
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/be9d2511-a52f-393c-b14e-8d8433fd18ab.roa
File: be9d2511-a52f-393c-b14e-8d8433fd18ab.roa (raw, json)
Hash identifier: TIvatm4yv6zuyur0ExiQkGOVFaoCHs5H+64L06Uk9vI=
Subject key identifier: 5F:28:41:DD:E3:D7:07:41:15:3C:77:01:C6:88:DA:0C:F4:1B:8D:0B
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584CB981BD1E1F058F5F99356720
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/be9d2511-a52f-393c-b14e-8d8433fd18ab.roa
Signing time: Mon 02 Feb 2026 02:00:32 +0000
ROA not before: Mon 02 Feb 2026 02:00:32 +0000
ROA not after: Sun 03 May 2026 01:00:32 +0000
asID: 62904
IP address blocks: 50.3.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b9:81:bd:1e:1f:05:8f:5f:99:35:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Feb 2 02:00:32 2026 GMT
Not After : May 3 01:00:32 2026 GMT
Subject: CN=b25e5211-65b4-4a80-9039-5fa25a6a1b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:d6:4d:c7:67:26:e0:25:c6:3a:68:33:e7:
21:67:74:9a:f4:1e:8a:a9:25:b6:db:d7:54:9f:b6:
82:cc:d2:b4:b7:f0:99:da:8c:04:6a:ce:25:31:07:
41:2b:5d:f1:0e:c4:5d:43:78:b4:1e:68:e5:7d:31:
18:ee:ac:86:d1:e2:3d:a5:1d:4d:97:f9:5b:50:bf:
ba:bc:23:7e:b1:62:12:db:e4:e8:79:1d:28:4b:7a:
bc:b8:52:6d:14:9c:cd:0a:c2:24:7a:f2:2f:71:91:
6d:81:08:03:4e:e8:8b:ea:8a:74:c2:fc:cb:ab:9d:
9b:39:23:bd:d7:d2:61:7b:2b:02:a0:ef:5e:6c:89:
eb:7c:8e:7e:a7:e4:88:11:9d:14:57:d3:b5:34:cc:
61:d6:47:49:4c:52:89:55:bd:66:72:3a:86:1b:08:
92:32:11:1f:bd:03:1b:49:d2:09:53:5c:84:3e:0c:
2f:13:fa:c8:ba:c4:2b:41:90:5b:92:7a:c8:e1:a8:
be:c6:f9:c2:55:fa:86:5c:7f:f2:0f:45:a8:42:f0:
b1:11:11:c9:d7:23:3f:b2:5c:c2:81:78:f6:c3:fa:
9d:0e:26:21:80:8b:f3:18:1c:86:99:3b:30:2f:2b:
3c:a6:85:43:8c:ab:2a:88:7a:92:d3:3d:84:97:8a:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:28:41:DD:E3:D7:07:41:15:3C:77:01:C6:88:DA:0C:F4:1B:8D:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/be9d2511-a52f-393c-b14e-8d8433fd18ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
50.3.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:71:a4:ec:31:37:1d:52:9c:29:bc:59:7c:61:0d:aa:31:6d:
72:62:3f:a8:9c:1d:c7:fc:ed:94:ba:5a:38:55:a3:f4:e9:53:
7a:1a:07:cb:2a:d8:e0:d2:08:86:a9:98:1b:71:81:28:04:99:
9a:83:e0:c3:ba:84:b0:56:39:a1:a4:88:06:a9:fd:aa:13:1e:
19:d0:37:06:b3:a2:96:71:17:44:27:65:60:bc:1c:52:5f:24:
0e:5e:c0:46:df:8e:59:3f:ce:19:63:63:b6:39:e2:2a:fd:85:
27:d7:6d:33:23:7f:2f:77:78:2b:fa:ad:92:00:cb:7e:82:13:
91:52:77:91:4e:b6:20:5e:f2:4f:a1:46:b7:b7:e5:d3:8a:1b:
29:8b:c1:26:ac:7c:8c:49:2f:46:87:62:74:da:5e:ba:8b:43:
2e:2e:2b:2e:f8:20:27:95:b0:ff:3c:e5:d9:e5:25:f4:68:98:
01:28:22:4f:61:b3:49:05:77:c6:e1:6f:a7:f8:6d:9d:6f:0d:
99:05:a7:93:4f:64:d6:5b:55:25:22:d9:c4:7b:23:c8:1e:d8:
2d:77:1f:57:d0:54:e2:b6:2e:e9:4e:6a:9a:18:c9:0a:a4:37:
cb:76:cb:0e:92:a7:ec:6d:77:6a:bf:e0:97:ac:3c:2b:c3:df:
c4:9c:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:12 2026 by rpki-client