
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
File: 3758c344-8618-3225-b26f-acd90e5ffeae.roa (raw, json)
Hash identifier: twdNhVjgkEATteJIKMXq4YxdcPQMdlwEPzxX2G0WiZQ=
Subject key identifier: 3D:EE:D4:A9:DA:70:52:7D:58:59:97:DB:B0:36:E2:67:58:B0:67:E0
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328584D91C0012C9BA0F301D2B5D280
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 14618
IP address blocks: 192.175.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:c0:01:2c:9b:a0:f3:01:d2:b5:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=075ba73e-6940-4cf6-ad05-9eb5454d7ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:0b:33:54:0a:ec:f0:91:6a:b3:d2:67:01:
b8:aa:62:82:dd:84:68:8f:a7:a7:33:7f:ab:43:9a:
33:41:07:dd:d5:9c:b5:92:be:e6:d1:23:22:55:1b:
e1:ff:d4:08:46:08:bb:01:96:b3:72:ad:c0:cd:fd:
a3:38:4c:59:3c:f7:34:ce:2e:95:13:37:18:5a:a7:
3a:ac:01:89:49:3e:4b:d8:ed:2e:63:ef:01:5f:00:
ef:6b:3b:81:36:0b:4a:d1:e5:62:9b:83:2f:21:3f:
eb:19:cf:10:b7:14:38:35:33:fb:2e:91:f6:4e:0e:
d2:19:87:18:10:85:94:d3:90:e2:7e:18:63:29:d7:
7a:52:ef:a7:ad:7f:20:df:27:4a:40:1b:d9:eb:24:
51:b8:cb:7b:1c:84:d1:6f:7a:b4:10:d5:89:78:2a:
67:db:19:e5:fa:45:f6:f2:d4:d4:48:61:43:8d:2d:
c8:6a:e7:6d:64:76:7a:f7:42:cd:c3:02:6e:8f:72:
2e:3f:74:af:e5:ac:37:a7:d0:9e:f8:fa:d4:bc:0d:
55:c7:8a:30:aa:68:92:bb:a9:25:0a:fe:8d:f5:be:
7e:40:62:d1:58:61:e9:c4:47:9b:18:cd:e7:c4:f3:
09:49:0e:57:8a:9f:d8:8a:06:a9:c7:7a:8b:8a:b4:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EE:D4:A9:DA:70:52:7D:58:59:97:DB:B0:36:E2:67:58:B0:67:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
192.175.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:d0:72:c5:99:ae:e5:db:a2:2f:16:73:9d:1a:2f:86:50:28:
88:27:1d:3d:70:39:2c:cd:72:2e:e5:9f:7d:53:4a:c4:e4:a6:
5c:21:d1:72:94:5b:2c:bd:1b:d5:d0:ca:2c:01:98:5b:c1:fd:
74:2e:34:7d:48:a6:e1:cf:ed:00:18:00:04:c6:74:09:a9:76:
39:61:76:af:11:4e:0a:d0:b2:ff:c6:3a:b6:d4:70:4c:66:92:
f4:4d:28:f3:89:5c:b9:51:3a:0a:8f:1f:26:48:99:20:0a:81:
ce:e3:6a:50:20:df:a3:dd:9d:09:9d:f7:4e:4e:8f:ac:4e:d7:
d8:e2:2e:ad:36:d2:3f:69:6d:8a:81:ba:d5:80:6c:31:c5:3e:
9a:da:26:f2:ba:42:e4:5f:95:7b:b3:f4:dd:95:ae:6b:cc:e0:
60:60:c7:88:ea:a3:da:d4:e0:d0:fc:ef:cd:40:a9:9b:ba:0d:
b2:ac:a0:b8:57:3a:2b:d0:a1:09:1b:a4:56:f5:40:ec:00:2e:
5f:53:23:a8:21:86:20:c5:69:b4:07:86:ae:9c:e7:dd:7f:47:
04:05:23:40:1c:9f:1e:97:9d:ca:55:ca:58:89:2e:1c:ff:a3:
1f:05:a7:de:be:c2:1f:3f:16:41:ae:ce:06:8f:35:0a:06:ee:
3d:9b:ef:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:16:10 2026 by rpki-client