
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa
File: 2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa (raw, json)
Hash identifier: QW4BvwOg5EuU/l9TeMpNQF4/5i79B1wGid/y6g0j2lY=
Subject key identifier: 14:91:06:B5:B7:86:57:AA:A7:89:63:BF:D3:70:5B:D2:44:BF:70:60
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F6F22CF5D3FFBB40C0B7B7CC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa
Signing time: Thu 08 Oct 2026 13:00:12 +0000
ROA not before: Thu 08 Oct 2026 13:00:12 +0000
ROA not after: Wed 06 Jan 2027 14:00:12 +0000
asID: 2914
IP address blocks: 170.130.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6f:22:cf:5d:3f:fb:b4:0c:0b:7b:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Oct 8 13:00:12 2026 GMT
Not After : Jan 6 14:00:12 2027 GMT
Subject: CN=28c1d2ad-7b39-4937-b76e-6c4f2d63302f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:6e:99:44:24:57:1e:68:64:bd:20:b7:90:
dd:6c:84:27:92:f9:66:57:00:39:93:ad:08:6d:da:
66:6d:2d:62:e8:8a:af:43:09:6a:aa:0f:36:a2:95:
ce:b0:9d:de:a2:5b:f4:61:f2:4b:b7:a1:ce:1f:e1:
67:56:16:b4:79:ac:7b:dd:4e:9b:09:4b:15:20:0b:
4c:d4:4e:48:6c:4c:9c:a0:56:33:79:9f:94:05:ca:
b9:88:aa:c1:b5:16:78:1c:6c:c3:91:9f:c4:b6:41:
ab:0b:f3:85:95:02:f8:ab:b9:f1:85:d6:d9:64:94:
20:65:9e:a5:b1:65:d9:9b:ef:d1:2f:c7:3e:a7:a5:
c0:a4:09:3b:4d:23:2d:29:7c:59:ac:b6:57:fe:a8:
02:0d:63:d0:73:e9:77:45:50:39:da:7f:0e:30:25:
86:1a:29:8a:7f:ce:4a:a0:87:d7:65:40:1c:2b:ad:
b0:52:00:5d:f3:36:49:6e:6f:ad:56:90:13:f4:94:
e6:7a:52:51:c0:68:1e:82:f9:5c:72:3e:93:3a:1d:
a1:b2:26:0e:da:50:6e:06:b8:b1:63:3e:7d:24:2f:
75:2e:e6:38:9f:d4:d5:86:09:c6:5f:e2:5d:f1:79:
ec:09:37:6b:c5:11:6c:24:58:66:2b:a9:88:45:19:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:91:06:B5:B7:86:57:AA:A7:89:63:BF:D3:70:5B:D2:44:BF:70:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
170.130.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:d8:75:bf:ef:d5:5b:ca:45:85:37:c8:80:99:42:d2:94:1c:
e0:5e:25:cb:1f:14:1f:57:9b:3c:72:0a:e4:76:7c:5f:c5:3d:
b3:06:81:df:8a:57:bd:16:df:e4:c6:f5:98:43:d9:89:00:a2:
96:fc:78:e1:61:d4:b2:99:41:53:d9:69:9b:95:5d:8d:b6:23:
9e:1c:ae:51:9a:67:02:68:32:e0:4f:d0:48:23:84:21:70:f7:
d4:92:75:42:17:c7:8b:b2:f4:8e:a2:53:f6:b5:35:91:46:fc:
03:bd:14:1e:3c:78:d9:47:1a:b9:c2:0e:25:45:59:cf:fd:66:
24:8c:96:bd:31:bf:e9:cb:d5:a8:2c:d1:92:cf:c0:25:49:a1:
93:7f:99:c1:c4:ac:49:41:c2:cc:55:41:b7:0d:b7:ad:58:0c:
62:56:54:60:b7:11:02:7f:f5:88:4b:95:68:50:90:10:7c:22:
2d:dd:24:62:81:83:87:db:84:eb:bc:42:66:8c:0d:00:41:7f:
b8:18:3e:5b:eb:4d:96:cd:7d:4c:75:4b:75:d8:26:1a:81:83:
38:ed:0c:5d:35:f3:07:cc:da:e2:86:82:8b:38:a3:55:2e:f2:
90:16:9c:65:80:4f:55:04:ce:a9:29:de:b8:54:33:fc:4a:4c:
86:5b:0a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:47:45 2026 by rpki-client