
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3420a626-ede2-3058-a566-5c23e64ddaa1.roa
File: 3420a626-ede2-3058-a566-5c23e64ddaa1.roa (raw, json)
Hash identifier: qO96tn1OlFjloQcVi4+Zb0Whc6JRnZjbLBWaRGlyWAc=
Subject key identifier: C4:A4:DA:00:FB:CB:2F:94:1D:95:AE:38:0E:41:FA:D7:EC:15:AD:6B
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F555C2A066CA3487372CB5500
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3420a626-ede2-3058-a566-5c23e64ddaa1.roa
Signing time: Tue 29 Sep 2026 07:24:52 +0000
ROA not before: Tue 29 Sep 2026 07:24:52 +0000
ROA not after: Mon 28 Dec 2026 08:24:52 +0000
asID: 62904
IP address blocks: 173.232.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:55:5c:2a:06:6c:a3:48:73:72:cb:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 29 07:24:52 2026 GMT
Not After : Dec 28 08:24:52 2026 GMT
Subject: CN=e6c70398-8f45-4cce-ba18-5d3721409675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:94:69:1a:20:da:57:59:d3:10:ed:8a:72:
a8:c1:de:8f:8c:b4:ff:d6:b3:8c:61:30:f7:3b:5e:
55:c8:65:89:db:93:4b:fe:d5:55:18:c4:3a:55:95:
83:87:51:f7:8d:74:04:5c:08:74:f3:dd:2a:8b:58:
6f:a1:aa:b4:8f:64:4c:b4:32:b6:b1:d8:bf:b4:c7:
fd:5a:69:0f:e6:49:92:cd:51:a6:a7:ab:f3:c4:32:
84:d6:84:53:4b:6a:9a:98:b8:23:f7:53:43:a3:da:
1a:d3:97:96:19:f3:b1:b3:bf:ab:59:8f:bd:87:a9:
3b:2d:3a:6e:6d:8a:39:f0:40:43:64:eb:24:42:e0:
9d:db:7a:0a:03:0d:16:61:9d:3f:98:f6:f6:3f:b0:
9c:aa:a1:ad:66:e6:df:1a:62:e8:e4:74:f1:c2:1f:
39:00:83:61:04:a5:68:9e:ae:1c:76:b8:87:51:b5:
b2:3c:57:bf:97:8f:00:28:cb:b8:78:7b:e1:f4:30:
d0:11:67:cf:b7:6a:c9:ab:9b:c8:a0:88:15:4a:4e:
17:87:fa:2b:97:f5:79:86:4e:2a:5a:9c:1d:f0:d8:
c3:f6:be:4c:7f:0e:40:dc:44:d0:f1:23:62:44:e8:
74:cb:29:d2:c9:08:8c:7d:f2:af:ac:83:df:50:3b:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:DA:00:FB:CB:2F:94:1D:95:AE:38:0E:41:FA:D7:EC:15:AD:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3420a626-ede2-3058-a566-5c23e64ddaa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.232.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:6d:76:4c:f8:d7:46:ec:65:b8:52:48:49:d0:39:c0:81:c4:
0d:2a:05:85:04:3c:ea:f8:0d:ff:78:af:2e:80:04:5a:ce:b8:
c4:e3:8b:3c:98:94:d9:9c:57:92:47:5e:b7:42:6f:89:77:3f:
09:dd:0b:53:c2:5f:7b:98:e6:6b:02:8f:49:6b:87:f0:e6:0b:
60:7c:18:5b:cc:31:8f:f1:15:88:94:b0:1f:6c:6d:4d:ad:35:
b6:ae:e6:d3:02:9a:3b:34:2a:ff:75:fd:2b:d7:0b:67:45:f3:
e5:b9:de:42:33:6d:5c:08:81:c1:a6:2c:bd:2b:d9:33:1b:16:
b1:35:0b:d1:79:9c:12:6a:80:e3:05:39:cd:f1:01:77:23:3d:
e8:e8:f7:a3:7a:a8:70:80:35:3b:b5:fa:b9:9c:4a:8d:ee:7f:
d4:c7:9a:bd:23:fe:22:5f:be:19:51:67:30:c6:d7:fc:ba:b4:
0b:9d:3b:51:ff:e5:9a:78:d9:bc:e1:67:ce:8e:03:90:98:ea:
dc:f2:d5:51:70:05:ce:f4:cd:20:15:a7:ea:ad:26:3e:e6:e4:
9a:f7:79:f3:21:e5:ad:8c:e4:1e:48:54:95:d2:82:85:ed:35:
a4:c2:f7:73:8f:f0:1d:57:32:63:69:d7:cf:e6:bb:2e:29:ca:
f3:b2:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:44:59 2026 by rpki-client