
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/cf3e5365-8a51-300e-b650-3e020c76d71f.roa
File: cf3e5365-8a51-300e-b650-3e020c76d71f.roa (raw, json)
Hash identifier: 4YTkNV5hzm8vgD7JE3BVm/Z2oB5gZw4N5hLrIR7iWqg=
Subject key identifier: FE:DC:6E:28:CD:E5:32:F3:D2:32:BD:FD:A5:80:A5:40:FE:7C:86:0E
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F4328584E25C9AE00F5C1EF68E4E6C400
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/cf3e5365-8a51-300e-b650-3e020c76d71f.roa
Signing time: Fri 12 Jun 2026 13:39:47 +0000
ROA not before: Fri 12 Jun 2026 13:39:47 +0000
ROA not after: Thu 10 Sep 2026 13:39:47 +0000
asID: 398180
IP address blocks: 68.65.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:c9:ae:00:f5:c1:ef:68:e4:e6:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Jun 12 13:39:47 2026 GMT
Not After : Sep 10 13:39:47 2026 GMT
Subject: CN=2f55d938-458c-403c-84d8-b96a7d148d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:53:dc:5d:19:1f:bd:5f:a0:39:b8:75:2f:
70:c9:84:9c:0a:21:3f:7f:07:da:61:62:20:f9:4b:
32:62:c9:90:18:29:d6:36:bc:b8:cf:cb:5f:ec:8d:
f8:b7:b7:b0:21:47:0c:5d:75:13:fb:ce:2f:08:44:
19:19:59:8b:08:02:3b:af:32:3e:05:d5:84:73:72:
73:c2:48:a0:9a:1e:4e:33:6c:09:42:4f:2d:19:19:
ab:9e:70:e3:de:f0:f0:e9:af:70:95:cc:44:31:9d:
6d:45:d8:c5:8b:23:24:d3:f2:8c:e2:79:4d:4b:18:
ab:1d:36:10:7b:a1:bb:05:90:9a:d1:7d:86:bb:e1:
c2:be:df:0b:ef:61:4b:a5:91:d9:e3:56:34:be:07:
df:96:77:48:02:21:aa:bd:2b:28:33:88:99:3a:35:
64:6b:b4:61:67:92:e4:88:03:e2:46:6a:23:19:63:
97:c5:10:76:2b:8c:40:a3:dc:d6:13:7f:76:20:86:
f7:40:cc:c6:9b:8d:a4:a9:f6:18:2e:68:aa:a2:f0:
55:58:d6:60:38:a9:6a:03:18:fb:3e:ba:47:17:79:
92:93:82:2e:17:71:85:93:3a:4b:b9:f5:d4:e1:69:
97:98:7a:3c:22:c4:0a:1d:c6:3d:bf:1e:e7:79:1c:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:6E:28:CD:E5:32:F3:D2:32:BD:FD:A5:80:A5:40:FE:7C:86:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/cf3e5365-8a51-300e-b650-3e020c76d71f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
68.65.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:d9:66:6c:5d:9d:b7:6d:72:86:8b:14:a5:50:65:1c:36:8b:
8a:c6:04:a3:5e:46:4e:ca:1a:52:4f:1f:cc:13:de:87:c1:4b:
0a:29:06:3a:2f:25:f4:63:64:7b:6e:82:3b:bc:f4:e4:83:10:
0b:dc:0e:1d:d4:b0:07:d0:16:b1:ee:5e:32:9d:a2:18:87:fb:
32:df:a7:bb:03:54:d1:d3:fa:1d:75:c9:f2:57:3e:a2:72:fa:
e5:27:89:91:eb:0c:eb:d6:14:de:47:c6:bb:c0:3f:76:08:44:
45:7e:7d:ee:66:56:cb:08:30:81:fc:85:fa:00:e7:cf:18:26:
42:48:ba:cb:59:34:dc:bf:ec:23:b0:bb:11:81:66:ae:cd:31:
ec:e6:b2:3e:16:c8:f7:2a:13:b0:db:92:ee:8f:10:53:39:d5:
d9:80:b2:e9:30:87:e2:80:98:51:b4:51:53:a4:77:74:bb:5a:
40:9c:c7:41:78:48:bd:98:34:99:11:f9:96:d0:7f:48:9b:76:
fa:8b:f4:9f:19:c4:02:66:9d:34:7f:99:0b:7c:36:75:a7:89:
7b:22:b1:bd:5c:3e:00:e1:ee:32:0b:ea:6f:9c:c2:80:03:e5:
af:42:6a:9c:05:ae:a3:0e:42:44:1b:46:05:0e:96:f5:f0:3a:
68:72:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:15:50 2026 by rpki-client