
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f6694cc-437e-3114-a07b-066cb267d9d3.roa
File: 3f6694cc-437e-3114-a07b-066cb267d9d3.roa (raw, json)
Hash identifier: HS6S38B1pfQBJ7i+rXPqCPCYlHk3brVp7l1aB6Ku2Ak=
Subject key identifier: 08:FD:5A:A6:40:FC:13:AB:C2:29:D1:91:AD:71:5C:42:9E:D2:D2:CE
Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial: 010D0C9F4328584D3B34DFB93C8FF30B196A4000
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f6694cc-437e-3114-a07b-066cb267d9d3.roa
Signing time: Fri 20 Mar 2026 13:00:40 +0000
ROA not before: Fri 20 Mar 2026 13:00:40 +0000
ROA not after: Thu 18 Jun 2026 13:00:40 +0000
asID: 395807
IP address blocks: 199.60.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3b:34:df:b9:3c:8f:f3:0b:19:6a:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
Validity
Not Before: Mar 20 13:00:40 2026 GMT
Not After : Jun 18 13:00:40 2026 GMT
Subject: CN=4e35fe71-ab18-4853-a080-380b7794c8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:fd:96:bb:90:46:17:49:6a:b2:27:1a:92:
58:83:a5:86:eb:c5:f3:9d:a1:3c:3a:bf:f0:f2:2a:
61:cd:83:7e:cc:9d:96:77:e5:21:31:55:c3:01:b4:
6e:4f:21:1e:83:f3:ab:77:1b:1a:df:e1:72:09:f8:
85:7e:8e:17:72:41:7c:e0:66:ea:0c:24:56:77:72:
e5:83:c0:bc:69:d9:e7:9a:71:13:87:b5:e6:d5:0c:
3e:a3:a7:fa:5c:8d:51:25:13:a9:08:24:82:b6:46:
bb:8a:50:9b:a2:2b:1d:18:85:6b:81:c3:d5:a0:1c:
30:ac:05:8b:24:44:ae:c4:22:51:59:c6:30:7e:c5:
a9:e3:e7:e9:ca:a5:35:be:31:5a:3f:c5:3b:e9:5d:
a0:7b:80:84:2b:78:35:ba:8d:f0:c1:4c:61:d8:89:
4d:84:ea:8c:00:5a:97:a0:f3:21:43:9c:54:45:64:
87:95:6b:d1:41:fd:c6:b5:86:aa:62:4f:d9:d8:28:
dc:fc:c5:2b:89:b0:dc:0a:74:86:8c:2c:1c:3c:53:
38:8d:46:e0:51:3c:c9:e7:c0:f8:b8:8a:c3:15:b0:
13:fb:cb:e2:14:9c:ad:3b:da:22:ec:8d:0e:07:57:
5a:c5:9c:a8:ee:38:1c:bf:17:59:32:f2:85:69:b3:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:5A:A6:40:FC:13:AB:C2:29:D1:91:AD:71:5C:42:9E:D2:D2:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f6694cc-437e-3114-a07b-066cb267d9d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
X509v3 Authority Key Identifier:
keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
sbgp-ipAddrBlock: critical
IPv4:
199.60.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:c4:68:1c:45:12:d3:67:3d:80:38:41:89:26:33:f6:0d:90:
33:d3:6d:a2:ea:4e:2b:d4:dc:e2:42:9f:01:c4:e3:f8:60:8f:
a7:51:a4:3f:0b:a9:c6:5c:d0:4d:3f:01:9c:08:02:cc:7d:4c:
9e:87:91:fc:fa:93:c5:d4:9a:c3:0f:91:b6:3b:a8:5f:db:a0:
1a:eb:45:43:14:56:f6:1a:d3:a9:a7:ae:0b:7e:4a:e8:97:8f:
61:b9:c0:e6:a1:87:c3:b9:ce:b0:6a:fc:b5:5f:29:e8:45:be:
c6:9f:5f:0c:06:f3:3b:b3:96:21:2e:91:89:3f:10:32:b7:cc:
24:01:38:a7:54:8b:1f:90:c3:ff:4c:36:36:fd:3e:7b:2e:d1:
35:47:5b:4f:e5:72:66:f5:8c:3a:e6:54:1b:b9:14:f9:94:b6:
71:46:2e:81:d3:17:84:8b:8f:cf:76:55:75:94:42:6a:dd:23:
68:4a:ec:86:e7:c1:f1:4e:d5:80:93:84:ca:18:80:0d:8f:cd:
71:b9:c8:b5:18:59:0f:3b:23:5d:24:5e:f1:de:81:32:06:e9:
3d:91:ca:ac:2b:75:34:76:b8:d6:db:be:fb:68:de:e1:a3:4e:
cc:89:c7:c3:cf:22:24:6f:4c:56:7a:50:8f:e8:89:86:38:2b:
12:80:6f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:49 2026 by rpki-client