
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d2ce3e8a-7ca8-37c6-8dfe-c0e8f916f8a1.roa
File: d2ce3e8a-7ca8-37c6-8dfe-c0e8f916f8a1.roa (raw, json)
Hash identifier: /a9Nlf7omysd0UrFEyskoVYMqzda8CZeCeYOQnlk1+k=
Subject key identifier: 85:FE:D7:7A:CF:28:75:1B:F2:97:02:75:50:5D:89:C3:C5:AE:80:D3
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F50AEA948A7571EE56B59A300
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d2ce3e8a-7ca8-37c6-8dfe-c0e8f916f8a1.roa
Signing time: Sun 27 Sep 2026 15:12:02 +0000
ROA not before: Sun 27 Sep 2026 15:12:02 +0000
ROA not after: Sat 26 Dec 2026 16:12:02 +0000
asID: 62904
IP address blocks: 173.44.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:50:ae:a9:48:a7:57:1e:e5:6b:59:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 27 15:12:02 2026 GMT
Not After : Dec 26 16:12:02 2026 GMT
Subject: CN=2c33a7d8-b037-43c8-a475-b873942f1e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:e2:f9:fe:c8:cf:e2:5f:cd:b3:68:76:a1:
b9:c3:78:c0:ad:d2:de:e3:ee:ae:86:ce:3a:84:f6:
5d:8f:3a:79:2a:d1:f4:7c:c5:c3:a1:54:32:fc:58:
a9:af:17:6a:91:db:f4:4f:a1:39:3f:e1:84:1d:6b:
08:87:08:05:1f:7a:be:87:7d:57:e6:e2:15:85:d2:
18:35:fb:0f:33:12:a2:5c:25:ee:ec:c5:e2:1d:10:
9d:50:96:29:9b:30:c1:14:40:c8:b2:ba:47:af:89:
24:9f:22:ef:d7:6a:02:5e:86:a9:53:35:08:65:93:
33:58:ca:66:c2:d5:a5:5f:ba:e3:bc:8d:f2:2d:3b:
4e:fd:fd:03:0a:02:76:28:b7:45:78:8d:70:86:f2:
bc:28:85:26:78:59:d3:57:b1:31:a0:fc:67:5d:ec:
7b:9a:eb:7f:bf:30:f1:92:9e:f5:e6:7b:51:f1:30:
e3:51:81:3f:18:3d:77:4e:53:6d:f5:a6:10:9f:7d:
34:c3:d3:73:34:3b:29:52:ff:75:33:43:a0:5b:39:
e7:5b:b8:38:79:36:3c:0e:63:07:ed:64:82:5c:ff:
15:5d:86:93:f9:e2:c1:d8:7f:fe:6a:41:23:4d:fc:
db:15:b7:7f:3a:9b:da:3b:c6:7b:91:af:1e:c1:a2:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FE:D7:7A:CF:28:75:1B:F2:97:02:75:50:5D:89:C3:C5:AE:80:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d2ce3e8a-7ca8-37c6-8dfe-c0e8f916f8a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.44.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:d6:38:68:ef:e6:4b:9a:39:cb:7e:fa:aa:57:d7:35:68:2b:
79:38:33:41:73:10:52:2d:56:6d:b3:ff:e3:1e:33:a3:6e:90:
1d:cf:0f:7b:32:22:be:63:0a:52:42:b3:94:9e:92:98:0d:7a:
14:d4:48:21:b6:5b:d6:d1:2f:94:c8:68:be:65:d2:51:cd:ab:
27:ef:14:57:28:0f:3b:04:1a:1b:88:0c:97:c8:34:35:43:a3:
ce:df:83:16:a2:bb:c0:fe:cb:6a:23:af:af:b5:f0:85:38:d8:
f9:1d:9d:7a:35:c9:3b:ef:02:ad:36:5a:1a:fe:bd:af:aa:eb:
92:ae:23:30:cb:c4:6a:dd:ae:90:cd:e1:07:27:03:de:c2:1b:
f4:b0:f8:1a:ae:b6:30:d8:05:26:3d:d4:a6:1f:aa:9b:44:b7:
04:32:28:c2:27:53:52:5c:77:d2:31:f5:aa:be:08:ca:13:49:
d1:5b:47:b7:ae:1c:30:6f:9c:ba:5a:de:b3:7f:85:a4:19:f3:
42:c1:9c:a3:1d:06:65:f6:c9:5c:1e:c4:12:e7:ed:2f:f3:ac:
a0:fb:32:76:e4:5c:46:87:78:43:cf:4d:15:93:1e:75:43:65:
d7:08:b1:d6:71:80:40:07:6c:b7:a5:44:6a:29:15:3d:5d:9e:
47:ce:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 20:17:38 2026 by rpki-client