
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa
File: 5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa (raw, json)
Hash identifier: kyuVPBb6ITO8koY2RPUei2mYbvZAE93+9hA8pn1MQ8Y=
Subject key identifier: 54:65:8D:18:8C:07:58:50:BB:52:19:A1:33:25:C4:A1:D8:02:C9:A5
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584E0C1EDB904FBBE03E3A906600
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa
Signing time: Wed 03 Jun 2026 09:00:13 +0000
ROA not before: Wed 03 Jun 2026 09:00:13 +0000
ROA not after: Tue 01 Sep 2026 09:00:13 +0000
asID: 11090
IP address blocks: 216.137.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0c:1e:db:90:4f:bb:e0:3e:3a:90:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Jun 3 09:00:13 2026 GMT
Not After : Sep 1 09:00:13 2026 GMT
Subject: CN=cef828c1-f3b8-421a-a579-eb07820b77e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:27:50:fd:8d:5c:8b:5b:48:ca:c7:e1:30:
87:c1:f1:8d:34:2e:28:86:df:40:bf:e9:0c:36:66:
59:5a:f6:c5:48:49:54:3e:e2:36:2b:ef:db:31:c9:
59:f6:cb:76:51:c5:eb:c2:e8:9f:71:26:c5:47:c1:
cb:fb:90:2a:3b:4a:cb:1e:67:68:6d:02:2e:60:5c:
85:a4:85:c9:96:16:d0:c6:02:25:5e:df:22:93:03:
19:41:93:09:3c:a6:ec:91:ef:22:49:fa:5c:02:dc:
3d:55:d0:cd:ec:d3:db:1f:f3:7f:b2:50:86:08:21:
6f:67:7a:e9:0f:98:bd:38:44:4b:3a:42:c6:7e:be:
78:a7:73:53:55:d3:2e:68:1d:a3:f7:b6:e6:ee:91:
4c:4e:48:d5:bc:d7:7b:c1:06:68:3f:d5:40:fa:bc:
a1:26:e6:e3:96:f0:96:89:4a:4d:e8:05:13:16:f4:
bd:9a:7d:08:b6:56:06:cf:07:da:e1:49:83:1c:6a:
18:ce:8e:07:17:ac:64:eb:d9:0e:42:75:85:2b:25:
df:29:c7:6d:cc:6e:cd:57:41:83:e0:4d:9c:3a:b9:
72:7c:24:e7:0e:6e:03:eb:04:27:90:51:b4:46:bf:
c2:3e:66:91:46:c6:58:80:c2:9e:1d:08:b1:ab:c6:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:8D:18:8C:07:58:50:BB:52:19:A1:33:25:C4:A1:D8:02:C9:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:d0:1e:7a:f3:d4:c8:f7:8e:97:a5:af:a1:7c:02:3d:68:8b:
5d:8f:37:de:4b:20:dd:3d:99:45:f4:c0:fc:95:79:80:6d:32:
31:5a:d9:fc:90:4f:14:e7:19:0a:cd:7b:68:fb:6d:d2:42:ec:
db:0d:49:dc:a2:3a:ec:c2:97:4e:7d:e5:e3:cf:cd:15:0b:15:
57:85:18:25:83:00:bd:94:6a:44:28:f0:e6:61:f9:c6:04:84:
4b:b0:44:ca:08:94:ab:d7:30:5d:25:a8:cd:2b:b8:21:51:07:
b9:03:78:03:24:24:73:a1:1e:6b:83:bf:e4:00:94:20:e5:57:
c5:b2:d6:0d:19:11:95:a0:b7:52:96:32:0c:2b:db:50:d2:92:
55:9b:0d:c1:89:58:bd:e6:ec:b4:5f:d4:28:5a:c5:04:2a:ec:
88:f2:db:8e:9b:ab:04:81:b0:f7:63:da:f4:82:85:bd:b1:7e:
73:2c:35:3d:30:4b:40:78:df:16:3b:78:c4:1d:d1:4b:b3:9c:
5d:79:61:29:0e:79:01:8c:69:40:13:72:a8:08:3c:a3:04:d6:
bc:bf:28:96:a7:dd:dd:d4:6e:8a:53:7b:dc:f7:97:e3:34:8b:
b1:9d:04:cf:33:ec:48:ef:bb:cc:9f:f2:c3:cc:42:a4:b7:36:
85:af:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:59:54 2026 by rpki-client