
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa
File: d4bae7d4-79c0-3570-86f8-0973a5218251.roa (raw, json)
Hash identifier: z/IShuiBSMhz7PEgHuKz830VznDJJUYD+JFmC/NkwoU=
Subject key identifier: F5:2D:E5:FA:99:68:D4:D2:54:C3:66:84:B5:39:58:05:26:1E:62:86
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584D9A2006836A49A640C90EB680
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 62904
IP address blocks: 173.232.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:06:83:6a:49:a6:40:c9:0e:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=1f525b4a-7ea2-40e3-9f52-8a4f616ba040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8b:b2:db:78:a8:52:ad:9b:7d:6c:25:63:6e:
ee:5b:42:26:9d:2e:af:77:64:83:b2:e8:c4:6f:35:
57:d5:c7:85:aa:9b:bf:35:2d:52:5e:5b:70:ba:87:
21:6e:53:fe:db:49:01:1b:c5:23:63:c0:2a:aa:0c:
cd:bd:6a:e1:24:be:10:c7:8f:5a:bb:20:15:b5:7f:
07:da:9d:fa:af:e9:0f:a8:b3:2f:65:d6:e7:13:d8:
eb:7d:0f:de:42:db:39:be:be:76:0a:fe:09:15:83:
89:e1:67:2a:88:bc:82:28:cd:c9:1f:68:dc:71:aa:
b8:fc:62:2a:c4:10:e3:fa:7c:8b:13:29:66:25:7f:
e0:9d:b6:fc:16:fc:3c:21:aa:39:1d:13:cd:7d:7e:
44:1b:1c:a6:4d:29:fe:30:56:2c:cf:09:a5:de:db:
11:28:2e:d4:a7:86:5a:68:cc:59:0f:0d:bd:79:2a:
38:b9:a7:b1:e8:0e:57:a7:40:38:a6:bb:23:20:63:
e9:aa:13:79:a6:89:58:de:a3:c3:02:11:05:0a:d0:
4c:b8:fd:88:39:16:71:14:7e:53:af:3e:df:98:71:
05:9b:2b:f0:9b:f2:65:87:1a:32:fe:a5:37:d5:b5:
68:ed:2e:0a:7d:d2:0a:6c:16:a0:b4:3f:04:bb:6d:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2D:E5:FA:99:68:D4:D2:54:C3:66:84:B5:39:58:05:26:1E:62:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.232.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:eb:4b:44:f1:2f:a5:c5:fb:cc:65:25:79:de:cc:a4:a8:d2:
55:4b:c3:c0:94:2f:10:03:65:aa:f9:f2:c0:6e:cc:6b:4b:f1:
60:fc:6d:87:cf:15:3a:0c:ea:fe:1e:c4:2e:82:10:d4:44:ae:
e1:af:1a:67:59:18:c8:b6:70:de:f0:17:b1:25:0e:72:58:15:
63:2b:07:76:97:f8:01:60:52:c6:f6:e4:2a:80:8f:db:ac:c9:
05:a6:ab:40:f6:cb:61:e1:4c:27:61:6d:5c:ec:ba:2b:4e:71:
af:59:e9:46:d2:1e:92:6a:cc:5b:f0:b9:a3:30:65:94:83:43:
9d:69:03:c2:8d:cc:97:da:c6:5c:0a:b6:29:4a:36:84:c4:25:
d1:7e:ad:d1:31:a4:f9:30:fd:cf:e9:70:21:d5:83:60:63:cd:
55:11:c9:e5:9d:98:5f:e5:81:19:6c:c7:6c:54:97:c1:ac:03:
0a:9c:42:7f:1d:03:4d:ae:c5:e8:16:72:c1:fa:d7:ae:7c:62:
f4:01:7e:ea:c6:b8:25:b3:0b:2e:34:98:bc:82:6c:67:1b:fa:
b6:d5:57:37:5d:ee:a3:53:f5:9e:25:ad:ff:17:dd:4a:59:22:
93:09:ae:cc:2d:20:f0:d3:5a:a3:38:c4:1f:af:8d:41:98:6c:
f6:4a:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:25:24 2026 by rpki-client