
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa
File: 4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa (raw, json)
Hash identifier: SAGr7lGRLefJk42mrP6V5CPg+g5TwB6d8EmopgJftyg=
Subject key identifier: 15:A0:7E:20:BB:F3:9B:ED:E0:C2:5A:5E:5F:4C:07:7C:33:A4:0D:F4
Certificate issuer: /CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740
Certificate serial: 010D0C9F4328584E0A700D76D627A8ACD590D800
Authority key identifier: 61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa
Signing time: Tue 02 Jun 2026 18:32:03 +0000
ROA not before: Tue 02 Jun 2026 18:32:03 +0000
ROA not after: Mon 31 Aug 2026 18:32:03 +0000
asID: 13356
IP address blocks: 23.161.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 12 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0a:70:0d:76:d6:27:a8:ac:d5:90:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740
Validity
Not Before: Jun 2 18:32:03 2026 GMT
Not After : Aug 31 18:32:03 2026 GMT
Subject: CN=f82f9310-9b10-4a1b-832b-5b2a7fbc13e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:a1:b3:8b:9e:4f:f9:e6:75:c6:10:98:4e:
0c:73:61:b8:3d:34:e1:0c:68:ff:67:1f:e3:27:f1:
61:6a:0a:4b:bf:5f:6b:15:6f:7c:bc:fd:70:91:88:
ea:b8:f0:7b:92:00:c9:7f:1f:6c:85:d6:74:74:35:
82:c7:fb:52:bc:7a:92:17:e2:99:f7:4b:e5:5e:54:
85:d9:ba:85:95:bf:76:dc:3b:68:d7:b1:4a:7e:79:
1e:97:82:f8:f1:8f:28:5b:eb:6a:ac:69:8b:fe:c8:
fd:16:a7:5b:30:6d:2a:ce:aa:f8:cb:f0:bb:8b:96:
e2:22:86:62:ce:ce:cb:13:11:87:19:0a:f7:46:40:
d4:02:10:ce:c9:62:f1:dc:6a:b7:e3:ac:8c:e0:b8:
86:40:f5:20:a4:f5:ee:13:f5:5c:be:a8:7f:48:86:
85:12:12:a4:d0:95:12:16:dc:47:16:da:9f:80:2e:
9a:f2:7f:ea:bd:7f:5a:07:58:89:03:fc:ce:78:01:
fe:96:71:a1:fd:6c:ab:4d:59:b7:47:57:25:1a:10:
f2:6e:3f:75:03:0e:2c:40:14:ba:cc:15:a4:e9:54:
7a:76:d0:65:c0:3c:a9:63:12:69:72:b2:cf:3d:ed:
18:bf:4d:86:af:21:7c:ed:ae:37:86:3a:fd:09:e9:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A0:7E:20:BB:F3:9B:ED:E0:C2:5A:5E:5F:4C:07:7C:33:A4:0D:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl
X509v3 Authority Key Identifier:
keyid:61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:1e:d0:eb:05:c7:05:af:d2:36:06:7d:d4:d2:d1:f6:11:81:
0b:bf:bb:06:8b:d0:8a:c9:d8:d3:f8:98:51:54:54:b5:c7:2d:
c9:65:c2:3d:e9:b7:c7:99:a6:45:2c:b8:0b:9d:30:08:f1:33:
f7:f8:b2:dd:39:87:e8:65:d3:7c:13:1c:20:58:5c:23:85:96:
c8:54:6d:a4:62:d7:90:99:22:a9:68:05:8d:54:eb:9d:14:82:
a1:af:d1:f5:e0:21:5c:f9:ea:65:be:c8:80:08:f3:77:48:45:
9d:36:59:5b:8d:c8:fd:40:7f:ea:dc:66:71:77:bf:b2:02:0a:
f7:ab:e1:6f:25:f7:7a:d2:57:8b:b6:23:9b:71:1c:e5:d6:01:
bc:18:b0:3d:21:eb:32:34:12:b0:3b:8a:e9:fb:73:65:8b:2f:
52:a1:29:c4:c4:0d:eb:ab:58:a2:58:d0:64:a8:a7:60:5a:f6:
0e:b7:c0:da:b3:1f:04:77:42:34:c6:81:39:12:7f:ab:42:b7:
68:7e:57:6c:7f:5e:5d:71:93:15:58:dc:97:0f:53:5b:72:19:
ae:01:5a:8c:47:33:18:e3:e6:f7:32:b2:e2:d7:88:bb:b8:2f:
07:f2:a1:91:ac:97:21:da:10:fd:77:2b:c9:02:2a:47:09:57:
d9:fe:83:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:35:56 2026 by rpki-client