
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2df3101c-35d8-3dbd-bc68-55e456b873a6.roa
File: 2df3101c-35d8-3dbd-bc68-55e456b873a6.roa (raw, json)
Hash identifier: gqhVz6Fx9McMNjnQznOwXRcXVDoC6qUTxKEgZ7vskhE=
Subject key identifier: 43:0D:EA:B6:26:7C:21:05:DE:9B:6B:41:55:94:4A:35:B7:D5:38:A2
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584CBDB1FDA2FB4306AEB6586680
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2df3101c-35d8-3dbd-bc68-55e456b873a6.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 15204
IP address blocks: 66.128.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b1:fd:a2:fb:43:06:ae:b6:58:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=a2257ff1-2ec6-4e7d-b4ad-ad5231134721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:bf:9b:30:8d:20:ad:d2:20:e7:ff:bf:4f:
68:df:5e:5f:6b:af:9b:21:b4:79:db:3e:41:f1:85:
d4:e1:e4:3f:8e:dc:7f:70:6d:29:17:9b:80:17:ab:
ad:23:c4:9f:5c:c7:ec:f7:89:c3:45:9c:4b:12:47:
e6:f2:66:34:fe:95:de:be:35:7e:16:28:7c:73:04:
31:a4:0e:d5:4c:1a:0f:95:60:40:f1:81:23:67:4f:
9d:50:80:34:5d:63:c6:04:a5:7a:e4:a5:d2:5f:ee:
5e:08:1b:b4:4c:bf:79:a9:7b:a8:d9:27:ec:e2:93:
3c:3f:73:e2:68:d1:25:d9:0c:71:f9:b2:57:51:72:
32:6b:8b:06:4b:c3:d6:f6:53:52:92:2f:a2:e5:71:
3c:c4:47:79:03:37:56:c1:df:cc:58:24:f5:39:31:
9c:9f:d0:72:11:38:77:5f:b9:ba:e0:a8:0c:0b:78:
9f:4a:90:c8:7c:3e:b9:1b:df:fb:d9:1b:93:67:37:
26:44:ee:82:3d:a9:d5:cf:40:a0:62:02:d5:47:d7:
6e:8c:dc:7d:bc:ec:3a:1a:d8:c7:cc:57:8e:a4:3e:
eb:ef:b8:c0:26:ec:cc:7f:1d:09:83:85:d8:28:60:
a5:bf:c0:33:9f:28:f3:19:43:89:3d:16:fa:d5:fe:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0D:EA:B6:26:7C:21:05:DE:9B:6B:41:55:94:4A:35:B7:D5:38:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2df3101c-35d8-3dbd-bc68-55e456b873a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:b0:2d:ea:6d:80:0b:b1:40:48:5b:ad:cc:fb:e5:a3:e0:ca:
b3:fb:46:0d:14:c6:8d:95:d9:5e:a5:a2:d4:6e:e1:1f:24:b5:
4b:9b:ec:1d:02:d9:50:a2:06:4d:b2:f9:da:94:e3:46:82:24:
5e:ed:db:25:13:7f:51:55:fe:2b:55:da:a8:31:e0:f1:f1:20:
95:29:3c:2c:4b:92:9f:f0:5c:d3:f2:19:08:3c:78:6a:c8:d9:
33:3e:77:d0:ae:75:8b:22:3b:91:cb:c6:64:97:98:fb:df:93:
e0:e7:cc:94:f1:de:b1:2e:55:f6:d2:73:26:cf:f8:84:c7:d8:
5d:da:79:4a:fb:23:75:80:46:10:b3:c0:63:0f:d5:e7:1a:52:
a4:1f:60:03:32:8b:64:be:65:4e:84:57:5d:ce:cd:e0:7a:ee:
12:34:71:31:82:66:61:b9:83:8b:05:20:87:42:95:1a:7e:96:
41:c8:e6:f7:cc:96:31:16:d1:83:ef:d1:a6:e3:03:be:91:1e:
f0:c4:8f:c3:78:16:c1:34:ee:bc:d8:fe:9f:41:46:97:c0:fd:
93:70:d9:7c:e1:a0:e5:91:9e:af:fd:f9:53:46:17:35:b5:e4:
be:dd:7e:52:93:49:e9:c6:df:a1:02:77:64:86:e1:76:72:ef:
e1:35:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:58:54 2026 by rpki-client