
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cbac1489-187e-3c8b-ae8a-2892f3cb6f2d.roa
File: cbac1489-187e-3c8b-ae8a-2892f3cb6f2d.roa (raw, json)
Hash identifier: ZU26/diM4Xi3ZE1BcBOiL+rURGqscApxgJEYzKl6Qh4=
Subject key identifier: A0:CD:40:85:37:4B:90:B2:01:10:1E:7E:CB:16:E7:FF:08:10:1D:55
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584D9A2009569435E9DD27894400
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cbac1489-187e-3c8b-ae8a-2892f3cb6f2d.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 62904
IP address blocks: 104.140.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:09:56:94:35:e9:dd:27:89:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=cdda14c0-5c70-4901-922f-f8e0fcdba2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:a8:9e:d5:34:c7:2f:dc:8e:5b:ca:05:63:
f4:b3:af:95:8a:4a:1b:fc:2a:7a:9b:02:84:54:c3:
a5:02:26:43:38:4b:82:77:85:26:6c:ff:2a:31:0f:
8a:1b:51:48:cb:6d:54:c6:8c:06:39:de:6b:3d:33:
6e:ad:a7:fe:89:6e:ac:75:89:b1:94:76:ef:92:22:
b0:bb:d8:fb:30:3b:1c:0c:f7:5d:3a:7f:0a:4e:4b:
2b:af:0b:d5:a3:02:ba:65:b8:99:18:dc:bf:7a:5a:
bb:51:54:a7:58:80:27:ee:7d:5a:05:d1:ad:b5:b8:
b1:a8:4f:1e:ac:7a:52:f4:de:23:a5:a4:8a:2a:f1:
99:bb:53:70:03:b7:a7:6a:ce:cd:f4:8d:24:cb:4d:
3b:55:45:99:a4:ad:91:bf:ce:95:73:22:fc:76:d8:
5c:54:f8:e8:55:c9:38:f6:ca:43:23:a8:e6:64:62:
50:57:71:98:b8:b4:0e:e3:92:c4:6d:c5:82:d5:6e:
d9:d1:83:a5:96:cb:97:c1:cf:91:f3:bb:bd:fa:3a:
11:04:0d:e2:87:a1:b0:de:6a:67:6a:fe:d1:2c:f4:
df:05:5b:e4:6a:f7:99:7e:bb:15:ed:6e:6a:c6:45:
7b:4f:7c:56:a3:f9:73:6c:48:30:de:a8:98:f8:c5:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CD:40:85:37:4B:90:B2:01:10:1E:7E:CB:16:E7:FF:08:10:1D:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cbac1489-187e-3c8b-ae8a-2892f3cb6f2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
104.140.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:57:49:5b:32:86:df:e5:be:5b:d4:80:f3:47:d0:91:b3:bf:
7a:1f:f8:55:4f:c7:d7:a0:27:2c:3c:18:cf:69:16:3d:d5:8a:
d4:60:19:e9:7b:b1:fc:a1:b2:7e:32:6c:b3:ef:7f:a2:b3:80:
a5:35:5f:d1:81:f1:64:6b:60:1a:ec:f6:7d:b5:8a:91:83:2a:
f7:f1:f3:85:f6:8c:b8:0b:e6:95:e9:68:2d:14:82:62:45:61:
2a:43:0a:c5:fe:38:1c:93:96:f1:12:88:6d:c2:68:cb:ad:84:
03:b2:0c:90:a7:6f:12:4f:f9:b1:ac:2c:a0:9f:3d:d9:05:dc:
fe:70:c2:d3:bd:a7:34:72:5c:c1:c4:b8:5c:5a:c1:45:37:5b:
42:22:35:d7:cd:aa:cc:29:96:5b:e7:59:01:50:00:79:43:ff:
55:2e:6b:c3:da:3f:c7:ad:c5:60:d0:8b:cb:0a:47:c3:4a:66:
64:7a:78:54:aa:9a:f1:5f:c7:75:59:02:94:02:aa:dc:8b:66:
7e:92:71:5f:48:c5:62:fb:9d:6e:91:4a:03:1b:0c:04:1c:a9:
1a:c3:17:2c:fc:a2:95:7b:d5:01:66:e0:bc:83:32:16:b6:0c:
5b:b4:7c:5a:48:d0:25:22:62:bd:7f:b7:b3:6b:f5:39:34:4b:
79:02:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:08 2026 by rpki-client