROA not before: Tue 30 Jun 2026 09:00:12 +0000
ROA not after: Mon 28 Sep 2026 09:00:12 +0000
asID: 2914
IP address blocks: 104.140.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:57:7f:43:68:ab:08:48:fe:99:a6:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Jun 30 09:00:12 2026 GMT
Not After : Sep 28 09:00:12 2026 GMT
Subject: CN=efda287e-30d0-42cd-b21c-867650ddbe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:b4:84:49:e3:10:91:d6:77:cd:b3:2e:08:
d0:cf:62:5d:00:64:ba:08:7b:bf:a0:2c:f1:a4:e7:
8a:ce:55:8e:71:71:2c:51:6f:4b:b9:11:c4:9d:5a:
bc:95:06:18:f2:64:82:80:56:cb:62:c3:e9:3a:08:
6c:b8:52:f2:07:50:1a:63:0a:b5:f2:52:2b:a0:53:
cb:48:d1:0e:1a:c7:64:ec:67:d9:f9:6c:2a:b1:0e:
d8:e2:84:1f:b6:84:6b:15:2b:2d:ff:00:e2:5d:81:
34:d4:cd:a6:5f:8c:aa:8a:07:c8:94:13:1b:27:3d:
2d:5f:f7:18:8d:8e:99:fc:c2:60:2c:98:d0:b6:5f:
95:48:27:ab:6f:f8:c5:71:83:d4:30:5d:f5:31:9c:
e8:0b:10:c5:06:e2:58:c8:0a:03:e8:82:20:a2:a6:
e0:c0:2f:c9:be:81:89:e4:32:1c:2e:b6:72:1b:ce:
2a:77:2e:c0:af:c0:1b:db:b4:24:c0:a5:d1:c9:f2:
96:c9:38:2c:ec:90:0a:7b:46:87:20:5b:66:77:83:
33:4c:58:73:ef:1c:3f:dc:40:cc:a9:3d:f8:ca:1f:
db:3d:c0:f0:fd:75:06:92:9b:9b:97:3a:fd:1f:51:
51:21:25:08:46:73:04:e1:46:8a:78:20:29:1a:8c:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8A:C9:5E:6A:BB:2F:83:21:4A:3E:D0:19:EA:A6:24:3B:34:1E:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1f230f23-438c-3029-9232-7f3ee1529950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
104.140.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:e4:41:dc:36:39:80:f1:df:fb:95:4f:2d:8f:f5:c9:9e:2b:
03:51:10:95:ca:68:f1:31:0f:2c:e7:0d:f5:5f:8c:f5:7f:28:
7d:20:6b:69:6d:fa:59:f6:5c:58:a4:f4:63:ed:cc:81:d2:6c:
d7:90:25:0f:e9:77:62:12:68:73:30:4f:4d:c9:5b:6a:a6:c9:
a3:9f:cb:f7:77:cb:af:98:6f:22:90:03:2e:1d:ad:6d:a8:7c:
58:92:3a:b5:d9:78:7f:6c:6d:bd:78:6c:92:bd:eb:7a:5c:25:
a4:8a:c4:d2:19:e6:91:13:ef:d9:6a:7f:df:70:be:42:dd:c3:
1e:c2:eb:ce:95:c4:2f:ee:7f:e8:8a:7d:14:6e:24:39:0b:8a:
b3:2a:2b:e9:bd:bd:6c:34:42:db:6d:00:69:fd:a8:b3:ad:f5:
bc:65:d4:0d:bc:d1:7c:e9:63:ca:66:58:67:e1:26:de:a7:cb:
28:73:69:c1:3f:0a:7c:f3:bd:37:6a:65:ff:ea:19:4d:88:8d:
2d:60:49:2d:7e:c2:f5:2b:02:d5:cb:7d:53:67:3e:ef:06:96:
9c:af:38:3b:e7:6b:b4:a9:1e:46:18:d6:64:13:11:dd:13:bb:
56:08:c9:23:9e:c0:4c:50:c9:da:58:62:62:b1:71:a0:d9:d0:
85:9d:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:30:10 2026 by rpki-client