
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
File: 7a888043-beb0-31c5-9d07-936396c8d27a.roa (raw, json)
Hash identifier: u5S60Fd9AQdhVwKksjrPTAekFoHc8uXyu/FzQvUOAmM=
Subject key identifier: D2:DC:37:69:8D:D3:AF:F9:C4:B1:A1:6A:89:63:7E:65:3B:99:44:5F
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584D300A642FB574B5DF05396B00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 25645
IP address blocks: 137.239.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:64:2f:b5:74:b5:df:05:39:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=f8198801-914d-40c8-a716-fda9f177bbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:38:4c:2e:26:c9:0c:23:a2:c1:67:a4:bf:
4b:29:41:39:2f:f3:bc:14:d0:26:66:6c:66:71:8d:
b8:c4:6a:3e:03:ff:be:7c:d6:78:5a:a9:6f:ec:cf:
39:70:72:e3:43:00:4b:bd:2a:06:9e:2e:8a:da:ad:
ca:57:34:98:e1:a1:7d:91:28:0b:ce:49:3c:b2:9f:
24:51:c1:9b:a4:8b:9d:91:da:8b:cf:cd:ca:58:cd:
4f:90:ae:0d:be:f8:ef:f3:34:2d:59:34:68:0e:56:
20:3c:01:f8:93:51:b6:97:45:75:38:44:44:df:a0:
5b:e9:90:d8:23:d8:74:6b:90:05:26:db:ee:85:7f:
ac:a3:b7:75:c2:a6:85:80:b7:80:ce:7c:71:0b:09:
42:ee:fc:74:67:19:a7:ef:65:ba:09:0d:b0:78:a9:
e8:b7:f7:72:a8:67:2b:7c:c4:d9:bb:0f:53:d2:26:
df:77:fe:4f:72:7c:95:00:b5:bf:17:f7:da:4d:1b:
76:c9:bf:4f:ac:f9:35:ca:58:ce:01:6d:87:fb:e2:
16:b3:a5:0a:ef:40:65:e8:d6:dd:59:ae:88:90:56:
97:9a:e9:1f:4c:83:29:ed:f3:b6:26:66:ac:8e:1e:
0d:d8:27:1b:b3:56:e5:3e:40:fa:2f:33:d8:9e:a4:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DC:37:69:8D:D3:AF:F9:C4:B1:A1:6A:89:63:7E:65:3B:99:44:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:f9:03:e0:04:e9:fc:ad:ff:cc:79:41:8b:4a:76:95:7a:6e:
0b:14:48:60:91:39:3d:9c:7d:74:4a:da:25:51:9d:f1:59:85:
81:b1:5b:2e:04:b1:9b:b6:91:18:84:14:7a:51:63:1a:5f:02:
49:6f:9b:07:db:59:9b:a7:9d:42:7c:ca:cb:1d:16:87:3d:8c:
b2:86:41:c6:48:68:b8:7d:9f:2b:aa:5c:2d:b7:77:93:ef:02:
6d:f7:7a:09:e2:a5:85:8d:47:64:1b:9f:9c:cb:74:87:42:89:
56:1d:70:93:f0:b8:ae:20:2a:79:a8:be:5f:3d:b6:df:bd:95:
ed:b6:d0:bb:4c:06:f8:2f:36:90:10:39:17:b3:eb:b0:fb:e5:
e8:09:94:48:b4:8c:d2:11:6c:34:c7:6b:83:22:b9:4c:85:ed:
53:99:fe:a2:86:09:2d:23:fa:51:f2:14:43:84:f0:f1:ed:06:
a3:8e:71:d4:8a:ea:b0:2a:32:9d:45:21:c7:e6:dc:e7:5c:1f:
5f:c2:92:92:c1:4c:d3:6d:6f:fb:55:20:28:f8:c7:c5:e9:2f:
21:1d:41:35:20:cf:5f:5b:e7:87:ce:6b:c1:ba:f6:8e:41:3c:
f4:fa:5d:6e:a8:6b:4e:86:fa:16:f9:ae:d3:a5:b2:90:ce:05:
cb:73:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:27 2026 by rpki-client