
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/b3ccd0e2-35dc-3647-a448-49d910de2281.roa
File: b3ccd0e2-35dc-3647-a448-49d910de2281.roa (raw, json)
Hash identifier: XEwt/kKKEgo68zp0VWvzexna6mhOA//IlhZcO4i/GHE=
Subject key identifier: 89:1E:6B:1D:6B:ED:21:05:16:FC:7B:B1:17:B5:ED:9B:97:4F:6B:25
Certificate issuer: /CN=4ab46853-eb00-4588-9764-5162930da6b1
Certificate serial: 010D0C9F4328584DBFD0BA63BE860A349E349F40
Authority key identifier: 4E:87:75:CC:A6:70:15:D5:E4:EA:81:7D:4F:9B:D8:FC:33:88:17:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/b3ccd0e2-35dc-3647-a448-49d910de2281.roa
Signing time: Thu 07 May 2026 01:00:23 +0000
ROA not before: Thu 07 May 2026 01:00:23 +0000
ROA not after: Wed 05 Aug 2026 01:00:23 +0000
asID: 26397
IP address blocks: 169.228.130.0/23 maxlen: 23
169.228.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4ab46853-eb00-4588-9764-5162930da6b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4ab46853-eb00-4588-9764-5162930da6b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bf:d0:ba:63:be:86:0a:34:9e:34:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab46853-eb00-4588-9764-5162930da6b1
Validity
Not Before: May 7 01:00:23 2026 GMT
Not After : Aug 5 01:00:23 2026 GMT
Subject: CN=3a1ee8da-d9cf-4cfd-9dd7-419652daa06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:7d:76:17:c1:9e:15:ae:b9:c3:2a:03:0e:
83:f4:10:2e:c9:30:6d:88:73:c6:ec:1e:cf:ef:d7:
d2:67:5c:83:ee:96:cc:ea:ac:c6:bc:6b:4b:7f:9e:
f4:9f:33:bb:0b:68:60:d5:2b:b7:49:8d:76:74:92:
a1:6a:5e:30:e4:9c:fb:ad:df:36:c7:05:98:a6:6e:
fd:ec:ac:bf:a7:29:ae:e5:b9:b8:1f:2c:44:70:f3:
cb:98:df:73:f9:e9:98:6e:46:97:9a:7c:0e:1d:d4:
f4:aa:08:fe:c5:fd:80:3b:2e:d7:b9:47:20:6c:43:
ba:8f:68:22:fc:e8:f1:ec:40:21:2a:05:d1:f1:b7:
29:e8:89:d6:ac:fc:b9:8d:3a:1b:77:14:79:2d:0b:
94:4b:21:40:bf:0b:5b:2c:13:68:eb:a1:15:d5:fa:
52:18:71:44:61:31:a6:96:d7:cc:97:01:38:87:e2:
50:a0:b6:46:73:b9:2b:4e:75:71:6c:33:26:fa:c0:
a8:d2:df:45:b7:74:10:80:2c:d4:79:4e:7b:97:86:
47:79:44:53:2b:44:e8:e6:2d:f1:f6:e9:1e:39:4d:
54:3d:84:4f:77:1c:58:2a:99:2b:89:ff:39:c7:75:
f2:d8:d2:a2:10:52:d7:0f:3e:ce:18:bb:52:93:dd:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1E:6B:1D:6B:ED:21:05:16:FC:7B:B1:17:B5:ED:9B:97:4F:6B:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/b3ccd0e2-35dc-3647-a448-49d910de2281.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4ab46853-eb00-4588-9764-5162930da6b1.crl
X509v3 Authority Key Identifier:
keyid:4E:87:75:CC:A6:70:15:D5:E4:EA:81:7D:4F:9B:D8:FC:33:88:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1.cer
sbgp-ipAddrBlock: critical
IPv4:
169.228.130.0-169.228.132.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:c9:8b:c4:8c:9c:71:8f:d1:44:05:eb:89:df:59:4a:69:05:
a1:97:38:2e:0a:73:a1:17:bf:9f:db:12:bf:30:20:94:98:d1:
72:78:ff:09:ef:c5:50:37:b4:17:68:28:da:66:2c:54:ec:d7:
4c:5b:79:c9:2a:07:07:c2:6b:55:50:96:25:21:1e:dd:08:35:
dd:a6:07:ab:bd:3f:f4:25:c2:e9:2c:f1:f2:80:7b:32:cb:81:
37:ee:9e:94:a9:33:e7:49:d9:71:bd:56:33:b8:35:71:e4:21:
52:c1:23:f5:7e:6b:a6:d3:04:f1:77:3b:f1:a0:76:19:45:98:
49:ed:3c:d2:6c:8d:e2:a1:c4:a2:2d:10:a4:a0:09:ba:a2:6c:
e6:b0:e7:b0:ee:15:8a:e0:d0:a7:5d:5c:37:9f:9f:59:ae:cf:
41:c2:07:9d:75:8c:40:b6:b3:57:57:c4:67:21:ee:ce:8f:db:
10:72:54:5a:97:e4:0f:b8:45:7a:64:26:7d:e2:30:49:c6:eb:
a3:14:e4:17:90:d6:e4:98:36:32:df:eb:0d:d4:08:47:a5:39:
a7:24:dc:f3:7a:2d:ce:4d:0a:d7:02:5c:01:12:12:db:89:aa:
65:44:ba:ee:5c:07:57:43:47:aa:38:a5:2c:a7:4a:b1:0a:14:
50:8b:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:48:52 2026 by rpki-client