
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/3f8bbecf-2128-38b2-bd5c-3b5056904654.roa
File: 3f8bbecf-2128-38b2-bd5c-3b5056904654.roa (raw, json)
Hash identifier: ZMiDynP6YYpz3T7UnQZbLmXQfBnhm7nbkFyUFguB+4I=
Subject key identifier: 60:AB:1B:19:B7:F7:EA:56:C7:50:52:B4:BB:7D:99:B8:B5:80:C2:20
Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial: 010D0C9F4328584D0912582CBAD26634B0CE8160
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/3f8bbecf-2128-38b2-bd5c-3b5056904654.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 398465
IP address blocks: 162.250.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:58:2c:ba:d2:66:34:b0:ce:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=bdf95d11-f885-46a8-be90-d8968b258b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:f6:9c:5b:b3:ce:a4:c8:ac:6d:fb:d9:94:
2d:9a:14:09:eb:b0:a0:0b:6c:8f:c0:54:b8:9d:79:
5c:c6:b5:ac:11:bf:97:3c:e4:17:ef:d3:b7:88:c1:
3f:c7:03:46:fe:e0:04:08:77:85:44:a6:08:df:19:
87:fb:51:41:dd:1c:24:4c:3a:a6:b9:96:3c:37:75:
dd:73:dc:60:bc:2d:c4:81:b2:c5:7d:7c:ec:6e:23:
e3:90:b8:bf:84:bd:0c:c5:37:8d:1c:15:07:8b:e2:
e6:f5:78:85:06:e3:4d:35:4b:74:0f:23:ea:e1:ea:
bb:1a:e2:93:87:49:e8:ea:e0:0b:f1:c7:e6:57:ca:
65:e2:34:d7:12:b8:ed:bd:ef:e9:64:94:13:20:4f:
63:54:85:bf:f7:4c:ed:f3:08:0c:f8:e8:79:86:1e:
5a:c4:60:fd:46:83:54:6b:5e:5a:81:f2:62:a3:e9:
bf:ee:98:8d:a3:5b:e2:73:8a:1a:d4:bc:eb:a1:b2:
28:6a:53:b6:54:9c:65:cc:95:38:b0:3b:fd:e7:3b:
f9:76:31:4e:66:72:77:df:49:e2:fa:f7:31:19:01:
75:c2:a7:d9:1b:5b:93:e5:ca:4f:9a:2c:6a:10:71:
2d:a4:fe:54:a4:86:e7:21:e4:87:3b:58:15:05:51:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AB:1B:19:B7:F7:EA:56:C7:50:52:B4:BB:7D:99:B8:B5:80:C2:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/3f8bbecf-2128-38b2-bd5c-3b5056904654.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
X509v3 Authority Key Identifier:
keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.250.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:db:86:ca:d6:22:92:1d:2c:b2:9e:b8:52:ec:48:b0:8b:d8:
85:8e:5c:7b:9d:cb:f2:2a:08:e1:97:cc:ce:20:db:be:c0:74:
87:84:43:11:23:a9:f7:d1:bc:0a:e3:b9:29:78:35:83:3f:6f:
7c:1c:11:0c:f7:02:a5:d2:8f:7d:ec:f4:1e:8a:17:97:5f:a5:
53:41:da:c7:b5:15:06:89:62:2c:50:61:9f:0f:cf:34:f8:c3:
22:d7:28:8b:ad:59:82:68:a9:91:00:8e:0c:26:c8:0e:fc:dc:
e1:32:28:a1:41:8c:44:cd:cb:ec:83:bc:89:ec:a5:cc:0d:37:
55:ee:e0:f1:77:a5:9f:2a:c6:9c:8a:59:34:50:7d:2e:a9:78:
10:9e:57:f2:10:eb:34:f6:1b:39:fe:1f:ac:e6:3c:cc:37:c2:
25:b3:b1:89:75:8a:a5:41:84:89:9a:ae:cf:38:4f:38:2a:1c:
c5:fb:bd:1e:50:5d:bb:4f:43:3a:72:77:7f:d2:49:09:0a:a1:
ec:3a:c5:7d:b9:96:18:32:60:d0:99:b6:b9:bd:f2:bc:c8:d9:
81:71:10:8f:03:76:98:18:af:e2:0e:e3:e3:ca:e0:99:a8:ec:
53:b2:bb:03:2d:64:9d:6c:53:ff:b9:f6:81:8b:d7:2f:b5:24:
b0:dc:bd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:35 2026 by rpki-client