
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/48095aff-f563-3d57-9269-754334fa10ed.roa
File: 48095aff-f563-3d57-9269-754334fa10ed.roa (raw, json)
Hash identifier: U3o3+OZCAIKJmLdlsEfzThYDCOKxxjx6dBcdkxeYaIc=
Subject key identifier: 9A:BC:F9:A1:E4:9A:1F:10:CA:19:9C:89:D3:5A:DD:F7:9A:C4:D2:C0
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F6CB714E851CE31DC6519B380
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/48095aff-f563-3d57-9269-754334fa10ed.roa
Signing time: Wed 07 Oct 2026 16:11:38 +0000
ROA not before: Wed 07 Oct 2026 16:11:38 +0000
ROA not after: Tue 05 Jan 2027 17:11:38 +0000
asID: 62904
IP address blocks: 104.140.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6c:b7:14:e8:51:ce:31:dc:65:19:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Oct 7 16:11:38 2026 GMT
Not After : Jan 5 17:11:38 2027 GMT
Subject: CN=59648c1d-08f3-4684-9ca5-a2111c039b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:fb:ab:08:e4:78:b4:54:3d:70:96:58:3d:
71:4f:2b:19:c7:4b:cc:d2:bf:dd:9f:59:0d:65:31:
e1:11:17:2c:4f:97:45:28:0b:2c:39:d5:1e:79:cb:
ed:97:d6:14:95:b2:3f:67:21:e8:11:24:e7:63:81:
39:77:e6:f1:94:44:be:45:53:45:2d:55:2e:d3:64:
eb:89:52:c7:ed:ed:b5:64:81:43:5d:60:8e:ca:1e:
98:02:83:17:39:70:8a:81:3c:2b:8d:c2:d9:09:6c:
70:29:af:d1:8a:38:5a:de:9e:45:6b:da:d6:67:98:
0f:9c:c6:77:6d:ed:03:b5:2a:7d:cb:cf:f6:d9:05:
c4:f0:16:bf:e5:9d:0a:10:95:0f:0e:b4:66:a1:02:
97:0b:f3:68:67:57:a3:63:75:9a:07:aa:5e:71:4d:
d7:f7:1e:30:08:63:5d:88:95:50:aa:d6:93:f1:f7:
fe:c9:65:63:e8:1f:85:d4:bb:9c:f0:8f:37:aa:b3:
df:b5:03:a5:03:22:ef:14:38:89:e8:a5:6f:3c:bd:
64:aa:c0:f6:da:78:77:18:4a:10:7b:6b:00:75:8a:
05:77:09:8a:8e:88:71:cf:3a:b8:42:5b:62:bc:85:
f9:c8:4b:f6:6f:6c:32:31:7d:34:d5:b8:eb:d1:b6:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:F9:A1:E4:9A:1F:10:CA:19:9C:89:D3:5A:DD:F7:9A:C4:D2:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/48095aff-f563-3d57-9269-754334fa10ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
104.140.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:64:9c:2f:50:d9:5f:f1:2b:a7:bb:60:d8:66:58:df:32:a1:
2f:1c:6b:c5:8a:7c:41:00:18:1a:57:4e:38:f6:c3:cc:70:56:
60:2b:b7:ea:1a:5d:64:33:63:1a:02:e9:c4:57:1b:55:4f:ab:
4e:fd:e5:c6:40:0d:91:5b:a0:f0:78:56:a8:f6:5f:cc:2b:dd:
57:51:c5:f3:14:75:f5:18:69:70:e7:10:a3:db:e4:b6:d4:b0:
45:47:74:a6:f3:a6:bf:de:b9:5e:4c:28:6e:84:a2:a1:13:9a:
b1:f7:a8:38:54:8e:93:2b:24:a9:f5:54:b5:03:b9:da:d0:a3:
9e:56:a4:5a:ce:3b:d6:15:04:2f:cd:44:2b:72:45:96:71:15:
4a:f1:c8:15:53:05:26:c5:a7:68:2f:9b:c2:26:6f:6e:4b:8e:
2a:34:5a:52:d2:0c:40:c3:c6:8b:81:c2:12:fb:ab:f4:af:7b:
56:65:11:49:27:a3:9f:ca:61:bc:a7:be:fe:83:91:34:b6:5a:
04:9c:cb:98:11:f2:85:1a:8f:28:69:be:61:4a:2d:a4:4f:a1:
ad:09:85:85:8d:c5:3a:81:49:1d:b3:3c:92:b1:5f:b3:75:f0:
b3:15:1c:38:28:40:2d:04:26:fc:a3:0d:5a:9c:20:6d:fa:70:
99:a9:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:43:47 2026 by rpki-client