
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f5940f5-b299-384c-99f1-d67db4727928.roa
File: 3f5940f5-b299-384c-99f1-d67db4727928.roa (raw, json)
Hash identifier: ETKJ2FbOR3hGV8IoIVo27WFIdJ2/ivlzz3ndKebbHxw=
Subject key identifier: 91:F6:83:5D:B9:9B:9F:4B:38:08:C1:B0:A7:E4:2F:A2:41:D1:C2:ED
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F53E79E32B2615FCAED097280
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f5940f5-b299-384c-99f1-d67db4727928.roa
Signing time: Mon 28 Sep 2026 18:54:13 +0000
ROA not before: Mon 28 Sep 2026 18:54:13 +0000
ROA not after: Sun 27 Dec 2026 19:54:13 +0000
asID: 62904
IP address blocks: 170.130.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:53:e7:9e:32:b2:61:5f:ca:ed:09:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 28 18:54:13 2026 GMT
Not After : Dec 27 19:54:13 2026 GMT
Subject: CN=e5813f91-c9a2-4d63-8d73-527285d1ec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:58:9f:7c:f8:4a:82:cd:d2:33:5b:c0:a8:fb:
35:f6:7f:53:06:97:16:b8:80:3d:a0:ae:d1:9f:fc:
48:7a:0d:ec:8a:a4:a8:18:cd:70:f2:14:f0:a5:16:
7e:28:0f:c7:ab:f5:3e:05:b4:de:85:1e:98:a3:7a:
51:f5:d1:7f:a5:6e:ab:c2:f6:77:22:38:18:1c:5d:
72:73:4b:b6:92:17:3f:42:6e:c0:a4:c0:3f:47:70:
0f:9f:bf:5c:b2:b0:41:77:35:5e:c6:ca:21:58:78:
65:9e:e6:f6:38:ef:12:9b:73:ff:44:2c:43:f2:0b:
a7:8f:73:7a:79:e5:31:e8:a2:d0:6a:21:57:07:d2:
8f:8d:c4:7c:1b:84:5a:5e:83:82:c7:fb:a8:65:46:
24:79:53:5d:95:62:90:b1:4a:46:a6:83:ad:44:8a:
c3:a1:78:1c:c2:e6:f8:fa:8a:4a:92:3d:23:32:a1:
8b:4c:f6:71:95:0c:8c:99:8e:32:9d:b0:d1:03:33:
28:30:f4:ed:fc:51:6b:03:03:af:9c:01:9c:26:1d:
4c:bf:d1:88:60:ae:a4:48:30:02:50:9f:72:3d:75:
6d:16:dd:d4:22:f8:0f:37:0d:21:1a:71:41:2c:ab:
05:83:cd:bf:fb:9b:06:19:cd:39:2b:e8:fd:3d:98:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F6:83:5D:B9:9B:9F:4B:38:08:C1:B0:A7:E4:2F:A2:41:D1:C2:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f5940f5-b299-384c-99f1-d67db4727928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
170.130.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:fa:9a:be:2a:f0:73:4f:f8:80:1d:9b:15:4e:cc:bf:e3:8b:
04:ad:36:eb:ec:dd:3f:8c:62:21:6d:c7:61:b5:dc:8b:91:a7:
45:f3:ce:85:29:d9:73:ca:94:df:29:23:7a:13:f7:d5:cf:ad:
02:b0:e1:4c:41:2c:22:e2:6c:b3:80:64:80:d5:fe:be:c5:27:
ec:c0:f4:e6:eb:74:7f:22:99:49:02:4c:77:39:87:f3:09:45:
96:02:9d:52:57:91:c5:7e:a0:c0:da:36:fe:1d:49:f0:a0:5d:
34:4a:a2:11:01:f3:f2:c1:e8:0d:81:d5:d9:50:26:3d:40:95:
d6:e8:43:a7:4d:85:d6:1e:91:5f:6f:1d:66:94:4f:45:0f:8c:
d8:45:f6:f5:f8:c6:c1:0f:f3:e8:1b:b9:53:a1:53:e5:8e:96:
47:d9:c5:68:98:75:52:46:22:54:1a:15:12:44:b3:60:3e:ab:
74:61:e6:11:52:91:1a:6b:09:ad:eb:65:8c:07:c0:62:5c:93:
05:9e:5c:b6:58:c2:0c:07:23:54:57:0c:86:53:50:48:2c:1e:
26:37:39:cf:29:b3:80:e6:8c:aa:d8:b9:ae:52:bb:7b:a6:1f:
b2:8d:46:2d:60:ac:2e:ce:8a:3e:fb:a1:ef:88:02:c2:e6:4b:
07:67:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:45:03 2026 by rpki-client