
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/3b9a74c7-b35b-3f22-b81b-eb7dd5f676a6.roa
File: 3b9a74c7-b35b-3f22-b81b-eb7dd5f676a6.roa (raw, json)
Hash identifier: 3i8hkFnTbwXoTyiUZJv7K7i6emF3Ea/UOB9ezAUkdPY=
Subject key identifier: 4F:0B:DA:10:D9:C3:40:C9:D1:FE:DE:BD:91:18:10:99:E4:B8:C2:43
Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial: 010D0C9F4328584F497432BFCE92DC3903A0C880
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/3b9a74c7-b35b-3f22-b81b-eb7dd5f676a6.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 10384
IP address blocks: 152.87.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:32:bf:ce:92:dc:39:03:a0:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b51393-7784-45a0-9621-168719782436
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ca9db002-51aa-4e44-a32e-f7cff631dc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:99:16:48:36:34:17:1d:8d:c9:56:dd:3f:
49:18:68:4f:81:cb:85:a1:2c:cb:bd:f1:39:42:79:
bd:3d:89:a6:82:32:b2:2d:d6:85:aa:4a:3c:5b:7d:
b2:03:0a:b6:6b:4d:3d:fc:5e:d0:d7:2c:56:7e:ea:
9e:ea:44:5e:1a:ed:b3:1b:03:cc:7f:83:40:d2:a5:
61:76:30:9b:f2:0a:28:86:c8:38:9d:8f:f3:15:08:
ed:ac:a9:77:4a:3e:e3:98:ad:69:8b:8a:ca:a6:08:
50:0c:79:f1:ae:cc:1d:23:9d:08:64:72:98:22:1d:
fa:95:56:0f:34:b9:45:bb:e5:b5:38:00:d6:71:5d:
e4:0d:d4:c5:d6:46:3e:b7:7d:89:8b:e5:b4:0e:45:
17:ce:87:c1:ab:8c:17:74:3c:09:aa:71:27:cf:36:
3c:8b:61:b8:40:77:eb:7b:85:b8:d9:96:30:3a:e3:
fc:1e:57:ee:53:e4:31:20:3c:28:d6:cf:14:1c:ed:
d9:14:85:f5:15:2a:06:0a:21:93:fb:56:a0:16:95:
9d:54:4b:d1:5a:f7:f7:d0:a6:50:1e:32:9d:f3:86:
4f:0f:fd:8d:a2:ac:a3:f5:4d:5c:2d:b7:5e:aa:37:
6a:e5:7a:9b:72:3a:34:3b:70:dc:84:22:6b:2d:92:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0B:DA:10:D9:C3:40:C9:D1:FE:DE:BD:91:18:10:99:E4:B8:C2:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/3b9a74c7-b35b-3f22-b81b-eb7dd5f676a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
X509v3 Authority Key Identifier:
keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
sbgp-ipAddrBlock: critical
IPv4:
152.87.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:76:85:ef:3b:9b:86:b9:04:06:fa:ed:f4:66:84:4c:8e:5f:
bf:cd:ab:85:9f:fa:4c:d3:8e:85:35:0a:fb:a6:9f:9b:26:28:
f2:11:6e:16:21:46:54:ec:69:ea:78:71:60:8c:7e:ad:95:0b:
b2:f1:47:15:9e:85:49:8e:52:e3:44:4a:0e:a4:9f:c9:a4:75:
f4:fb:bf:fb:61:7d:4a:6e:f9:f2:4a:37:10:2c:82:6b:76:72:
b4:88:1d:70:1a:1d:f0:9e:6f:50:4a:f3:cd:0b:eb:4a:1c:61:
19:4e:f5:c4:71:9c:98:0a:b8:77:67:25:e1:9e:d2:b1:73:09:
b2:19:da:a8:ee:3b:df:96:f4:bc:bd:21:fd:73:6c:8e:50:9d:
98:b5:d2:03:27:6c:d4:46:86:a3:79:65:e6:f3:29:c1:c6:7c:
28:33:68:73:b4:dc:84:f5:2b:31:ab:2d:67:95:29:82:91:c7:
09:77:c5:16:14:5d:65:00:dd:94:51:96:86:d2:8b:1d:9e:ff:
2f:35:e1:ed:e1:7a:db:36:70:77:ce:31:8e:da:36:dc:82:29:
93:3e:17:20:17:e6:09:53:01:9f:48:42:5d:de:94:a1:c0:b6:
a5:ce:c5:d9:68:47:39:31:22:c7:b7:4c:85:7a:cd:53:c1:47:
9f:ae:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:58:16 2026 by rpki-client