
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/3f49e6a3-f3cc-3f85-bc80-3f7540144af4.roa
File: 3f49e6a3-f3cc-3f85-bc80-3f7540144af4.roa (raw, json)
Hash identifier: sYVvW2fbsLsCwb0Zv5+PHEGU7DN5vmWMMV2dFgzk7Cc=
Subject key identifier: C1:03:2C:3F:C2:30:36:42:46:5A:85:CE:44:C9:97:D2:31:B2:BE:2A
Certificate issuer: /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
Certificate serial: 010D0C9F4328584F7D30C635492207458199E100
Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/3f49e6a3-f3cc-3f85-bc80-3f7540144af4.roa
Signing time: Tue 13 Oct 2026 13:49:46 +0000
ROA not before: Tue 13 Oct 2026 13:49:46 +0000
ROA not after: Mon 11 Jan 2027 14:49:46 +0000
asID: 46606
IP address blocks: 162.253.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7d:30:c6:35:49:22:07:45:81:99:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
Validity
Not Before: Oct 13 13:49:46 2026 GMT
Not After : Jan 11 14:49:46 2027 GMT
Subject: CN=3ac72ce1-4229-4648-9b3f-a130b4774bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:bb:cf:96:14:87:d1:81:92:3b:60:39:e7:
02:c4:02:bc:0b:b6:41:ba:b7:75:88:27:61:85:f3:
80:87:56:6a:ae:0d:d0:24:c7:1e:ce:3f:c8:6d:9b:
6a:c0:bd:79:8b:d6:f2:4c:4a:dd:b1:a4:9c:57:b8:
c9:6b:35:36:be:21:46:74:fb:8c:9f:77:a3:0b:0f:
1d:90:fe:fa:fc:3a:e3:09:b8:5b:45:7d:bf:f4:16:
a8:b6:ea:d6:60:0e:77:56:db:cc:5a:90:2a:3b:30:
a7:d5:b1:ad:5b:98:71:94:08:3a:4a:ce:b0:c8:8a:
35:61:be:fc:7b:b5:ba:f4:a5:ac:af:22:e2:0a:94:
14:39:4d:04:c4:c8:bc:58:5b:de:c9:5d:19:bd:56:
f6:1a:fc:f5:22:bf:9a:3e:8d:fe:0a:72:fe:00:c8:
f8:1f:22:c9:c0:ae:94:b4:21:34:3b:62:8f:84:06:
c2:98:bb:c8:36:93:52:ee:ec:f0:f5:b4:5d:49:09:
76:d2:fd:b7:a7:97:e7:c5:3f:5c:2c:7c:34:e6:65:
71:be:0c:85:fe:dc:f9:e3:47:e3:18:3e:56:49:9d:
b4:dc:51:a6:86:02:98:a7:41:99:bd:f4:4d:26:73:
db:1c:fb:32:ed:bc:e9:7f:58:00:57:5b:a9:8c:f1:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:03:2C:3F:C2:30:36:42:46:5A:85:CE:44:C9:97:D2:31:B2:BE:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/3f49e6a3-f3cc-3f85-bc80-3f7540144af4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl
X509v3 Authority Key Identifier:
keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
sbgp-ipAddrBlock: critical
IPv4:
162.253.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:21:13:9e:a5:35:20:af:e1:52:dd:ae:e3:90:06:e0:c7:fe:
01:07:48:fd:60:ac:e2:d9:7a:a7:37:80:df:29:55:e7:d5:25:
f1:ce:5f:d9:83:ed:33:f7:27:3d:fa:8a:36:f3:09:29:91:ce:
99:9d:cc:4a:d9:50:cd:7c:47:a6:3c:b7:c0:86:3b:32:8f:eb:
66:9e:90:e3:1c:f5:4d:5a:8e:c5:b5:f8:f1:a8:f8:56:b1:f3:
9b:84:be:d3:18:f9:bf:19:55:8b:39:f4:25:f9:db:83:65:61:
5f:27:4b:58:03:f3:e8:fd:24:46:72:29:99:54:93:61:d9:8a:
6e:eb:33:2c:dc:15:1a:e0:5d:84:15:96:a6:90:81:6e:71:b8:
1b:6c:01:67:93:b6:32:5b:26:65:6e:a6:82:68:62:30:e4:d7:
7f:e5:90:f8:ee:47:6a:a6:05:03:27:b5:6d:f4:c2:d5:a7:74:
59:e3:98:68:2a:62:7d:2f:29:c8:bf:d8:17:83:3f:da:d0:19:
76:ef:e3:42:d1:59:63:0c:e1:22:3e:28:e8:42:9d:42:15:8a:
19:f8:d1:c1:9b:4c:68:71:fb:c9:b5:f6:3d:99:16:b2:17:39:
e6:38:a6:7a:4f:23:33:a5:3b:0a:6d:bb:79:51:fd:40:a1:61:
49:6d:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:56:40 2026 by rpki-client