
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cb0e5b3a-a035-3857-a913-6f1baa208029.roa
File: cb0e5b3a-a035-3857-a913-6f1baa208029.roa (raw, json)
Hash identifier: 4lH5DWlTHpix6k9eWcxBl/DFwfcbar+6nH6+EkHI+vM=
Subject key identifier: DC:A6:5E:E1:8F:75:E5:8D:19:0E:7F:F6:5A:D2:E3:AD:13:9A:76:D4
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F38B26FBC1423AEC365B7AD40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cb0e5b3a-a035-3857-a913-6f1baa208029.roa
Signing time: Sat 19 Sep 2026 01:00:12 +0000
ROA not before: Sat 19 Sep 2026 01:00:12 +0000
ROA not after: Fri 18 Dec 2026 02:00:12 +0000
asID: 2914
IP address blocks: 50.3.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:38:b2:6f:bc:14:23:ae:c3:65:b7:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 19 01:00:12 2026 GMT
Not After : Dec 18 02:00:12 2026 GMT
Subject: CN=efb402ed-ab11-4dbc-9c6f-6c048042df4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:28:29:70:52:59:6e:81:9f:9d:84:a0:90:
54:71:ed:1d:46:f6:6f:b8:90:71:b6:c3:a9:64:5f:
be:6b:95:3c:90:83:e3:83:f5:34:ba:f4:c0:f4:36:
9f:e9:d7:4c:f3:bd:15:37:de:00:6f:19:db:b2:63:
8f:ac:65:93:5d:40:56:f9:79:14:4c:2e:92:9a:23:
ad:8b:c3:56:ce:25:79:6f:92:d1:70:65:b5:9a:02:
12:fb:bc:33:c1:b7:41:a5:db:56:ee:5c:b9:84:34:
ba:c9:22:0a:0f:a3:35:db:39:82:37:e3:89:eb:ed:
49:f8:75:2e:f6:4e:14:a5:5c:f5:42:96:b5:49:9b:
4e:21:0d:9d:1c:dd:ca:97:e4:25:60:bc:a5:f9:0b:
fa:e6:ae:dd:d9:c3:e8:9b:aa:76:83:26:e3:5a:08:
46:05:94:b4:de:8e:91:b9:54:28:36:af:5d:f6:23:
a3:0e:7a:dc:18:63:79:94:b2:f5:c2:7a:d3:39:e5:
22:27:2a:11:84:31:05:95:7d:a7:db:f7:d4:cb:5d:
82:28:e5:6d:40:49:8e:b6:0f:2a:c0:ea:ef:6d:3b:
2d:0e:00:53:ec:f8:27:00:25:1d:a0:2f:13:0d:68:
d1:63:e7:95:cb:87:17:82:a7:56:a2:c2:ec:78:92:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:5E:E1:8F:75:E5:8D:19:0E:7F:F6:5A:D2:E3:AD:13:9A:76:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cb0e5b3a-a035-3857-a913-6f1baa208029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
50.3.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:2c:8c:d4:9d:bb:6d:f3:93:ae:5d:33:bc:2a:69:a5:62:54:
ca:e9:c4:c2:e9:87:81:4a:76:ae:80:65:0d:93:f3:71:41:51:
28:d2:64:09:32:f1:5b:9e:90:27:31:b8:e2:e9:03:ae:a4:97:
6a:a1:56:45:c6:b0:ce:dc:40:15:29:fe:51:e3:16:08:70:dd:
c5:3b:a4:83:59:f4:f2:76:e4:eb:23:b3:64:a8:86:b5:6c:cc:
6d:a6:cd:61:b4:97:be:14:db:2a:bb:36:15:ee:14:58:6d:1c:
0d:46:2d:a4:4a:a1:00:03:d6:27:92:c3:74:98:6c:73:62:08:
fe:2f:1d:d6:47:7b:90:b3:0a:43:89:73:b5:61:d9:58:d2:da:
81:e5:b5:a6:d8:c6:67:bc:67:25:1f:69:71:ab:83:dd:34:3c:
87:2d:53:2d:97:1a:b2:ce:2c:ad:7c:22:1f:c5:d0:12:5b:62:
d2:6a:d0:ab:69:8d:7b:e0:9c:5a:fc:fc:24:18:12:69:66:19:
dc:c2:4e:11:c2:29:82:c4:45:00:3c:66:49:55:8c:a9:d6:c8:
e3:69:61:41:cb:9e:5a:12:bf:53:c8:9a:1c:69:6a:ba:b3:61:
7e:4a:18:97:dc:b3:d3:f3:1a:86:cc:2d:ce:fa:14:a7:da:f9:
e0:d0:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 12:38:16 2026 by rpki-client