
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c137c965-1ce9-357e-80d7-abddd5adcea7.roa
File: c137c965-1ce9-357e-80d7-abddd5adcea7.roa (raw, json)
Hash identifier: QxYk9te+KGUz45OLfJ3qI1MyIs4jK9A+iZ7UZOZTlBE=
Subject key identifier: D3:88:17:29:29:58:41:F1:7A:30:21:77:B5:43:DE:A0:6E:8D:D8:78
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584EFA131A486673D3BCD6F0D880
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c137c965-1ce9-357e-80d7-abddd5adcea7.roa
Signing time: Thu 27 Aug 2026 14:39:05 +0000
ROA not before: Thu 27 Aug 2026 14:39:05 +0000
ROA not after: Wed 25 Nov 2026 15:39:05 +0000
asID: 3257
IP address blocks: 50.3.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fa:13:1a:48:66:73:d3:bc:d6:f0:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Aug 27 14:39:05 2026 GMT
Not After : Nov 25 15:39:05 2026 GMT
Subject: CN=389767b3-b1ec-4490-9249-222aac05cc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:d1:0d:0d:7b:31:ef:91:49:5a:35:9d:0e:
f5:c6:86:f1:8d:54:08:81:b4:8a:9d:e7:ed:37:ac:
b6:f4:e7:6a:2a:97:d6:e3:2f:b8:cd:8c:bc:80:98:
b9:f9:51:27:d2:8a:91:0d:b7:f1:18:e7:f0:bc:c3:
54:7f:c0:0a:44:3c:28:6c:35:89:6e:de:1a:e5:b1:
e5:71:42:4c:69:5e:2d:58:e8:6b:83:65:3c:57:b3:
e4:0b:e9:a3:b4:65:b6:20:82:a6:5f:54:a0:02:81:
af:31:58:4c:e2:99:29:a8:18:ca:70:00:d5:c1:fe:
ad:92:f5:7a:f6:bf:3f:d1:96:00:2b:89:26:b4:78:
a9:7f:f7:1f:b1:f5:66:49:d8:c4:71:ed:a5:1c:31:
29:d5:02:7a:5c:f2:4f:1a:da:f7:3b:cd:7e:bd:27:
dd:e3:2f:35:af:3f:29:84:c0:8f:9d:53:e9:c3:77:
41:7c:2c:e8:74:4a:13:6d:08:e4:50:f0:95:b4:7e:
08:df:5a:82:af:9f:78:4d:ec:19:b6:0b:ac:51:6d:
39:14:76:c3:44:9d:66:9d:f7:95:55:f4:69:85:70:
0f:1c:86:9c:b5:e4:8b:77:61:47:f7:4f:1f:ab:a6:
56:57:5a:1a:31:71:a4:50:6f:22:2f:63:f0:1b:9d:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:88:17:29:29:58:41:F1:7A:30:21:77:B5:43:DE:A0:6E:8D:D8:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c137c965-1ce9-357e-80d7-abddd5adcea7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
50.3.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:91:94:3f:d8:b8:51:89:0b:ff:85:d0:95:3a:a1:fd:ca:a4:
c0:6c:bc:0b:ec:ab:d1:50:64:f4:03:3d:ce:d4:9f:0f:70:3c:
7c:8a:32:13:20:bd:9c:1d:71:9a:99:60:cd:8d:bd:2c:2c:5b:
37:f3:a5:ef:3c:62:5f:bf:40:1e:c4:6f:2d:b7:8c:76:72:ec:
99:8d:43:8f:f7:df:ff:b7:ad:2a:d2:e0:6b:15:21:ea:e4:0e:
21:00:b5:e7:7d:4b:d1:d9:bb:28:4e:3b:ef:57:f2:de:99:6e:
0d:ac:e6:9b:be:54:58:28:8c:6f:35:28:92:94:e6:cd:d1:dc:
a3:4e:33:6d:cf:8a:31:f8:a8:1b:9d:6b:b0:6f:b7:79:db:61:
83:8a:3c:c6:0f:b2:62:7e:4f:86:3e:62:3b:03:be:15:c3:89:
d4:1e:22:c8:a5:ea:8c:57:99:05:31:d5:e9:b0:37:8f:7e:b2:
7c:05:1b:a0:ec:b5:6a:16:1d:98:f3:90:e6:6c:99:38:56:2c:
6f:44:03:9a:a1:1d:97:70:69:48:dd:d0:42:bb:dd:f6:a6:fa:
35:3e:89:08:ac:35:e6:58:95:1b:67:44:a6:b4:4c:e8:51:66:
10:de:c5:e1:fe:73:60:3e:18:93:51:02:d8:ca:70:b8:a1:98:
8e:a4:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:59:53 2026 by rpki-client