
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f56ecfd0-d483-386c-b874-cb34a75e13fb.roa
File: f56ecfd0-d483-386c-b874-cb34a75e13fb.roa (raw, json)
Hash identifier: 5Lxurq/H0os2TLLQvf0psCMNiVxBiNXYzjScOJDNp2U=
Subject key identifier: 0A:50:66:8E:B7:A0:20:20:DF:E3:A8:64:21:46:E9:5C:B3:20:ED:2F
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584ECBD1C2E7A27F30CD7943A880
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f56ecfd0-d483-386c-b874-cb34a75e13fb.roa
Signing time: Tue 11 Aug 2026 01:00:11 +0000
ROA not before: Tue 11 Aug 2026 01:00:11 +0000
ROA not after: Mon 09 Nov 2026 02:00:11 +0000
asID: 2914
IP address blocks: 170.130.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cb:d1:c2:e7:a2:7f:30:cd:79:43:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Aug 11 01:00:11 2026 GMT
Not After : Nov 9 02:00:11 2026 GMT
Subject: CN=e4c68530-442a-4c78-b2a7-a0cfbcc18c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:e6:70:3f:47:8b:88:ef:c2:84:60:7c:f0:
33:b4:64:8d:a2:ee:94:35:da:4e:5f:27:41:7a:70:
79:38:df:fc:6b:6b:2b:aa:22:35:fb:b2:c3:ba:d7:
9e:34:23:ff:e7:a2:3f:42:fa:fc:13:21:36:bd:ec:
5f:1d:5d:88:78:76:1e:77:c4:d8:50:8d:ac:e8:c9:
84:34:54:b5:e4:95:57:4e:d2:6f:0e:c5:f6:7b:73:
48:79:23:b9:19:51:7f:ad:8f:17:08:72:e7:64:34:
a9:c3:91:10:b5:78:cf:a6:45:1a:3e:f9:d7:0b:28:
46:01:42:ff:46:42:62:3f:ac:74:ea:fa:ad:ba:02:
51:0c:1e:0f:00:1d:3c:e8:80:4d:3e:b8:32:b5:fa:
83:3f:94:cd:f6:2b:cc:5c:f4:8f:fa:46:3d:ad:c2:
26:ef:a7:c8:c5:c5:cb:d8:ee:ec:ce:e4:47:bb:40:
0e:17:74:9b:7e:a5:2d:42:11:44:fb:6b:ee:26:a0:
85:08:1b:51:3f:cb:e5:30:b5:e3:50:59:b6:09:74:
cc:10:c0:10:2d:9d:da:fe:0e:0f:72:f5:2f:d4:c3:
85:c7:72:1d:56:e2:f0:6e:b2:7a:f7:3d:58:17:3c:
40:ce:bd:d2:29:1f:da:93:3f:4c:80:45:85:42:29:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:50:66:8E:B7:A0:20:20:DF:E3:A8:64:21:46:E9:5C:B3:20:ED:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f56ecfd0-d483-386c-b874-cb34a75e13fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
170.130.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:42:65:88:50:1f:90:92:4a:7e:47:20:5c:4d:45:aa:42:7d:
b6:27:55:c3:09:e1:0c:48:05:00:6a:6a:99:1e:ab:3e:48:de:
f2:f0:21:1a:81:51:ce:2a:9f:cc:77:d7:c9:57:3c:bc:86:44:
d4:a5:d8:99:d4:e2:f1:1c:89:e6:c9:44:31:4e:46:07:ea:9b:
50:48:c8:47:4d:2d:35:9f:ff:e3:2e:ae:ac:b2:ac:99:6d:7b:
7b:1d:7f:5f:94:f3:57:2a:d3:13:d2:3b:08:2a:84:88:2e:48:
d1:22:62:d5:2e:6a:7a:1a:01:dd:16:38:0e:f7:a5:d8:88:c6:
e1:82:75:0f:3e:d6:41:4a:e8:f7:7e:9d:c9:9e:15:01:ab:49:
8a:f0:77:65:00:d1:44:e8:b4:76:2a:f6:4e:b7:9d:41:ae:4b:
c8:a0:93:db:05:c9:fa:30:61:b2:52:78:5f:ee:20:07:28:d5:
20:b6:1d:c9:45:a5:89:94:1f:74:c0:ac:0f:a0:02:9c:a1:bd:
09:f3:df:e0:08:9c:12:c7:79:9a:6c:a4:1c:6b:a2:ba:fc:ac:
cf:52:a3:01:63:f6:1c:54:0c:81:4c:09:35:ce:83:e6:41:4f:
cb:1f:d7:e0:16:62:f8:77:d0:25:54:11:d9:93:3a:fe:05:9d:
ce:69:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:08:46 2026 by rpki-client