
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa
File: b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa (raw, json)
Hash identifier: WM1nn5ZtOYRKV70sNIUJWSF8NsYW380WNPKt9WVmdBg=
Subject key identifier: AF:B1:AC:89:73:DD:3A:7C:64:59:A6:61:A3:A2:8B:79:CA:64:E1:E2
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584D300A280CA10FBE30DCA06D00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 174
IP address blocks: 173.232.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:28:0c:a1:0f:be:30:dc:a0:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=dde27bb7-7bbe-47d4-8f43-fa95ba921d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:96:d0:d4:bb:3c:50:8f:bb:dd:c2:90:ed:
b7:6f:ae:f7:f5:28:e6:06:58:b9:49:8a:1c:46:e7:
8f:66:27:9d:5d:03:7f:88:b7:06:c9:37:e4:ce:57:
37:55:66:f2:b4:96:f3:7a:9f:cd:1d:c9:9f:ae:a5:
27:2f:3c:23:5c:a0:63:f4:78:00:e1:a1:2e:c8:4e:
c3:50:5d:fe:79:de:67:83:4f:23:04:98:af:54:dc:
3b:45:78:39:11:02:59:f0:b9:34:11:fb:2a:e9:94:
37:fd:e7:0c:4d:ec:78:bf:9e:8a:69:68:ea:e9:19:
c1:17:fe:b8:2d:19:a3:2e:c2:7c:ac:be:f6:4b:de:
5a:8d:e9:5a:c2:63:ad:c0:ef:4f:7f:22:9b:e5:c8:
00:cf:44:6e:09:11:bd:a5:c3:f4:5b:5d:2e:c1:74:
8a:76:3d:54:22:9c:59:52:b0:9c:e4:d4:66:fc:09:
53:56:21:29:eb:14:0b:38:cd:bb:2f:2e:c8:c6:79:
c2:96:d0:c3:20:a4:43:d7:ad:0d:c4:9e:3e:30:7f:
bf:00:f2:75:e7:b0:da:c6:c5:f6:13:84:27:cc:b7:
ec:93:9f:73:6c:ef:9a:ac:6d:d2:8a:dc:a4:ac:9d:
82:90:f2:03:42:63:6d:6f:22:1b:02:03:2d:75:de:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B1:AC:89:73:DD:3A:7C:64:59:A6:61:A3:A2:8B:79:CA:64:E1:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.232.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:11:46:6b:61:6a:b4:2e:1b:02:f0:77:33:4b:68:b4:4d:c7:
e2:1b:99:1d:f9:f7:07:eb:82:19:b0:83:1f:10:1d:9c:19:23:
c8:2b:a3:6c:90:94:d3:c8:1d:be:6d:50:b8:b5:7b:f2:d4:b6:
df:bf:b0:f0:ff:d4:86:3d:8d:94:45:83:45:d2:5c:74:cc:2e:
14:1e:ac:7f:fc:36:72:d8:61:34:bd:a4:02:0b:05:93:9e:1c:
dd:a1:2b:86:7b:1d:21:16:55:d4:97:8d:88:80:b9:c3:8b:3c:
69:53:c2:03:64:a4:d5:a5:fc:45:e3:4e:10:01:65:ad:42:13:
f0:d4:e5:cb:cf:11:23:39:76:d9:f3:3a:07:9f:ed:bb:e6:9e:
df:e6:9f:a1:40:dd:21:32:d4:2b:56:da:fc:76:b8:d8:21:a9:
18:5b:16:90:79:f0:17:03:ac:a1:14:74:32:4a:4e:79:1e:e0:
3b:4d:63:77:3a:e1:49:b7:24:e1:03:82:4b:60:08:7b:e7:56:
93:08:88:f5:35:07:fc:74:99:c0:49:d8:2d:db:ab:bc:c8:25:
f2:47:87:aa:04:6d:8e:f1:3b:12:f3:25:b3:0b:6b:17:bb:02:
8d:18:7e:6e:69:5a:5d:1b:dc:63:91:97:b7:72:41:e1:82:67:
70:8c:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:33 2026 by rpki-client