
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/52f85ce9-86f9-3e13-91f3-8aaadfe8bf3c.roa
File: 52f85ce9-86f9-3e13-91f3-8aaadfe8bf3c.roa (raw, json)
Hash identifier: nDY2S1Rsn0foK72sElDoU9SN94rimJzbJJlPcRStJ2w=
Subject key identifier: 78:33:13:F9:CE:86:0F:48:F2:E4:D2:79:30:C2:DE:F7:D5:1E:AE:D9
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584DAD1C81044918BF86EEA97910
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/52f85ce9-86f9-3e13-91f3-8aaadfe8bf3c.roa
Signing time: Thu 30 Apr 2026 08:13:51 +0000
ROA not before: Thu 30 Apr 2026 08:13:51 +0000
ROA not after: Wed 29 Jul 2026 08:13:51 +0000
asID: 402298
IP address blocks: 104.140.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 02 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:1c:81:04:49:18:bf:86:ee:a9:79:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Apr 30 08:13:51 2026 GMT
Not After : Jul 29 08:13:51 2026 GMT
Subject: CN=fbefde29-562b-407e-abab-b3990135c5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:86:61:9b:d0:74:42:13:33:d6:fb:83:d5:
f8:f7:e2:c7:76:1a:b5:6d:45:6d:08:ab:64:39:79:
1c:9b:40:2d:9e:67:04:87:f6:a3:e1:28:e8:23:81:
a1:e2:77:fb:57:a6:8a:42:13:5c:63:d4:02:ae:0c:
8f:cc:59:27:aa:5c:24:1f:29:1e:a1:7e:a7:d0:af:
c2:a0:cc:81:82:d7:e3:79:16:21:c1:a5:c2:e5:7b:
71:9f:61:11:71:0d:ec:05:b4:d7:61:37:2d:ad:f8:
a2:3e:e4:fc:2d:b4:a9:a0:3d:86:62:9e:d8:3f:f8:
64:5f:af:cb:a0:ce:7c:63:ac:5d:58:97:14:3c:2c:
23:d3:0b:15:10:b9:2a:03:eb:1d:b2:27:5f:e5:2b:
e0:9d:36:7c:5b:27:9b:e6:c8:03:0b:86:c1:44:96:
b2:75:3e:ec:0b:7f:9e:c1:eb:78:ed:20:93:bb:bc:
d7:62:78:c8:d6:01:f0:48:b1:05:f6:5d:92:d5:12:
18:a7:41:ab:ef:d0:41:cd:30:ab:80:e0:90:ce:e4:
aa:a8:2d:36:ac:b5:15:c2:75:5f:52:f0:6d:06:68:
e8:f8:d4:fd:3b:ce:8e:4d:bf:59:a8:8e:6c:b3:12:
1c:22:c6:d2:bd:cc:3f:93:df:a0:38:6c:e9:7b:13:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:13:F9:CE:86:0F:48:F2:E4:D2:79:30:C2:DE:F7:D5:1E:AE:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/52f85ce9-86f9-3e13-91f3-8aaadfe8bf3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
104.140.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:88:76:39:54:c2:0d:0f:e6:77:96:e1:5b:b9:79:6e:98:d3:
db:6c:2c:62:b2:29:9d:03:4f:48:c4:55:8d:56:91:d8:ef:0b:
b7:ed:0b:5a:09:ad:53:c2:27:c4:90:c1:3b:75:79:38:1f:3b:
81:df:08:7b:76:28:50:28:b7:da:8c:4a:c9:f8:e5:cb:9a:1d:
0a:77:b4:1d:8d:b9:20:9b:a4:12:f9:ef:0b:01:9a:22:6a:94:
50:74:89:2f:e1:30:2a:f1:ac:92:52:96:ac:48:c0:0e:b9:7a:
76:fd:63:04:2f:53:99:a8:39:e5:3c:55:88:ad:b7:ce:60:66:
31:33:df:06:8f:c5:e3:85:1a:54:87:f9:90:0d:cb:eb:cd:ae:
6c:6f:78:1e:b4:f8:71:1e:1c:0d:35:c5:8d:e9:5f:7e:0e:0b:
72:78:30:83:17:55:a6:c4:26:71:8b:eb:1a:dd:a0:39:29:c9:
02:db:1a:fb:85:ee:d9:96:a7:27:15:b0:99:da:32:bc:30:79:
f1:ea:2a:74:ba:03:43:6e:51:3b:b8:ec:d3:96:bb:3e:37:ee:
36:11:72:44:d8:c1:bc:01:0a:52:cd:14:43:cd:20:e2:41:99:
be:6f:c1:74:a7:4f:df:18:73:66:e1:a4:80:a8:16:e8:d4:07:
f3:7c:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:26:44 2026 by rpki-client