
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/fc96cd8d-286c-3fef-8ed9-8a774b2bad6f.roa
File: fc96cd8d-286c-3fef-8ed9-8a774b2bad6f.roa (raw, json)
Hash identifier: 8cJ10T9lpgkxhzm0jEsyzQpPqtnQewnlqpxit46VtL8=
Subject key identifier: 3E:9C:8C:FD:DD:5E:59:F3:09:75:59:C9:3C:7A:F4:E3:62:6C:55:16
Certificate issuer: /CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
Certificate serial: 010D0C9F4328584E11B438F6F5A8DA21CDD6B280
Authority key identifier: 58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/fc96cd8d-286c-3fef-8ed9-8a774b2bad6f.roa
Signing time: Fri 05 Jun 2026 09:00:12 +0000
ROA not before: Fri 05 Jun 2026 09:00:12 +0000
ROA not after: Thu 03 Sep 2026 09:00:12 +0000
asID: 54657
IP address blocks: 131.143.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:11:b4:38:f6:f5:a8:da:21:cd:d6:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
Validity
Not Before: Jun 5 09:00:12 2026 GMT
Not After : Sep 3 09:00:12 2026 GMT
Subject: CN=a16bb5bd-e899-4858-88b7-8840415cf1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:f7:57:c6:9b:70:81:b0:1c:dd:bd:5b:46:
23:4a:a5:ea:20:c6:6b:7a:20:de:2b:aa:27:3c:c3:
6c:0a:51:c1:6e:c9:6c:14:ae:6e:a3:7f:9f:a9:cd:
d8:94:a8:5f:30:35:84:72:39:4d:3b:a2:77:d0:5c:
88:50:45:26:11:af:6f:2a:4b:88:9a:e4:0d:eb:56:
5b:aa:b9:a6:26:72:22:36:d4:7b:93:f1:9a:fb:69:
dd:e3:65:91:fd:73:58:57:35:5b:29:e8:40:20:38:
46:4d:2a:b4:d2:a6:3e:d8:57:fc:8a:f6:9f:76:ac:
12:70:9d:66:41:25:30:68:59:98:ff:87:35:a8:cb:
0e:8c:82:0f:f0:e9:32:42:84:a7:e3:ce:4c:75:93:
1f:c7:86:e4:06:32:40:6a:01:56:b2:37:53:40:03:
91:23:99:08:66:1d:81:55:1b:78:05:3e:13:e1:b1:
6b:07:1a:16:af:89:54:96:a3:25:91:92:99:10:22:
e5:3f:8b:64:91:32:84:3a:6b:b3:a8:95:8f:1e:0d:
8d:97:f5:c0:52:b7:49:f9:ac:8d:34:8f:3e:d1:a4:
2e:a5:f5:c1:81:fd:23:95:46:fc:da:6b:b8:dd:34:
e6:c7:f2:ad:4a:58:0f:e3:cc:23:8b:5e:f1:99:f2:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9C:8C:FD:DD:5E:59:F3:09:75:59:C9:3C:7A:F4:E3:62:6C:55:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/fc96cd8d-286c-3fef-8ed9-8a774b2bad6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl
X509v3 Authority Key Identifier:
keyid:58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
sbgp-ipAddrBlock: critical
IPv4:
131.143.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:6a:66:83:a0:c2:3f:e3:08:7d:f1:a2:99:b2:6c:9e:6e:52:
ea:51:af:98:76:aa:31:b5:8e:2d:75:ff:3e:4c:da:fe:73:c0:
8a:2a:f5:45:24:7b:91:88:09:19:3c:27:e4:77:59:85:d9:96:
5c:4b:f5:8e:dc:4c:23:a7:1b:c7:6a:f5:90:f9:05:24:29:1b:
c9:c3:17:1d:a3:d0:b6:56:a4:df:4c:b9:1f:a2:c3:36:c1:4e:
cf:08:55:9e:92:ac:22:3f:e8:d4:bd:22:44:c7:e0:ca:c9:4f:
5c:ea:f7:35:66:80:95:31:32:dd:b8:61:3f:c7:77:e2:a5:99:
ed:de:08:cd:87:a6:a1:04:27:0a:e7:49:6b:78:d3:21:50:f5:
e0:b5:36:02:35:29:68:13:ab:f3:e5:a2:fd:6c:cc:06:61:1c:
ab:f7:1d:58:f9:57:28:1e:63:5a:0c:9d:83:5a:68:3f:55:6e:
28:c1:70:84:c6:eb:03:46:9d:68:07:a8:b1:d6:fc:0f:e9:2b:
55:85:28:13:de:95:4f:3f:9a:1a:26:81:dd:0a:40:1a:ef:a1:
23:29:68:d3:bd:21:98:46:ec:8c:64:9f:ab:33:d2:16:7f:83:
88:f1:c9:d1:00:80:ad:58:46:12:38:85:4f:6d:60:0e:fc:5a:
5c:8b:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:49 2026 by rpki-client