
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa
File: db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa (raw, json)
Hash identifier: DKzp6QlY+g3GjugmhYIGePcOFN3BozEyx+yBq5uDIHM=
Subject key identifier: 71:36:14:4F:04:A2:88:8E:8E:D7:90:25:F4:5E:AA:68:F8:D8:EF:01
Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial: 010D0C9F4328584D386A469E83F952F9334682C0
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 398143
IP address blocks: 208.103.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:46:9e:83:f9:52:f9:33:46:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=3ceb69ea-38c5-4f3e-b9b0-271b659c7f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:64:15:25:1f:28:13:5f:b6:43:5b:e5:0a:
ca:c4:d3:01:17:23:c1:4f:d5:9c:f7:f0:c5:eb:9d:
b5:ff:37:97:b1:af:14:74:0f:87:a6:3d:4b:9c:2f:
72:dc:e8:fd:8c:30:7b:7c:99:af:14:78:ac:90:72:
c6:e7:b7:52:5e:a7:81:1f:0d:1d:a4:f7:f4:2e:a2:
34:d9:40:50:97:69:53:38:a8:11:d7:3c:d9:cc:a0:
ed:d9:4e:95:55:e9:9c:a4:50:6d:e7:b5:7f:16:f4:
68:b5:4b:20:7a:c6:c1:40:85:80:df:25:c6:99:82:
83:48:fc:5f:33:a8:00:d0:2c:2d:17:1f:ba:fa:37:
8c:a3:76:3b:d3:f2:56:58:f1:6d:b3:e5:ff:54:37:
2d:2e:c7:ef:6c:bb:82:22:f3:ff:b0:a4:53:b4:17:
bb:12:0a:bd:f8:66:5b:70:81:80:72:36:ab:c6:22:
71:4b:82:9f:59:75:10:8c:5c:04:7e:d1:79:34:cd:
9e:86:df:11:14:39:d6:99:9b:9a:58:69:55:4b:5d:
86:da:c0:04:4a:92:96:d5:91:de:f0:d6:d4:6f:48:
6a:2f:f4:2a:a4:ec:89:73:93:b3:5c:05:38:da:fc:
28:10:e5:e7:0f:40:24:6f:0c:a5:07:f7:56:d4:81:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:36:14:4F:04:A2:88:8E:8E:D7:90:25:F4:5E:AA:68:F8:D8:EF:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
X509v3 Authority Key Identifier:
keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:89:c0:6c:fe:e7:d5:7f:5f:78:aa:92:bb:cc:66:dc:79:34:
ed:6e:70:3f:89:6a:c4:52:a7:eb:d2:be:1d:a8:97:80:9f:83:
b6:0f:f1:31:e1:53:b1:8c:f0:a6:1d:13:65:54:22:1d:ff:18:
26:4b:fe:02:45:9f:0d:1c:5b:03:78:3f:2d:97:59:3d:f0:fa:
c7:c2:6a:ff:3b:95:85:dd:85:c0:25:1d:4d:4a:7f:3d:b2:76:
23:94:a3:d9:43:23:4e:52:60:e5:23:45:bf:77:9d:0c:ed:82:
74:a6:79:10:64:00:4d:3a:f6:a8:f1:b8:27:83:15:af:92:04:
27:13:ec:96:18:a2:a7:f5:77:dc:0b:9c:1d:4c:22:e7:4b:ae:
1b:1d:ff:f4:e5:9f:a2:81:d1:a0:79:36:58:15:20:cf:c0:9b:
20:5d:32:2d:33:92:d3:74:fa:ca:41:68:a6:e9:d1:a9:07:7b:
50:54:5c:fa:16:9f:2b:d6:a1:53:23:95:6b:b6:6e:f8:eb:a6:
f5:e4:66:df:4a:cf:a5:21:28:01:4d:6e:4e:94:2f:35:62:67:
4e:4a:86:93:dc:7d:05:9c:93:13:02:85:06:48:9d:50:fb:61:
9a:23:ac:d9:69:45:ce:03:8e:36:29:ee:4c:14:04:f7:38:70:
bf:fd:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:21 2026 by rpki-client