
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa
File: abf7b840-fd84-31f9-a0f2-6ad264acf865.roa (raw, json)
Hash identifier: ITXz4AWGyruF+ReC+P2Sd0MlwSUJn19IsJH5EJMFLZg=
Subject key identifier: 4A:65:29:6E:85:1A:4A:01:34:46:3A:D9:E7:D7:C1:88:4B:25:1D:6F
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584D60E507729E4A06B96BBFCBE0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 20014
IP address blocks: 64.33.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:07:72:9e:4a:06:b9:6b:bf:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=15a9683e-8d6c-44ab-b65f-b61879dd8337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:ce:dc:61:cd:20:35:89:45:51:33:0b:81:
98:1b:c2:7c:04:8f:8b:68:af:e7:95:55:83:05:f6:
6f:24:b3:30:ba:67:95:99:00:23:1c:ec:d1:e4:f6:
42:ee:c3:46:80:5f:95:bf:40:7b:35:d0:db:25:0b:
8e:cf:12:f6:cc:05:31:5f:40:51:a9:1a:62:d9:c1:
3c:14:e5:3b:60:37:ba:bb:6b:71:6e:a9:a1:41:73:
1e:04:87:d8:fb:cd:6b:99:f0:80:0d:77:a2:c2:c2:
d4:b2:2d:15:a7:cc:33:36:9b:e0:5d:6b:4e:b2:3a:
47:d7:f4:8c:64:f3:93:30:06:fe:eb:80:58:45:b1:
3e:5f:30:e5:d4:21:22:45:a8:ee:d0:da:09:60:ba:
42:a3:13:36:96:a0:37:95:15:93:32:19:3c:37:8d:
44:8f:0d:73:1a:11:27:ef:6b:52:7f:37:e0:ec:9d:
82:91:e8:82:aa:3f:36:4b:80:9c:9b:d7:da:32:10:
c0:77:9f:79:77:9f:c0:a2:9b:b0:73:a4:aa:f0:45:
bf:c9:bc:fb:05:85:98:8b:bf:9c:97:ba:04:53:81:
9b:80:e8:0a:8e:2a:18:05:fa:c2:30:01:43:b1:76:
b9:d2:57:59:d4:5b:25:66:ec:f4:f2:f0:ed:48:26:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:65:29:6E:85:1A:4A:01:34:46:3A:D9:E7:D7:C1:88:4B:25:1D:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
64.33.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:9f:40:30:21:c6:9a:ed:38:16:76:a1:2c:8a:3a:c4:15:31:
09:f4:32:b9:54:3c:e7:18:79:66:ed:aa:55:70:8c:9e:48:04:
7d:fd:c7:e9:f6:bb:60:37:69:d4:f0:f3:9f:a9:44:f3:a5:31:
37:65:3c:fa:0f:c8:7a:0f:9f:d8:95:53:2f:ed:aa:00:62:d1:
a1:d0:fb:97:56:e3:ff:32:95:38:87:59:ad:a9:5c:c9:6e:01:
3d:b4:c7:15:d1:7b:bf:70:14:0a:79:2a:dc:b0:e8:1a:00:61:
77:6f:b0:bf:ce:d0:24:62:9a:ba:86:13:28:3d:d1:bb:b5:75:
31:47:5f:65:a4:fa:39:98:23:58:92:fd:91:55:50:1b:2a:d9:
61:3a:f6:90:1d:c9:4c:5d:b4:26:ee:7f:88:fc:d8:d0:8a:2c:
04:41:c3:df:4a:05:87:96:49:0f:2e:60:ed:56:1f:4b:0d:ab:
5f:71:8e:49:5b:1a:20:71:74:cc:7b:46:0e:64:23:d9:a0:85:
a9:98:26:7b:93:c1:1e:5a:b5:41:20:71:2c:8b:77:50:49:69:
34:06:2e:a4:9d:f8:c5:82:ee:c8:54:13:7c:be:1b:06:a6:93:
52:d4:83:07:b2:ee:5d:51:ec:41:76:15:75:36:43:41:04:43:
b1:1d:90:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QdynkoGuWu/y+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
MTVhOTY4M2UtOGQ2Yy00NGFiLWI2NWYtYjYxODc5ZGQ4MzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xHO3GHNIDWJRVEzC4GYG8J8BI+LaK/nlVWD
BfZvJLMwumeVmQAjHOzR5PZC7sNGgF+Vv0B7NdDbJQuOzxL2zAUxX0BRqRpi2cE8
FOU7YDe6u2txbqmhQXMeBIfY+81rmfCADXeiwsLUsi0Vp8wzNpvgXWtOsjpH1/SM
ZPOTMAb+64BYRbE+XzDl1CEiRaju0NoJYLpCoxM2lqA3lRWTMhk8N41Ejw1zGhEn
72tSfzfg7J2CkeiCqj82S4Ccm9faMhDAd595d5/Aopuwc6Sq8EW/ybz7BYWYi7+c
l7oEU4GbgOgKjioYBfrCMAFDsXa50ldZ1FslZuz08vDtSCbbXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEplKW6FGkoBNEY62efXwYhLJR1vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWJmN2I4NDAtZmQ4NC0z
MWY5LWEwZjItNmFkMjY0YWNmODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEifQDAhxprtOBZ2oSyKOsQVMQn0MrlUPOcYeWbtqlVwjJ5IBH39x+n2
u2A3adTw85+pRPOlMTdlPPoPyHoPn9iVUy/tqgBi0aHQ+5dW4/8ylTiHWa2pXMlu
AT20xxXRe79wFAp5Ktyw6BoAYXdvsL/O0CRimrqGEyg90bu1dTFHX2Wk+jmYI1iS
/ZFVUBsq2WE69pAdyUxdtCbuf4j82NCKLARBw99KBYeWSQ8uYO1WH0sNq19xjklb
GiBxdMx7Rg5kI9mghamYJnuTwR5atUEgcSyLd1BJaTQGLqSd+MWC7shUE3y+Gwam
k1LUgwey7l1R7EF2FXU2Q0EEQ7EdkHo=
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:54 2026 by rpki-client