
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
File: 8fbee004-d77c-3406-a15c-51548b9eb616.roa (raw, json)
Hash identifier: b3/jqNw7upPsP0/CrH9I8BMuDchpIy9oEhnpdIO8AKU=
Subject key identifier: 1F:30:18:52:B9:B9:9A:4E:70:6A:99:82:F3:77:43:44:10:C8:F1:81
Certificate issuer: /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial: 010D0C9F4328584D3F64DAED6F78FC6A9E3F6520
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 17012
IP address blocks: 64.4.240.0/21 maxlen: 24
64.4.248.0/22 maxlen: 24
66.211.168.0/22 maxlen: 24
173.0.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:da:ed:6f:78:fc:6a:9e:3f:65:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=8bdb211e-3c7d-486d-bbf7-c1f5ab8333d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5c:75:e1:7f:84:75:8a:ba:7a:0b:66:bd:7b:
8e:b8:a3:0d:56:f4:8a:30:40:03:bf:00:b8:d1:32:
de:21:ea:1f:fd:15:19:50:1f:45:a8:9e:db:f0:2b:
1f:52:47:f1:e0:6d:a7:f8:cc:61:8c:31:98:44:f5:
a9:61:96:21:60:da:44:05:d4:8d:b6:62:90:f3:57:
04:f8:09:0b:16:a9:6b:91:57:a5:de:c3:e9:a6:ff:
6c:69:f6:8b:67:f5:d5:52:e5:5d:17:2e:a8:9d:7c:
3b:eb:db:ae:fb:b3:fc:df:1d:c7:4d:7e:7d:f9:8e:
bf:6e:4a:74:0a:83:30:ff:53:22:d9:17:00:ef:2a:
10:83:7a:ab:59:63:63:6d:d3:22:c5:24:f8:21:83:
82:db:4a:42:1e:2f:fc:56:13:58:52:91:d1:43:c1:
14:f1:e1:2d:1a:a5:88:de:75:0f:2a:72:31:9b:8c:
96:aa:23:fb:10:38:fc:4d:cb:89:61:63:11:dc:a7:
46:53:85:4d:88:b2:85:c4:d8:d6:b7:3a:6d:2e:0a:
f9:c2:f1:66:58:9b:1c:bc:da:89:81:e8:52:ef:00:
ea:e3:94:6c:7a:32:f5:2c:5e:84:46:ae:0f:e4:a6:
33:80:3e:ff:0b:02:38:7e:38:00:54:e6:81:7c:cf:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:30:18:52:B9:B9:9A:4E:70:6A:99:82:F3:77:43:44:10:C8:F1:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
X509v3 Authority Key Identifier:
keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.240.0-64.4.251.255
66.211.168.0/22
173.0.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:bd:1a:a1:8a:af:7f:04:1d:0a:ac:87:60:d4:86:38:22:9b:
0c:da:0e:2a:31:c3:ad:d4:46:eb:a2:43:69:65:50:e0:c3:5a:
2f:ad:fb:af:5d:aa:c7:92:b3:06:bd:9b:dd:16:ef:03:f4:f4:
64:04:05:21:17:b6:9c:33:17:c7:ac:e4:cb:ae:75:d3:2d:51:
4d:bd:fa:78:c8:e9:82:50:f3:87:c3:50:40:77:43:37:2f:95:
9f:f1:90:66:ca:87:93:0c:25:3a:48:a3:0a:91:73:66:69:91:
2a:d8:6f:4c:98:cf:50:08:87:b0:5e:03:80:9d:62:13:05:ec:
18:a8:78:84:e8:59:ab:92:d7:a3:1f:f8:95:29:ad:d1:3d:3e:
5f:63:ae:fc:93:b9:9a:4e:37:d4:2e:d8:e0:9e:75:34:62:97:
94:ae:5d:03:b4:38:7e:a5:36:4b:e9:f0:17:22:14:2c:8c:5e:
a9:4b:d0:28:ae:27:8a:88:96:c0:27:ec:dc:2a:64:81:ca:c7:
68:a8:9e:fb:9b:e0:16:58:27:68:a7:58:67:21:57:73:6f:9c:
90:0d:b7:65:30:c6:86:a1:cc:7b:0d:fe:c1:e6:95:c5:f0:e1:
27:7f:e3:52:f2:a5:e9:8d:3e:4d:a9:0d:b7:20:64:3e:99:94:
1b:1c:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:21 2026 by rpki-client