
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4014fbc1-d2d1-376f-b669-c371f55fd20b.roa
File: 4014fbc1-d2d1-376f-b669-c371f55fd20b.roa (raw, json)
Hash identifier: Fb90bRLb45lrk18Zk+QW4DUklvMlzDvCxOrABXLeoUU=
Subject key identifier: 5D:EB:69:9D:02:B5:15:79:4C:D1:0C:8E:1B:37:F7:CB:46:3F:C1:1B
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584D98BAA4354D3FA7B3832B7780
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4014fbc1-d2d1-376f-b669-c371f55fd20b.roa
Signing time: Thu 23 Apr 2026 01:00:24 +0000
ROA not before: Thu 23 Apr 2026 01:00:24 +0000
ROA not after: Wed 22 Jul 2026 01:00:24 +0000
asID: 399439
IP address blocks: 216.249.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:98:ba:a4:35:4d:3f:a7:b3:83:2b:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 23 01:00:24 2026 GMT
Not After : Jul 22 01:00:24 2026 GMT
Subject: CN=fcbbe6da-3e55-4f76-a67d-b0bf953df6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:67:85:15:c2:90:c5:7a:ed:94:f0:53:e2:3c:
9c:60:57:b4:ea:7a:f8:aa:3a:58:76:75:1a:ae:7c:
5d:ba:dc:93:65:44:c2:16:3b:63:15:f9:6c:11:68:
6c:48:0e:3a:74:04:0a:d6:95:f5:10:c4:6c:59:ce:
1a:47:a2:e9:08:62:76:3b:97:66:14:65:74:75:84:
42:b0:ed:6f:97:9d:fe:f7:fc:50:83:cc:96:1a:01:
49:80:64:32:3d:91:3e:7b:c5:73:69:72:23:78:c5:
c7:08:4e:e4:a2:e1:5d:bf:f0:9f:df:f9:2a:1f:ec:
ad:fc:63:77:1a:0c:cd:ae:8a:76:69:5c:4e:d6:75:
f4:1d:11:3d:0c:78:63:a1:5b:6a:a5:11:9f:04:00:
a1:02:a1:f1:98:56:a5:28:67:a9:54:d0:24:15:1c:
c7:49:b1:b5:89:5d:d1:e7:84:6f:7f:7c:a6:e9:3f:
fb:4f:ec:1c:be:cd:a2:09:64:6f:51:82:ac:e8:a5:
02:b9:16:50:01:7e:0c:72:6b:f0:e6:38:e6:83:05:
db:76:0d:00:da:4b:fb:a3:b8:f5:f6:10:38:de:55:
45:26:75:78:6f:dd:e0:25:fa:14:1f:97:da:48:95:
23:be:d9:3f:03:57:65:e1:d0:9d:45:d0:a0:20:20:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EB:69:9D:02:B5:15:79:4C:D1:0C:8E:1B:37:F7:CB:46:3F:C1:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4014fbc1-d2d1-376f-b669-c371f55fd20b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:97:f4:34:55:7e:e2:6c:9e:2c:2f:ff:9a:d4:ee:56:f2:a5:
ce:c5:33:d0:02:41:63:c0:57:da:d3:23:e5:45:4b:a2:9f:f4:
30:8b:38:6c:0b:e1:b1:d4:b7:f0:05:6c:b5:f4:0d:c6:b3:a4:
59:d1:f7:c4:7b:dc:01:25:47:2b:0e:fc:32:a9:72:d2:95:e6:
fe:ec:7d:a0:60:40:dc:a2:c9:c0:d8:b2:f4:e5:1c:6e:2d:64:
2d:24:23:03:ca:bb:ab:f2:23:9b:75:d9:df:d6:31:1c:29:b8:
d0:14:88:6c:c8:e2:31:32:f5:27:14:46:63:f8:73:a0:53:8d:
60:ba:5c:25:31:b9:6d:72:da:4f:5a:7b:33:94:88:63:f9:5c:
6a:ff:ad:4b:0b:93:dc:7d:1c:a6:74:ec:35:05:a8:9a:c4:b7:
ff:0f:12:0f:09:f8:9d:58:c5:6e:a7:19:87:f0:fa:04:95:45:
1d:38:73:23:da:ba:9d:58:4a:08:c8:53:2f:53:12:c7:c3:1a:
71:a0:a0:0d:86:a5:52:80:8a:aa:32:68:19:62:de:4c:8b:cb:
be:06:05:d6:7e:c8:60:09:eb:7f:52:41:99:4e:64:9c:aa:e8:
e8:1e:e9:63:9f:56:4c:cc:f3:ef:57:a9:9c:14:73:15:d6:18:
85:f9:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:14:05 2026 by rpki-client