
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ec1159b9-c6c8-3859-a26a-4dc0e3add457.roa
File: ec1159b9-c6c8-3859-a26a-4dc0e3add457.roa (raw, json)
Hash identifier: q4Rteg1VOoSVxdmLs9FfbXoiJFdIwT8JGrr/FeJG6bo=
Subject key identifier: E7:5D:7C:8E:E0:80:C5:6F:92:53:2D:5E:1B:53:63:8E:69:2E:B4:1E
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584F1CC7A3ADFB51B78AAABF5F40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ec1159b9-c6c8-3859-a26a-4dc0e3add457.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 62904
IP address blocks: 170.130.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:a3:ad:fb:51:b7:8a:aa:bf:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=76fc8e4b-ea76-4a93-be39-0b6a97465461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:d2:ec:2e:28:35:0d:b9:6a:42:0e:c0:e7:
b2:b7:f9:b7:49:d2:ce:ac:ed:c0:43:49:11:91:22:
9a:af:33:cd:11:65:80:b1:42:08:d3:fa:81:aa:98:
b4:5a:b3:03:da:3e:55:c3:91:bb:a5:81:b2:28:18:
49:94:6b:18:60:cd:68:50:8b:34:18:9c:54:65:5e:
e2:e6:c8:33:8a:55:78:85:d1:a8:7f:60:ff:79:66:
4e:ab:9b:62:fe:2c:51:c2:ec:84:26:72:20:90:29:
9d:f7:5c:2e:b6:25:c7:f9:ef:88:aa:e5:50:e1:43:
3d:f6:78:a9:c7:86:9c:a9:6f:b3:07:a5:52:a7:14:
29:44:a5:16:40:47:ba:b4:38:88:68:90:9c:5b:2a:
d9:14:55:94:bc:4f:de:4b:38:ca:47:b0:68:51:2c:
c9:29:5a:3f:75:c5:38:b4:eb:06:e9:87:13:f1:f5:
b7:94:40:9d:c2:36:03:91:b8:c5:6c:ca:63:2d:d8:
b9:30:b4:93:6b:fb:97:ce:f3:29:f8:f0:b9:85:55:
ce:a9:b0:9e:46:ac:75:01:70:22:c2:ed:50:6f:2d:
54:1b:a4:09:2f:38:7e:a2:ca:08:29:10:b1:f2:98:
b7:e5:9b:d0:d1:33:a3:72:7e:bf:a6:03:4c:8d:77:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5D:7C:8E:E0:80:C5:6F:92:53:2D:5E:1B:53:63:8E:69:2E:B4:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ec1159b9-c6c8-3859-a26a-4dc0e3add457.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
170.130.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:af:59:16:36:e0:cd:ff:f5:11:69:d4:79:83:f4:89:39:9d:
22:1d:1f:f3:7d:37:11:70:26:a1:2f:4b:d4:4a:44:66:b0:2d:
14:3e:40:cc:54:a5:fb:1b:77:45:28:e1:ed:d8:8e:ab:04:e0:
42:de:bd:42:11:6c:50:9b:5d:f9:af:fb:24:81:59:6d:0a:44:
37:a9:73:b6:27:5a:85:7f:d0:0f:41:c1:a5:2e:ec:ec:95:52:
39:f3:6d:e6:87:a6:91:ea:6f:18:36:ee:b8:8e:23:b4:3f:f4:
3e:62:92:4c:fb:7d:81:16:ff:57:61:32:92:d6:8e:e3:d4:e1:
3a:97:77:c4:42:fa:78:4e:4f:fa:86:e6:22:fa:6c:e6:21:52:
50:d7:c9:6e:c2:d4:5e:28:ba:f6:65:08:40:58:7b:a4:37:d7:
4a:f6:1a:bc:d4:31:5f:f1:10:4e:1a:7b:ac:e7:57:dc:6e:ea:
e6:0e:15:95:f7:7b:ed:5c:57:e9:fa:24:e6:4d:b5:8a:25:e7:
60:ef:99:ea:f6:af:ee:c3:65:16:b9:19:97:a3:df:52:03:71:
d9:84:c6:ac:e1:e3:e4:64:68:ce:50:ff:f8:d7:48:ad:84:16:
b7:6a:cb:25:b4:f2:00:b2:33:58:e5:13:ad:69:80:9f:56:38:
22:b3:f8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:16:40 2026 by rpki-client