
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa
File: 305a652b-8f6d-3a59-84d7-290880080ccf.roa (raw, json)
Hash identifier: xcfHzC7JAn0ZFftWrSviOKuGzW1YHhUKSOxgT0pyf2w=
Subject key identifier: F4:D9:80:B2:44:78:E0:15:79:A9:DC:57:A6:07:9D:28:C6:BA:66:E0
Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial: 010D0C9F4328584D4A8F9F94A2A2C4FA8C370500
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 396259
IP address blocks: 136.228.0.0/19 maxlen: 32
139.60.200.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:9f:94:a2:a2:c4:fa:8c:37:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=4099dc3c-cfdd-40ba-8239-bb436e956949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:5a:7b:bd:61:77:f4:1d:d3:83:b7:8b:d8:
64:c6:e9:6b:3a:64:60:7b:5d:d0:0f:70:6f:bf:c0:
b6:5d:4e:90:cd:9f:af:c0:e2:63:d9:7b:b3:ba:4b:
cc:a6:fb:7f:66:37:06:f4:ec:b1:a4:80:1a:5e:06:
49:61:c7:44:32:3d:74:92:6f:3d:e7:af:5d:62:04:
87:e8:76:d6:cd:9d:d2:30:75:a2:67:0e:3e:e7:0f:
af:a5:17:32:eb:48:b2:ab:ed:00:04:b1:9f:0a:ee:
6f:01:56:b1:25:57:c0:bd:82:21:1f:4b:02:2b:fe:
8e:3c:b4:eb:78:ff:37:58:74:8f:e1:72:a5:64:d7:
d7:cd:d7:42:36:95:7b:91:76:dc:cb:0b:1d:47:18:
c0:7d:70:ea:39:70:05:e0:c6:f0:d4:c7:cb:a4:1f:
40:15:44:f6:1c:b8:da:6f:3b:9a:09:6f:d0:df:03:
2a:05:2b:99:8c:c4:d8:90:4d:1d:38:61:9f:ad:0a:
d5:fa:f9:ce:9c:a9:7f:b7:06:37:e4:4d:d3:7d:32:
32:53:97:e9:24:64:45:89:d6:ce:88:25:33:57:26:
d1:72:b0:9d:66:1b:cc:53:35:b2:24:d8:a3:b2:b3:
71:63:8c:33:f9:54:8d:ab:c1:da:ea:6b:40:87:bc:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:80:B2:44:78:E0:15:79:A9:DC:57:A6:07:9D:28:C6:BA:66:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
X509v3 Authority Key Identifier:
keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.0.0/19
139.60.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:6d:17:03:5a:ba:b0:4c:db:3a:e4:10:12:fa:57:db:72:04:
ec:e3:92:92:2c:7a:fa:72:22:81:74:bb:e9:70:22:61:61:ee:
13:a2:bd:72:b8:b3:2a:8f:f3:42:65:63:d5:38:de:49:72:3b:
c4:02:15:d3:dd:ab:aa:bd:f8:5c:47:a6:68:24:16:a1:02:63:
1b:6e:2d:e3:89:18:6f:1c:98:1c:b5:86:be:5a:43:16:45:81:
b6:c9:38:91:c9:61:42:e6:df:cf:b9:3b:c2:ad:74:cf:a5:e7:
11:a1:5d:c0:56:4c:e9:74:ed:70:bd:d3:ca:85:be:da:e3:a7:
84:34:f9:c6:1a:21:3f:00:3f:0c:0a:5a:56:bc:be:c2:ae:5d:
4b:be:9d:e1:f7:be:af:b4:07:8f:ec:86:92:20:de:84:85:ce:
03:9a:58:79:ad:f0:46:05:09:b0:c5:b9:d1:c9:85:33:91:58:
90:7f:ea:43:ef:56:92:34:be:81:34:4c:0b:ef:5a:e7:07:77:
4d:7a:f9:fe:5d:a4:0c:58:54:42:8c:2a:9b:00:ea:70:94:74:
41:d4:a8:fd:1f:78:35:6e:51:f1:f5:1c:5c:a4:c9:bd:17:dd:
44:6b:c2:11:2e:1a:93:ae:dc:9d:2e:eb:44:fc:0f:f7:fe:79:
f3:a5:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:32 2026 by rpki-client