
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa
File: 3ff1ef39-3a59-31db-bf17-ce082479a311.roa (raw, json)
Hash identifier: cUkMJyRzTILZJGS6Fj+K7+U1HEIlGtJKULntquEHUPQ=
Subject key identifier: 40:0A:39:7E:6D:AB:7B:53:A7:50:94:ED:F0:E4:CB:C6:AD:7C:A9:DB
Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial: 010D0C9F4328584D5F7FA8946423E1E453F12A80
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa
Signing time: Thu 02 Apr 2026 13:00:30 +0000
ROA not before: Thu 02 Apr 2026 13:00:30 +0000
ROA not after: Wed 01 Jul 2026 13:00:30 +0000
asID: 63023
IP address blocks: 167.17.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5f:7f:a8:94:64:23:e1:e4:53:f1:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
Validity
Not Before: Apr 2 13:00:30 2026 GMT
Not After : Jul 1 13:00:30 2026 GMT
Subject: CN=e7b8e8b8-571b-4adf-b33c-f83252dfd8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:1e:00:f2:69:08:4d:42:12:de:f1:b9:2e:
ee:a0:8d:1c:4c:9d:29:af:42:5b:99:7c:23:f9:c2:
a9:21:b7:e4:e8:38:ec:69:ee:12:f4:23:bd:78:ea:
4e:4e:7d:fc:d2:f4:c2:d8:e2:86:c7:d7:59:a0:49:
d1:cf:47:0d:48:6b:f0:8b:bd:fd:11:64:49:c9:18:
ea:1c:88:55:da:5a:05:2e:42:c1:f8:a2:22:09:2b:
62:e2:25:64:da:57:b6:65:a0:76:73:6e:20:99:53:
5d:53:7a:57:76:c2:62:f1:5c:95:cd:27:44:55:18:
25:ee:c3:1e:0d:01:f6:cd:cd:62:b9:3a:0e:d1:72:
54:f9:1c:61:25:cb:f5:9b:7b:31:c3:df:4c:e2:d1:
a2:fa:7c:11:6c:7c:9d:dc:e6:c8:0f:ea:36:d3:2f:
c5:ac:dd:d1:4d:f0:04:70:94:a8:9e:2e:9e:17:69:
59:a8:0e:69:84:71:67:f2:6e:c6:41:0e:7a:c9:da:
49:19:4b:c3:a0:e1:ad:17:ad:24:65:77:a4:6b:84:
16:8a:a0:5f:06:70:ee:0b:fc:4c:f7:1f:5d:5d:1d:
64:28:40:8e:a3:b2:48:74:6f:b3:49:3a:b6:f4:80:
ba:97:b5:14:0e:92:ae:de:66:b4:cf:8f:9a:41:d0:
c9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:39:7E:6D:AB:7B:53:A7:50:94:ED:F0:E4:CB:C6:AD:7C:A9:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
X509v3 Authority Key Identifier:
keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
sbgp-ipAddrBlock: critical
IPv4:
167.17.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:52:fe:de:41:1e:74:1b:36:9f:4e:03:38:33:63:d2:4f:07:
32:64:4d:7a:ca:5e:70:ff:3f:ae:7d:dd:bf:ff:bf:c2:21:74:
fc:d0:4d:3f:1f:76:c4:b3:ad:63:4d:37:3a:26:fa:4e:6e:17:
ae:70:28:d4:b7:00:06:51:af:99:e8:19:12:34:9b:d2:ad:d0:
e9:0e:e3:66:cd:7c:3f:1e:3d:d5:e2:70:7e:94:94:8b:a9:67:
60:ad:9b:0d:00:88:0d:99:f6:05:ea:54:58:04:c4:a1:94:ef:
12:6e:1f:a2:7d:d9:7c:f8:ad:25:f2:d9:95:37:1c:52:ac:3d:
6b:1e:f4:86:29:47:a9:f4:d4:d0:0d:95:4c:a3:82:ad:0f:ed:
e6:55:7f:75:16:64:97:f8:ff:9a:ef:12:5a:a7:01:20:42:e8:
0f:26:7d:f3:ac:45:06:e6:6e:9d:56:bb:69:48:15:cb:40:3b:
a8:2f:8d:95:dd:9d:c0:79:ae:a7:c5:ef:18:e6:38:29:c5:7d:
07:ac:be:f7:e1:ad:24:27:df:5b:10:ce:49:3c:52:b5:0f:ab:
7f:e8:92:2e:0c:4a:45:0a:08:ac:95:63:f3:0c:35:45:12:24:
be:b4:9d:7f:4d:55:60:97:8a:2c:0a:4d:05:bc:2d:ca:91:7c:
4e:f2:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:07 2026 by rpki-client