
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa
File: 43eb115a-2968-3e76-bd9b-b0925731c484.roa (raw, json)
Hash identifier: 7sx6heEd2AftwAjLUDV2ft9ya6RPk/yc/e2FjzX7l8U=
Subject key identifier: 57:B0:22:12:18:EE:CF:06:CD:85:3F:8F:B0:97:AC:B6:56:E5:13:E1
Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial: 010D0C9F4328584D6EDA651F5F40AAF60B144B80
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa
Signing time: Wed 08 Apr 2026 01:00:24 +0000
ROA not before: Wed 08 Apr 2026 01:00:24 +0000
ROA not after: Tue 07 Jul 2026 01:00:24 +0000
asID: 0
IP address blocks: 45.41.248.0/22 maxlen: 22
68.69.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6e:da:65:1f:5f:40:aa:f6:0b:14:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Validity
Not Before: Apr 8 01:00:24 2026 GMT
Not After : Jul 7 01:00:24 2026 GMT
Subject: CN=9ed5108f-6a90-43ed-8193-b36668b8684f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d6:00:be:d5:6f:b6:5c:87:35:c8:78:f8:69:
04:92:aa:67:e7:ea:c4:b9:61:4b:2b:4d:b9:bf:52:
67:fb:b0:a3:6c:ef:3d:38:4a:ee:84:cd:63:36:cf:
50:71:ed:ca:cd:b3:92:bd:61:c6:40:aa:0d:6a:9f:
25:d8:d4:cd:8b:18:b3:ca:26:24:db:2b:90:50:12:
c3:a7:83:e2:cc:d0:b2:fa:c8:4a:c9:65:41:c8:c8:
ed:25:23:46:72:a9:1e:98:82:fd:3b:ee:f4:e3:19:
f3:2a:1a:51:f8:53:cb:bc:2f:3d:ae:9b:ca:6f:02:
ec:ed:4a:4f:fb:a2:11:dc:51:7a:2f:10:35:c1:75:
b6:b0:ff:c2:2b:b9:c1:ed:80:d9:78:d3:6b:2d:82:
50:62:e1:dc:54:c9:b6:21:d4:95:61:8d:8f:2b:6a:
72:e2:d9:a1:bd:45:61:92:81:d0:c0:10:70:71:f8:
22:0e:02:85:9b:94:1c:8c:63:41:4c:a7:72:fe:81:
e2:2c:1c:7c:f9:f2:75:52:2b:99:45:93:32:6a:9f:
51:26:37:d0:66:44:36:93:77:05:5d:6a:ae:a6:a2:
d9:23:c1:6d:b1:42:0e:4a:e1:f1:2e:f3:98:d3:2a:
fb:d7:f0:8f:80:d3:62:4c:f9:77:ef:33:db:75:4b:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:22:12:18:EE:CF:06:CD:85:3F:8F:B0:97:AC:B6:56:E5:13:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
X509v3 Authority Key Identifier:
keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.248.0/22
68.69.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:9b:5b:ae:1a:ec:02:65:66:de:08:ab:15:01:0a:41:43:b1:
8a:d1:22:98:f8:fa:65:c9:4f:34:49:80:ae:46:98:da:71:8e:
c9:13:dc:5b:51:9b:7f:9d:6c:e1:26:63:7b:4e:ca:9c:b2:0b:
0c:ae:28:de:15:10:1f:0e:29:b3:ec:f0:ed:60:da:a5:49:bd:
17:83:68:1c:b0:2d:51:5f:cd:dc:ed:4a:fd:b8:ea:bf:76:e7:
2c:28:dc:d5:2f:56:ab:b6:9f:60:52:c4:79:ce:10:b7:e6:61:
16:7f:0f:e6:8e:dc:ef:3b:1d:a5:c5:91:39:3b:da:7e:80:31:
de:44:ff:70:ca:c9:e2:74:5d:24:8d:44:87:1b:39:12:ff:77:
3a:d1:6e:70:7f:56:1b:e4:0c:b2:be:0e:3c:5e:48:9f:0e:88:
05:af:21:b2:ed:73:3a:2b:52:18:dc:42:c8:de:9f:a4:93:c5:
2e:f2:f8:03:d5:50:fb:91:33:5e:1c:3d:66:04:34:ac:3d:3a:
77:09:46:2a:e8:a2:c4:0f:f1:e7:6a:bc:e7:df:21:a2:fb:98:
de:ee:2f:93:5c:2c:d2:39:5d:f7:b6:29:bc:50:9a:79:79:48:
ae:86:5e:5a:8c:23:4d:9f:14:74:69:a0:dc:43:ee:42:fb:bc:
cd:27:47:f8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1u2mUfX0Cq9gsUS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4
OTc2MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
OWVkNTEwOGYtNmE5MC00M2VkLTgxOTMtYjM2NjY4Yjg2ODRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9YAvtVvtlyHNch4+GkEkqpn5+rEuWFLK025
v1Jn+7CjbO89OEruhM1jNs9Qce3KzbOSvWHGQKoNap8l2NTNixizyiYk2yuQUBLD
p4PizNCy+shKyWVByMjtJSNGcqkemIL9O+704xnzKhpR+FPLvC89rpvKbwLs7UpP
+6IR3FF6LxA1wXW2sP/CK7nB7YDZeNNrLYJQYuHcVMm2IdSVYY2PK2py4tmhvUVh
koHQwBBwcfgiDgKFm5QcjGNBTKdy/oHiLBx8+fJ1UiuZRZMyap9RJjfQZkQ2k3cF
XWqupqLZI8FtsUIOSuHxLvOY0yr71/CPgNNiTPl37zPbdUuR4wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFewIhIY7s8GzYU/j7CXrLZW5RPhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh
ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvNDNlYjExNWEtMjk2OC0z
ZTc2LWJkOWItYjA5MjU3MzFjNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy
NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4
ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj
YTU2ODg5NzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLSn4AwQC
REWwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJqbW64a7AJlZt4IqxUBCkFDsYrRIpj4+mXJTzRJgK5GmNpx
jskT3FtRm3+dbOEmY3tOypyyCwyuKN4VEB8OKbPs8O1g2qVJvReDaBywLVFfzdzt
Sv246r925ywo3NUvVqu2n2BSxHnOELfmYRZ/D+aO3O87HaXFkTk72n6AMd5E/3DK
yeJ0XSSNRIcbORL/dzrRbnB/VhvkDLK+DjxeSJ8OiAWvIbLtczorUhjcQsjen6ST
xS7y+APVUPuRM14cPWYENKw9OncJRiroosQP8edqvOffIaL7mN7uL5NcLNI5Xfe2
KbxQmnl5SK6GXlqMI02fFHRpoNxD7kL7vM0nR/g=
-----END CERTIFICATE-----
Generated at Thu Apr 16 23:58:51 2026 by rpki-client