
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3a1edbd2-41d2-36d1-8c15-21f676432ea8.roa
File: 3a1edbd2-41d2-36d1-8c15-21f676432ea8.roa (raw, json)
Hash identifier: hzdW5Bl1QIN/K5QnsTm18kWwWIjP2XyZd4KQ4GomOxY=
Subject key identifier: ED:4B:A2:7E:01:4A:38:60:87:5D:FA:CE:B9:B7:F3:DF:52:CA:2A:D0
Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial: 010D0C9F4328584E4AEF3ABBF6A6D263EE3E9FA0
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3a1edbd2-41d2-36d1-8c15-21f676432ea8.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 14618
IP address blocks: 209.169.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:3a:bb:f6:a6:d2:63:ee:3e:9f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=be51f7c9-385a-42af-964a-bc06384f0f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:bb:fc:88:cb:4b:89:b8:b8:9f:b5:c8:6f:
c3:72:85:76:92:88:fa:48:fe:19:b2:a7:b8:4e:df:
ab:ae:3c:82:5e:76:cb:30:d0:89:5c:68:4e:4e:f4:
90:e6:f3:7d:2b:b7:c8:50:72:e2:0d:b5:bd:9d:2f:
10:92:ea:ba:41:15:9c:d0:cd:d5:db:6e:d9:aa:46:
55:9e:1f:72:e2:eb:f4:c7:9d:24:66:6b:de:c6:22:
37:35:e5:54:bb:6f:42:a7:28:95:f2:68:5e:e9:26:
8c:28:35:00:20:04:12:e1:b2:0e:ec:2c:d7:0d:4c:
af:bc:77:d1:dd:77:20:91:63:63:30:82:0f:4d:ec:
a4:8c:d4:b3:f8:50:27:93:52:e8:28:a0:43:04:4b:
ed:91:a8:04:cb:08:8e:ac:9d:c8:16:85:26:91:a8:
2e:5b:ec:a2:12:1f:56:d8:b9:fc:d4:c9:ba:ab:e1:
9c:90:3b:a8:4f:57:bc:c1:4d:b1:4a:72:43:0d:c9:
9d:51:e7:81:9c:f6:cf:09:b3:da:66:78:09:8d:ef:
e6:6b:99:4d:b7:39:d7:ce:80:87:7d:0e:f9:fc:b2:
7c:31:6e:e0:05:0b:0a:fc:66:63:65:0c:c7:d9:18:
fd:96:f9:91:49:34:49:b4:50:0c:13:2a:e0:da:56:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:A2:7E:01:4A:38:60:87:5D:FA:CE:B9:B7:F3:DF:52:CA:2A:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3a1edbd2-41d2-36d1-8c15-21f676432ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
X509v3 Authority Key Identifier:
keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:2e:60:cb:55:b8:fe:90:37:61:12:58:a2:56:fa:63:43:a1:
51:b7:15:c1:42:fe:2d:aa:4e:39:78:71:e2:b9:55:74:bc:b0:
17:89:ed:19:d3:e7:06:f3:1e:99:31:e3:c8:97:ca:63:71:6a:
b1:e5:91:82:16:50:ae:72:2b:1f:43:e0:d1:fd:6f:03:d1:de:
a4:39:62:d9:5d:3d:b4:7a:a6:e3:75:ec:37:d3:26:bb:5c:58:
92:5a:00:24:a6:23:11:84:98:96:ed:87:6d:a4:14:22:7a:31:
25:9a:fe:94:5f:20:53:7b:e8:53:75:fc:5a:04:69:48:9d:50:
da:46:df:80:bd:95:9c:88:40:e1:9a:0b:ca:a8:7c:a8:66:1e:
a6:a6:24:73:ac:88:ec:39:c4:14:10:7b:8b:84:86:95:01:58:
3d:69:03:df:2b:9c:32:78:be:53:8f:b5:67:e7:74:d2:bf:c4:
dc:0e:1d:69:83:a7:8b:0a:71:2a:44:34:e8:38:bb:3c:ea:09:
f1:26:5e:91:6a:a3:31:4d:08:50:17:89:ab:05:c0:f9:52:69:
1a:1e:de:69:6d:9e:4a:eb:c8:b2:cb:d4:7c:48:32:f5:08:96:
7e:d9:9d:b9:9e:37:ae:ac:96:04:be:bd:6e:5c:46:d4:80:4a:
37:bb:80:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:20:19 2026 by rpki-client