
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa
File: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (raw, json)
Hash identifier: gqvk+YhyW0/E8WbWExmoduEmQd1AJKdoufVvXT0WLoE=
Subject key identifier: 6C:0C:47:24:3F:F7:52:26:4B:51:14:63:AC:91:D3:0A:08:69:48:40
Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5
Certificate serial: 010D0C9F4328584CBF1726DDD062F14A7BC51300
Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa
Signing time: Wed 04 Feb 2026 02:00:31 +0000
ROA not before: Wed 04 Feb 2026 02:00:31 +0000
ROA not after: Tue 05 May 2026 01:00:31 +0000
asID: 14618
IP address blocks: 148.59.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bf:17:26:dd:d0:62:f1:4a:7b:c5:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5
Validity
Not Before: Feb 4 02:00:31 2026 GMT
Not After : May 5 01:00:31 2026 GMT
Subject: CN=ba451320-a502-4765-92d6-4cdd7a471b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:08:5c:9c:b4:7a:95:65:7d:6f:27:c1:24:17:
3b:41:6b:cc:3b:46:22:7b:bf:3c:49:52:bd:4c:98:
77:4e:f4:21:4d:2c:11:58:e3:2e:2e:a6:57:17:22:
0a:4a:bb:ae:4c:8e:7c:a2:da:14:77:a1:2b:00:de:
5b:4d:97:60:3f:07:40:24:71:4b:72:01:8e:1b:b1:
8b:bc:b5:8d:38:a7:85:c8:47:11:e6:0c:9e:04:22:
c2:44:11:aa:eb:0d:7e:ec:d5:35:cf:d9:72:c0:c3:
a4:1e:52:ce:17:53:33:42:95:db:86:2a:98:7f:76:
19:7a:de:c9:db:92:3c:76:6c:89:ab:dd:33:b6:64:
ef:59:6b:fe:2d:5c:37:2b:b7:cd:4e:eb:0f:ba:b1:
54:46:e2:b4:77:50:bc:57:1c:8d:4e:88:ab:56:d3:
56:42:08:6f:83:f7:5a:9f:f5:5f:f2:71:16:2d:f2:
13:5c:d7:51:68:72:cc:3c:0d:a9:e3:89:b7:65:c4:
cb:63:98:95:c0:2b:1b:e1:62:0c:11:5d:02:d6:92:
09:7b:2b:0a:57:e5:57:a7:e4:3c:02:fa:49:3a:20:
3d:02:31:fd:a5:b1:43:3c:56:2c:5b:98:f4:14:dc:
31:19:c1:d2:e6:fd:b0:45:c6:b1:59:55:09:8e:22:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0C:47:24:3F:F7:52:26:4B:51:14:63:AC:91:D3:0A:08:69:48:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl
X509v3 Authority Key Identifier:
keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:69:34:28:03:33:d0:31:5d:4c:12:09:c4:43:b1:20:f0:ca:
3a:04:f3:5e:b1:1a:95:e6:b1:30:4b:0a:5e:4f:82:bf:60:76:
b3:4b:74:9a:c2:7b:73:44:43:12:06:a8:a6:fe:af:f9:53:9a:
db:40:92:62:47:a5:6e:9a:b6:c6:18:a1:18:d0:0e:ad:bc:c8:
d8:8e:80:8b:15:a3:43:d4:24:2b:22:fb:aa:ba:b8:d0:a5:c5:
0c:3c:2e:9b:72:21:78:2e:c8:a0:c2:4d:ed:09:1e:a0:ae:ae:
45:b8:e3:af:aa:34:02:36:07:a7:5e:d5:aa:d3:bf:5e:dd:a1:
47:9a:84:66:77:da:b7:8b:9a:ae:82:60:d3:66:41:67:8c:22:
71:5c:77:5a:1c:84:30:d1:50:e7:25:78:fd:31:ac:cf:b5:b0:
09:92:f3:62:af:57:b3:4b:74:31:c7:67:18:0c:9a:c4:21:95:
b9:9e:20:7b:8b:4a:83:3d:90:7f:d0:18:41:57:d3:ad:f5:c7:
0f:7a:2b:37:b0:ad:8e:99:00:7c:bb:0e:e3:9c:3d:c7:3a:cd:
03:9d:e9:90:11:68:80:0a:9d:8a:74:1b:51:3d:44:e0:34:33:
c9:62:0e:59:5a:fc:35:01:45:6f:d8:e5:e3:b4:c8:98:70:32:
c4:b8:0c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:01 2026 by rpki-client