
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/af7af33e-1c72-3e93-b4c6-dbaeaef521f3.roa
File: af7af33e-1c72-3e93-b4c6-dbaeaef521f3.roa (raw, json)
Hash identifier: 5YFrTDF7+FG0vFf/81n1G3iS7Xv2LsGrKiqXtHQAbsA=
Subject key identifier: DF:4E:B0:43:D6:96:BB:38:89:D4:6C:CC:D1:2D:CF:78:BE:02:01:9B
Certificate issuer: /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial: 010D0C9F4328584DB9567E15BA94EA703F1E84E0
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/af7af33e-1c72-3e93-b4c6-dbaeaef521f3.roa
Signing time: Mon 04 May 2026 17:20:23 +0000
ROA not before: Mon 04 May 2026 17:20:23 +0000
ROA not after: Sun 02 Aug 2026 17:20:23 +0000
asID: 398391
IP address blocks: 64.226.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b9:56:7e:15:ba:94:ea:70:3f:1e:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Validity
Not Before: May 4 17:20:23 2026 GMT
Not After : Aug 2 17:20:23 2026 GMT
Subject: CN=f8091a32-5914-4957-bef1-297876e67fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:a7:82:c9:11:d4:c0:63:42:95:aa:46:a4:
2e:45:d1:39:cb:45:51:0e:0c:2f:1a:c2:1c:8c:a3:
bd:06:e2:a5:29:33:1c:c7:58:cf:68:a4:e8:51:63:
09:bf:e1:2d:90:a9:e0:0c:97:dd:ae:3c:1e:84:d1:
c8:b7:e5:7b:c5:17:14:95:f0:23:de:24:27:57:67:
65:dd:07:d1:61:73:57:36:37:f7:5f:22:b6:75:71:
5b:b3:8c:21:99:fb:1c:76:a5:2f:4b:87:b2:e6:9a:
b2:84:13:ee:dd:6e:10:7b:cd:67:6a:75:aa:e1:4c:
fb:7e:b2:49:24:7c:0a:76:f5:46:eb:8f:3f:ea:dc:
78:76:02:d2:b9:f8:d4:98:02:6e:af:1a:90:35:a4:
c7:8d:79:c1:27:e9:b4:73:40:bf:39:f9:7a:76:7b:
51:5e:27:5d:14:fd:f9:a1:3a:d6:7c:19:75:44:91:
02:34:67:0d:d8:81:88:ae:82:80:28:28:5a:e3:e3:
0d:c6:6a:88:72:fb:10:f7:4d:4d:ca:7c:99:93:a5:
0a:71:ee:90:9a:b9:40:8c:9e:87:c7:82:35:26:7b:
b8:67:ed:2a:e5:38:cf:04:7b:ac:6f:7c:22:8a:21:
cd:15:72:35:e3:41:c6:87:85:6f:42:4f:6d:03:bb:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4E:B0:43:D6:96:BB:38:89:D4:6C:CC:D1:2D:CF:78:BE:02:01:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/af7af33e-1c72-3e93-b4c6-dbaeaef521f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
X509v3 Authority Key Identifier:
keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.226.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:da:9c:ae:69:3d:a7:33:7a:72:02:5e:a7:7d:87:c0:47:30:
e3:f7:7a:73:ce:90:4f:fb:b3:b6:13:00:7f:cb:8d:ac:e5:ab:
a9:1d:28:e3:fd:a3:dc:f4:16:5a:51:1b:d5:24:7b:44:e6:ab:
01:25:18:48:c1:1c:03:23:86:88:9f:17:48:0c:62:56:20:fa:
f7:6e:45:41:e5:31:4f:dd:77:d4:27:14:93:b0:b3:1b:aa:b0:
cc:7e:47:d6:3b:5e:f7:05:f1:25:3f:72:f6:ca:b3:60:33:5a:
bc:cf:0d:d5:cc:8a:16:85:d6:db:49:4f:b9:ce:50:b3:2f:63:
b4:0e:67:ef:d7:75:60:77:01:8a:9c:4c:da:aa:3d:24:d5:34:
e7:92:86:8f:ae:ac:52:ca:71:97:bd:c3:a5:02:91:5f:a8:ee:
ec:93:e5:4a:67:50:4f:80:3f:f8:2f:65:71:c2:28:59:9e:f9:
19:f0:78:c8:00:69:e2:85:da:ff:a2:05:49:db:6e:08:6e:39:
d4:4f:52:7c:12:88:3c:bb:f5:2f:8e:66:b0:95:d6:f5:c1:b4:
73:8f:66:4e:3d:e8:ba:b3:6c:0f:4b:f5:89:00:e1:35:b9:a1:
99:32:fb:66:b9:f2:56:00:19:f8:49:30:47:5b:29:de:d1:77:
57:01:ca:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:24 2026 by rpki-client