
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/d398555e-9d5c-3406-8a83-504d25dc2801.roa
File: d398555e-9d5c-3406-8a83-504d25dc2801.roa (raw, json)
Hash identifier: jI6UO4lKrShQS3/OOKlby4dn4YBcue/05piBji19fUQ=
Subject key identifier: 10:20:87:D6:0D:31:E4:CE:78:CC:01:E1:96:BF:C3:2B:F1:19:34:89
Certificate issuer: /CN=3034d07c-3a5c-48d3-8756-810837f1ae39
Certificate serial: 010D0C9F4328584CAE572C8688794533C7091480
Authority key identifier: CE:B3:31:18:28:F3:99:AE:1F:EF:C2:E7:9A:A4:4B:28:BA:CB:36:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/d398555e-9d5c-3406-8a83-504d25dc2801.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 395378
IP address blocks: 104.152.216.0/22 maxlen: 22
104.152.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:2c:86:88:79:45:33:c7:09:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3034d07c-3a5c-48d3-8756-810837f1ae39
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=8f48cdc3-436b-46dc-a408-828ed2264dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e6:20:2c:e9:37:b9:d3:bc:21:cf:9a:ed:95:
87:08:fc:8c:68:0c:8d:37:13:5d:6f:2c:e0:d0:c7:
ac:b1:56:3b:d6:59:0f:aa:0d:7d:3d:7e:9c:8c:7d:
0f:ee:74:1e:9c:df:ba:88:20:85:f4:d2:96:56:bc:
a9:7e:a7:b0:f9:85:72:17:1c:5f:63:04:f2:2b:61:
f0:0b:43:17:b0:cd:ab:da:c5:4f:f9:dc:eb:ea:da:
ce:d6:9e:2c:13:22:b8:5f:16:40:a3:86:50:25:67:
5a:08:66:d3:36:d5:9a:bd:c4:0d:42:92:63:71:d7:
0a:81:95:bf:f9:78:5b:27:08:b3:c0:6b:56:de:0a:
d9:13:54:f8:9b:09:f7:a9:f5:76:50:93:90:f1:79:
39:23:35:97:68:0d:e9:35:5d:14:d7:d6:0a:43:60:
4c:c2:08:a8:da:ef:f2:5c:18:9c:8c:24:fb:0c:21:
7e:83:65:6a:80:b3:1a:f3:12:5e:ad:ad:c0:25:83:
8b:3b:e7:38:cf:ea:3c:b5:78:ab:9c:e6:9c:7e:4b:
c9:e3:3d:0b:d1:f1:d1:7d:1d:9d:9a:ad:a1:4d:35:
a2:63:3a:ab:02:a4:c0:85:16:a5:ba:37:b0:da:48:
83:fe:97:ab:b4:c2:f8:bb:2d:fc:4e:fd:0a:08:fc:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:87:D6:0D:31:E4:CE:78:CC:01:E1:96:BF:C3:2B:F1:19:34:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/d398555e-9d5c-3406-8a83-504d25dc2801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.crl
X509v3 Authority Key Identifier:
keyid:CE:B3:31:18:28:F3:99:AE:1F:EF:C2:E7:9A:A4:4B:28:BA:CB:36:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer
sbgp-ipAddrBlock: critical
IPv4:
104.152.216.0-104.152.221.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:db:6e:79:d6:cf:53:3e:00:41:1c:a9:52:a4:17:fb:84:b9:
88:6b:27:6b:75:2a:04:62:01:da:c1:88:74:71:43:fc:ae:57:
dc:65:07:6f:34:44:44:bf:71:67:34:b5:a1:5d:d0:cc:c0:01:
96:1e:fe:22:41:9f:0a:8d:8a:2b:d3:c1:6b:39:9f:75:aa:34:
80:6f:c6:0b:73:cf:36:f0:57:47:08:2d:0c:a9:e5:46:39:62:
eb:ff:95:71:5e:fe:33:b4:fa:56:c0:fe:c6:54:d7:18:fb:f1:
b5:ba:f5:76:e7:6f:9e:f9:fe:91:34:84:33:7d:a7:94:e2:ea:
d4:90:e4:07:ff:bb:e8:9f:dc:8e:fb:e0:35:22:25:95:9a:39:
ea:92:c5:4a:42:12:8a:9d:c7:84:f9:68:d8:eb:f7:74:85:fe:
8c:ef:6c:89:97:38:b5:b0:b2:b3:ce:0b:01:7e:32:6f:26:48:
af:5e:21:47:b3:e0:10:45:d3:37:29:5d:c6:fa:2f:12:88:40:
dd:8c:1f:d2:c9:af:53:7f:51:de:bc:87:e8:24:3a:e0:1c:b6:
00:d8:e0:4c:37:01:f8:7d:bf:69:95:60:cc:03:4e:d2:d1:7f:
85:3b:31:93:37:6f:10:fb:9b:2d:bc:48:f9:a8:1b:39:56:2c:
1c:d4:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:24 2026 by rpki-client