
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa
File: 15302cbf-57f0-373f-96de-03dd65f8b849.roa (raw, json)
Hash identifier: GRNGgMzScupVgqtwdLyXeSTo4eFwmyHMjqqBVXJm0p8=
Subject key identifier: 7D:D5:07:A0:2C:C8:D1:35:52:71:E6:3A:EE:5E:83:F6:71:A1:B0:E9
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584CB551F609C1AE7130270FDE00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa
Signing time: Sat 31 Jan 2026 14:00:39 +0000
ROA not before: Sat 31 Jan 2026 14:00:39 +0000
ROA not after: Fri 01 May 2026 13:00:39 +0000
asID: 13576
IP address blocks: 216.106.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:51:f6:09:c1:ae:71:30:27:0f:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 31 14:00:39 2026 GMT
Not After : May 1 13:00:39 2026 GMT
Subject: CN=23c62b58-cc59-48fc-8d80-af88b4010823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:58:8c:4e:99:2f:b7:47:63:77:5d:2e:b3:
f9:cf:a3:4e:cc:cd:bb:4a:71:53:d6:6a:36:63:63:
1c:e6:8f:40:3f:6d:6c:b9:2e:cc:8c:36:36:f6:f6:
82:72:63:2a:da:f9:85:c5:97:18:01:9f:a2:c2:21:
6e:e2:81:d4:b6:a3:dd:ba:6d:c3:6f:09:0d:d0:3d:
23:cc:35:50:8d:f0:e4:84:d6:36:34:c8:2f:59:1d:
0b:0c:12:67:4f:14:c4:01:d9:ee:84:d3:f1:62:ab:
89:3d:4c:ec:7b:57:00:d2:d6:34:bb:bf:5f:af:7c:
ba:c3:36:a3:d9:db:57:01:c0:2f:4c:75:dc:c2:ca:
ca:44:91:a8:33:03:15:4d:7c:86:20:18:45:73:be:
e8:35:9d:04:8f:81:ad:6c:26:9c:c7:b6:a7:cb:21:
b7:2f:7a:26:fc:99:d7:b8:1d:18:0e:bb:38:fe:19:
fc:e2:4e:24:b1:37:75:de:fc:6e:bd:59:48:77:0b:
20:14:ef:bd:81:3b:d1:34:7f:1a:03:d8:f9:69:10:
e3:63:79:81:b4:a4:af:0f:35:bc:e3:88:21:93:45:
c8:cf:59:49:dd:5e:fe:40:c2:ce:7a:f4:73:7c:aa:
5b:43:f7:ab:45:00:bd:20:59:db:6d:f8:2d:d6:80:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D5:07:A0:2C:C8:D1:35:52:71:E6:3A:EE:5E:83:F6:71:A1:B0:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:d2:41:87:83:c5:06:4e:60:4b:36:e9:b5:09:0b:a5:2f:95:
90:23:df:a4:bf:91:68:4c:99:29:3c:98:62:95:15:80:e7:66:
db:33:a7:00:31:07:7c:ac:3d:28:ba:d3:91:8b:db:2e:00:45:
45:51:9f:32:e3:57:b0:e4:e3:3d:fb:8d:75:cf:ce:e7:74:e6:
46:b9:62:d3:6c:59:8b:2a:55:17:5d:d9:10:d9:ba:4c:13:71:
50:a0:07:4b:0b:10:03:aa:56:f6:64:ea:a5:5e:c4:a1:86:f8:
55:c8:c9:d6:93:e4:61:d9:06:c4:c4:95:96:fa:49:0d:5a:56:
c2:2b:9e:57:f4:75:c2:66:6a:4a:92:2f:f2:a2:1e:40:49:90:
78:a6:ac:16:0f:a7:36:64:0f:ae:82:a5:89:9f:73:31:60:68:
39:7e:60:69:a9:50:0f:dc:a5:74:2a:96:cc:62:73:75:8c:0b:
aa:81:cd:bc:9d:94:36:be:b1:2f:25:31:8a:37:82:ca:e8:e8:
68:2e:5e:49:f6:89:5f:6d:15:4e:72:10:2a:f1:9c:44:80:b0:
44:30:f6:48:b6:c7:04:bb:56:55:46:30:06:4f:08:b0:a5:16:
4d:cc:ea:85:7a:b1:51:d8:09:21:66:fd:5a:d4:bb:78:17:64:
8f:cf:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:30 2026 by rpki-client