
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/3f86cd14-b3b5-3ab3-80e1-5bcf883bbee9.roa
File: 3f86cd14-b3b5-3ab3-80e1-5bcf883bbee9.roa (raw, json)
Hash identifier: 4SkGc9SCgzNpWSP7sqvlRJMGb80nRCyHyn193g+pPj0=
Subject key identifier: 40:0A:C5:D9:51:65:6D:BA:70:08:3D:CA:22:07:79:34:E9:11:4F:93
Certificate issuer: /CN=503d278e-3d64-45f0-9c99-0926a5eec14c
Certificate serial: 010D0C9F4328584CF1576C32022E05F8B6660F80
Authority key identifier: 3A:A5:E2:51:83:F9:FB:6D:B8:1B:0F:08:67:A3:B0:25:EA:19:BF:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/3f86cd14-b3b5-3ab3-80e1-5bcf883bbee9.roa
Signing time: Sun 22 Feb 2026 02:00:32 +0000
ROA not before: Sun 22 Feb 2026 02:00:32 +0000
ROA not after: Sat 23 May 2026 01:00:32 +0000
asID: 11995
IP address blocks: 204.63.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f1:57:6c:32:02:2e:05:f8:b6:66:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503d278e-3d64-45f0-9c99-0926a5eec14c
Validity
Not Before: Feb 22 02:00:32 2026 GMT
Not After : May 23 01:00:32 2026 GMT
Subject: CN=6e8a5c18-dcfa-4ce4-a4f3-92967cd31bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:cb:6b:15:7a:ea:a8:5b:8a:0b:68:dd:5b:
43:a1:19:e5:da:b6:d0:62:5c:2e:68:12:ff:38:bc:
b9:d5:60:a4:76:fd:c5:7b:54:0e:e2:36:e5:e1:4f:
87:40:50:36:cd:34:63:0b:74:db:fd:58:d1:38:e2:
22:62:b0:12:45:7e:a7:59:b8:40:c0:66:61:dc:35:
39:4a:b9:fa:69:35:5a:91:b7:30:58:f5:27:87:b6:
d3:0d:bd:a2:26:b5:a9:84:e1:c6:ba:99:bd:97:de:
61:38:8e:0c:07:bb:18:45:03:00:ca:bc:f0:50:82:
84:12:bd:1c:86:45:32:4a:1d:16:b6:be:91:aa:af:
88:54:1d:1a:62:ac:80:f5:56:d6:ff:d6:f4:26:0d:
2a:96:d9:d1:ed:09:78:f7:1c:92:5e:6a:97:68:a8:
b6:88:1e:21:51:73:33:90:45:b0:ad:95:f5:05:55:
bb:c1:be:47:63:a2:a5:10:55:10:11:74:e2:92:24:
7a:d7:db:8d:16:b1:6c:57:a0:61:88:61:5f:63:73:
fc:f8:c4:a2:72:06:c2:af:3a:90:e2:77:cb:f7:e6:
6f:7e:1f:2d:70:30:b0:b1:5d:06:9d:e2:8b:52:90:
3e:45:f9:91:6f:4d:11:fb:bc:70:54:4d:54:98:a1:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:C5:D9:51:65:6D:BA:70:08:3D:CA:22:07:79:34:E9:11:4F:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/3f86cd14-b3b5-3ab3-80e1-5bcf883bbee9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.crl
X509v3 Authority Key Identifier:
keyid:3A:A5:E2:51:83:F9:FB:6D:B8:1B:0F:08:67:A3:B0:25:EA:19:BF:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer
sbgp-ipAddrBlock: critical
IPv4:
204.63.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:3a:27:96:97:05:32:f5:40:08:6c:d6:3b:f8:67:b8:f5:27:
81:6c:08:c5:97:8a:d9:8d:64:ac:9c:5f:d6:b0:ac:98:db:e4:
8c:82:6f:63:f9:34:54:13:70:a1:c6:e7:97:72:b3:24:cc:dd:
6d:1c:b2:62:6f:ff:68:ef:ef:6e:69:39:4c:30:ff:20:3f:db:
0e:20:e1:86:c2:82:3b:1d:f2:df:35:a5:50:5b:0a:a2:af:41:
7f:be:df:4f:5a:1a:03:b2:5a:8c:12:ca:8a:c3:09:e2:93:70:
0c:e5:09:7d:51:e5:ed:d6:ee:e4:a1:b6:1e:45:02:f0:6f:21:
c0:a9:10:d9:30:bd:39:53:75:63:de:a8:87:5f:8f:13:46:50:
42:cf:94:f1:1b:aa:ba:15:51:f1:1b:93:01:24:62:c6:66:9e:
34:79:19:10:ee:ca:aa:0f:e7:6d:0d:cd:cb:50:51:b2:7e:cf:
a6:53:65:c1:96:62:72:bd:4e:1d:5b:03:aa:a4:25:79:bb:4f:
80:f1:bf:60:f9:eb:a1:d5:c2:62:03:02:0c:f1:d8:15:2e:7a:
15:b6:ba:ce:ac:63:2e:00:f3:e0:b6:b7:48:2c:02:e9:0a:34:
5d:31:31:42:36:4e:0d:73:fd:6c:7d:ba:2d:1a:0e:a3:b9:da:
b2:34:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:42 2026 by rpki-client