
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cfefe06-bce2-35d9-81c7-b24d8dbbf2cb.roa
File: 0cfefe06-bce2-35d9-81c7-b24d8dbbf2cb.roa (raw, json)
Hash identifier: LCXrN4BwTuF88w+Ezl3EQmrEhWtojtyRPPXAAyglRTE=
Subject key identifier: E2:21:F3:05:BD:96:C1:29:22:44:FB:28:A7:D4:0C:C5:ED:F4:F1:A3
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584CA5F706EDE7CDEE5D1EFAF460
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cfefe06-bce2-35d9-81c7-b24d8dbbf2cb.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 13576
IP address blocks: 208.53.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:06:ed:e7:cd:ee:5d:1e:fa:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=70b6eef7-c37b-49ea-ae0c-dc4d3d609555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:a0:9a:bd:ce:32:a1:be:ff:e8:d1:6d:ad:
46:79:47:1c:3c:bc:91:82:86:33:8c:ef:55:9c:26:
e4:f7:2f:64:98:c4:5d:ff:ec:3a:e7:f5:db:56:ea:
fa:ce:2b:16:ea:35:1e:d2:14:1f:b1:da:ae:e6:4f:
d2:35:82:47:8a:e1:a0:69:99:d9:5f:79:88:f4:4f:
56:67:aa:9c:9a:c2:a5:23:c9:54:3a:45:13:75:9a:
dc:b8:29:62:11:d7:59:26:43:96:58:c4:bb:c8:24:
5d:9a:e4:dc:50:c1:bd:74:c6:f5:fe:78:d5:76:ae:
4d:95:c1:57:ea:08:7f:4a:11:61:63:ce:78:0d:4a:
76:eb:85:db:58:98:8c:e4:81:ad:d5:42:9f:b8:18:
ab:53:8f:c3:3c:1f:ff:99:08:a0:5b:34:d5:e0:5e:
be:2b:b0:8f:7b:ed:4f:93:68:87:2d:5f:c0:01:67:
46:0e:37:2b:bf:f6:dc:ea:f4:71:83:2e:bf:df:da:
25:a7:46:b4:a6:f7:b2:44:d5:c2:24:c0:ed:1e:a6:
42:46:a1:f1:be:92:63:94:bf:93:f3:9e:ed:8e:75:
31:bf:c5:0f:82:68:c3:ad:1f:b9:18:06:ca:90:06:
c3:33:0c:92:d9:c4:3a:71:1b:d9:23:94:08:1d:4e:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:21:F3:05:BD:96:C1:29:22:44:FB:28:A7:D4:0C:C5:ED:F4:F1:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cfefe06-bce2-35d9-81c7-b24d8dbbf2cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:be:8a:84:5e:2a:49:0a:b8:36:1f:13:ad:73:eb:65:98:d7:
63:6e:2c:f0:df:08:2b:ae:58:4b:5d:e0:e9:78:c1:ca:df:8f:
45:db:c1:62:98:1a:b5:28:be:fd:72:1d:ff:e1:8a:89:e8:b6:
42:69:16:b0:14:9a:6b:23:59:96:0e:fe:7b:82:5b:f5:5d:a4:
f1:24:dc:7e:b7:67:f7:4d:ac:46:45:0f:e9:1c:7f:44:ac:1a:
7e:9b:90:20:8e:90:bb:b2:1b:51:f3:07:7d:52:9c:ed:05:b4:
5b:20:ac:e5:2b:ff:7a:05:4b:c0:99:a4:3c:bb:6e:c8:53:02:
41:88:4c:6f:d0:6a:a5:ba:bf:e1:31:71:c3:c1:5d:f0:4a:cb:
26:c9:bb:23:3f:70:90:39:58:f8:53:95:77:96:0d:3c:87:39:
94:9f:2b:18:41:e7:4a:8b:b5:04:a8:1e:ba:ab:f0:f1:86:26:
a5:8b:0f:b0:a7:f0:0f:ab:bf:40:4d:57:c5:57:1d:2c:42:f2:
3e:43:cc:63:b3:d5:ac:c3:24:f0:57:91:95:6a:15:4d:92:cf:
fe:3f:a4:69:54:0a:7d:c0:46:d5:aa:47:5e:8f:85:da:d9:f1:
75:55:b1:9a:aa:e1:bf:f0:32:49:85:c5:4f:bd:7c:dd:bf:5e:
17:58:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:23 2026 by rpki-client