
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
File: 7a888043-beb0-31c5-9d07-936396c8d27a.roa (raw, json)
Hash identifier: QJI8e0BqtOqx5ZMSoBE8ncnqBc2FUoow/UpI4K5i8OQ=
Subject key identifier: FC:48:50:31:D8:E4:E2:85:63:46:0E:9E:98:B4:7B:84:DD:62:E7:D3
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584E104EF19BA6D3139FD883F280
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 25645
IP address blocks: 137.239.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4e:f1:9b:a6:d3:13:9f:d8:83:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=542ede28-13b7-47f9-adf1-b2d942c5612f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:63:b7:a5:f6:bb:07:b6:5a:ac:65:85:e9:
b7:16:a9:c7:40:4b:ed:f1:ad:db:e0:16:be:0e:85:
fc:5f:10:ad:ca:5c:1b:bb:18:c3:65:a6:1c:76:58:
e7:bf:5c:97:81:07:1e:93:b3:46:8c:a6:be:ef:13:
b2:f0:3c:ed:cc:c1:9f:3c:81:44:c2:27:de:0d:26:
72:85:e9:71:6b:16:3c:0b:22:4d:ec:54:98:91:a5:
fa:70:54:2d:eb:69:cf:10:bf:2d:ec:d9:2d:c7:ce:
89:a3:4b:42:4b:41:b5:fe:75:b6:cb:17:8c:8f:77:
59:d4:20:33:3f:75:d8:6b:82:51:9f:56:6f:ea:02:
2a:96:ce:cd:d9:f8:bf:09:b7:eb:1c:e6:cd:a2:b5:
f1:63:8c:04:10:f4:24:0f:5d:03:bb:65:22:90:fc:
f0:38:d8:66:16:77:c8:67:a5:f5:3a:d6:52:04:0b:
c4:d8:1f:45:5e:3c:f1:01:cb:0a:83:5a:c0:f5:1c:
63:81:c3:41:93:60:c6:3b:b7:81:1f:9f:43:0c:39:
36:11:f3:36:55:2d:83:1b:4a:12:ac:e5:a5:11:1e:
6c:b5:11:22:1c:f0:13:56:f0:a1:aa:01:88:e1:bb:
22:ee:cb:d5:20:1c:9f:31:13:3f:25:64:0e:90:a0:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:50:31:D8:E4:E2:85:63:46:0E:9E:98:B4:7B:84:DD:62:E7:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:fe:30:ad:7b:65:48:d5:61:68:fa:28:d7:15:a3:7c:4e:d7:
f6:f5:49:b8:d2:14:09:59:82:a6:2a:fd:3e:8a:af:7b:f0:a3:
dd:0e:a1:d0:a7:cf:31:28:c1:d8:85:2d:ae:52:51:e3:35:53:
e3:78:cf:0f:bf:83:53:1a:5c:07:44:67:ac:6c:b3:ce:02:80:
97:db:b8:96:b8:2c:1b:a3:5c:ef:02:7e:76:4f:a1:60:74:52:
d4:f0:40:01:95:8a:b4:03:51:b3:67:f6:37:cb:44:ef:88:0c:
40:bc:9c:f6:31:05:a0:1e:dd:39:93:31:4d:dc:c9:15:89:32:
57:8e:6e:c7:c3:c5:66:fc:2b:37:fe:dc:1c:17:ce:c5:d8:65:
d4:05:28:7c:88:dc:d2:c9:1f:7f:ec:ba:f1:03:d6:9f:5b:1a:
2f:5f:5e:70:e0:5e:a8:a0:0c:17:8f:4b:21:77:e7:ed:6d:9f:
62:98:ee:70:89:13:57:13:b8:4c:19:4c:4c:ee:d9:ad:4b:6c:
dc:96:54:ce:f6:33:1d:6c:30:85:7f:91:52:ba:28:6d:41:2e:
e6:3c:d6:46:ba:6e:33:8a:4a:92:a4:be:b7:82:73:72:f8:59:
28:b7:ad:4e:cb:ab:bd:3a:7f:97:b0:e8:fa:92:57:a1:be:10:
90:ce:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:37:15 2026 by rpki-client