
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa
File: 5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa (raw, json)
Hash identifier: rgopVcen8Iz2OsgAHP2z+szNbrrIamp05ZmqXZN1u6A=
Subject key identifier: E0:23:48:B6:05:9F:46:83:2C:E0:98:52:17:88:A3:A1:B8:1A:AD:1A
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584D9E50185D5EFC9A203E6FFFE0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 15204
IP address blocks: 66.128.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:18:5d:5e:fc:9a:20:3e:6f:ff:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=41528829-313d-43f5-9bcd-43388acd4299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:71:29:e8:9b:f2:18:1a:3a:40:d7:e0:0e:
f6:09:28:91:08:60:ba:3e:16:eb:81:aa:4c:dc:4b:
92:37:fd:d9:43:30:57:41:2a:56:ef:f5:34:9e:db:
6a:d6:de:83:84:01:80:1b:56:c3:50:07:c9:66:3a:
6e:9f:81:42:d4:d2:4f:33:7d:3e:f6:81:0d:ed:6b:
19:20:02:34:70:14:3b:fa:cc:e2:41:cf:cb:f8:63:
22:5e:bf:c7:b0:3c:08:5f:6f:78:f8:1a:3c:f0:02:
71:53:97:42:dd:3d:31:72:f5:12:bc:6f:36:ba:48:
b8:e9:34:84:fe:7f:c2:32:fb:5f:8e:c6:e8:29:e7:
b2:d5:f8:8d:9d:9a:75:06:19:f5:d6:6c:00:63:a3:
81:f2:ba:e6:a9:ee:e6:68:72:aa:67:b1:dc:f7:66:
6c:91:f3:02:7f:01:3d:45:92:fb:0f:13:0d:f3:18:
bd:29:4f:55:43:cc:3b:dc:87:72:55:87:d0:cf:91:
5a:0f:2a:e4:5b:2c:98:07:61:93:fc:df:3f:4a:1a:
d7:df:43:e2:8e:3a:be:d2:03:11:1a:b6:4e:6a:fe:
d1:80:24:05:ef:f9:9e:50:dd:8b:b6:93:19:c0:80:
bc:e7:5f:d2:1f:e8:e9:28:7d:f9:f2:b9:cf:b8:0c:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:48:B6:05:9F:46:83:2C:E0:98:52:17:88:A3:A1:B8:1A:AD:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:36:41:5d:47:66:92:cd:41:80:47:b5:fb:bb:dd:59:20:93:
e2:40:d2:18:f9:22:62:1a:da:ff:a2:d4:1b:23:ee:43:3a:0e:
53:5e:ee:ef:81:c5:47:58:f9:32:1e:6f:e1:63:25:80:40:dc:
de:81:e7:16:a5:81:bb:ba:2a:40:44:77:0f:d2:a9:b5:8b:b5:
e3:9d:d1:64:e3:56:4f:fe:c8:ba:07:72:db:68:de:50:97:a9:
ec:eb:63:a8:a9:66:34:29:21:17:88:99:8d:bb:d7:f8:d3:b8:
5b:db:cc:cd:7e:0b:c3:26:1a:f4:08:47:ab:f5:6a:30:3b:bf:
9f:03:d1:e6:40:99:40:33:6d:8c:dd:06:e7:9c:aa:9d:c8:77:
d2:fe:4e:88:4c:36:51:a0:86:45:5e:8a:d4:a6:f7:b5:18:3d:
fe:35:16:f7:a6:b8:8a:5e:3c:50:93:f0:c0:7f:71:b8:a3:3a:
e2:91:bd:ba:67:c5:1d:d2:82:3a:af:1a:cc:c4:4e:8b:1d:3e:
58:0a:36:65:ec:c7:09:14:23:23:27:b1:7b:43:7d:04:35:4c:
17:a4:b4:52:94:c6:f3:dd:e3:68:bb:2c:14:7f:bf:50:61:ca:
ce:c7:5c:32:e9:17:52:4f:42:72:25:86:ba:61:be:84:d0:b1:
61:95:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:52:00 2026 by rpki-client