
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e3c73815-5e87-3c85-aa0f-933a09ec04a9.roa
File: e3c73815-5e87-3c85-aa0f-933a09ec04a9.roa (raw, json)
Hash identifier: 38lPilt9gkFGlCD2TLhVL+8MBs6m4yDZXZ65EPXd2iQ=
Subject key identifier: A0:77:17:0D:8D:4D:0A:C8:9C:35:28:EF:2D:BC:36:5B:E1:FB:B1:AC
Certificate issuer: /CN=3cd40041-6571-4f30-b76a-4746a4c2d957
Certificate serial: 010D0C9F4328584D7F9A7BB1ED70B8EDCBE93FC0
Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e3c73815-5e87-3c85-aa0f-933a09ec04a9.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 398646
IP address blocks: 205.207.255.0/24 maxlen: 24
2620:13e:500a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:7b:b1:ed:70:b8:ed:cb:e9:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=0ebf31b1-f757-44f9-865f-1f8bc0b0973c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:fa:49:0a:b2:f4:04:6e:3f:60:a5:92:a1:
06:5e:f4:82:cc:7d:ec:2b:fe:8d:7c:d1:b2:3e:fa:
87:54:5a:15:85:7e:ab:2f:a3:4d:b1:fe:0d:08:e4:
7c:e0:44:17:93:15:94:ae:2a:3e:b4:0c:81:1f:63:
ba:d2:3d:40:75:ca:a4:fd:fc:8f:0b:2f:df:62:78:
69:2b:1a:c0:22:53:70:dd:f7:38:66:79:32:bb:bb:
ae:16:67:45:b5:59:ca:e2:34:9e:09:79:d7:9c:10:
d6:28:75:69:dc:cb:35:8c:19:ba:5f:57:56:33:5b:
8f:22:4f:88:5e:d0:11:16:82:6f:db:50:11:79:e1:
77:cc:d2:c0:ff:0a:72:86:e3:8b:af:9b:60:17:27:
68:c2:48:a9:44:50:8d:92:7e:f8:99:51:04:c6:27:
f9:55:3a:06:e1:73:cb:af:1e:60:07:3a:93:f9:4b:
d4:0f:97:99:d2:db:1d:6c:6f:1f:74:53:05:0e:13:
f2:69:4f:82:7a:23:fc:46:ef:52:56:ad:b7:e4:6a:
45:f1:11:1e:ac:eb:2a:46:69:68:77:4f:df:16:50:
c1:7c:2c:8d:7a:8f:6c:19:b5:10:8e:e1:d4:6c:89:
00:4a:de:39:37:d6:71:97:ff:4f:67:5f:a3:37:d4:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:77:17:0D:8D:4D:0A:C8:9C:35:28:EF:2D:BC:36:5B:E1:FB:B1:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e3c73815-5e87-3c85-aa0f-933a09ec04a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl
X509v3 Authority Key Identifier:
keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
sbgp-ipAddrBlock: critical
IPv4:
205.207.255.0/24
IPv6:
2620:13e:500a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:37:9d:24:63:15:04:25:a0:af:ab:c4:e0:35:92:ae:7a:64:
ac:59:3e:1c:6a:8b:cd:fc:74:2c:d6:01:28:52:4e:ef:7f:07:
29:9d:d4:77:6d:e5:f0:24:de:33:2a:73:1c:0a:db:1f:7b:2f:
ac:c6:3b:29:96:92:3f:f2:73:07:ee:42:57:4c:7f:a4:4c:c2:
3b:c1:66:67:fd:3a:20:5e:6f:09:78:ae:00:db:93:33:17:2b:
cb:e3:62:34:78:5f:a2:b6:fd:91:49:20:4e:8d:e0:b0:12:7f:
91:b8:f2:32:10:5d:95:a3:da:c6:e8:34:aa:1a:39:75:72:d0:
37:5a:5b:67:c7:c6:ba:c3:21:1c:b0:e4:ed:c4:57:5c:d0:ea:
a8:2c:5c:ab:a7:45:d2:ea:a4:bb:6a:94:6b:ab:c1:6b:ee:35:
90:6a:2f:d6:59:70:ff:12:ec:35:58:c1:dd:1f:de:45:f4:e7:
2a:6d:72:b3:12:71:a4:5a:ca:7a:12:90:5d:80:5c:45:5c:49:
26:36:4c:4b:ef:14:d1:f5:6f:e3:94:85:8a:5f:8f:43:16:de:
02:8b:cd:92:4a:73:33:cf:20:94:c1:85:4f:ed:62:2a:16:93:
cf:fa:d1:0a:e5:04:7b:93:ec:12:d7:24:c2:0d:90:db:f4:d1:
2f:47:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:07:02 2026 by rpki-client