
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/88878503-ca57-3c1e-b74f-4fdbb01c2b80.roa
File: 88878503-ca57-3c1e-b74f-4fdbb01c2b80.roa (raw, json)
Hash identifier: /0fAH8QRiU49khK3XruH9AWJ/Tj0INig6woDd5YFqV4=
Subject key identifier: 08:CB:73:F8:EC:DD:C1:5F:03:13:59:23:DA:78:36:92:90:CD:52:C1
Certificate issuer: /CN=08ed5d26-737b-4818-a76d-ac026d331614
Certificate serial: 010D0C9F4328584CFB73158AA023BEC075B6D680
Authority key identifier: B8:54:5F:B0:9B:1A:05:9C:0F:03:AE:4F:1D:3A:0A:17:9F:0D:D9:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/88878503-ca57-3c1e-b74f-4fdbb01c2b80.roa
Signing time: Wed 25 Feb 2026 16:54:25 +0000
ROA not before: Wed 25 Feb 2026 16:54:25 +0000
ROA not after: Tue 26 May 2026 15:54:25 +0000
asID: 2914
IP address blocks: 128.254.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/08ed5d26-737b-4818-a76d-ac026d331614.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/08ed5d26-737b-4818-a76d-ac026d331614.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fb:73:15:8a:a0:23:be:c0:75:b6:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ed5d26-737b-4818-a76d-ac026d331614
Validity
Not Before: Feb 25 16:54:25 2026 GMT
Not After : May 26 15:54:25 2026 GMT
Subject: CN=f0a98553-0127-4b5d-9295-e1b08cc4ac59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:66:13:b9:05:e1:15:c6:b6:15:bd:0b:c1:92:
7d:dd:01:3b:47:47:4c:26:6f:b6:d7:33:10:1c:45:
32:a2:a0:65:a8:3c:1b:0b:f9:fe:8b:63:95:3e:50:
fc:4f:10:1b:ad:09:e7:b2:7c:60:68:18:cc:7e:98:
0a:68:28:50:e8:f3:4a:5b:93:d9:50:c8:76:8b:ed:
4e:57:8c:c6:2f:c5:9f:be:9b:4d:29:e3:ee:4d:18:
16:2c:ca:2f:0a:a0:cc:31:a3:7b:1e:3e:3c:eb:7b:
17:11:17:2e:52:7d:72:e7:8c:c9:07:f9:e4:a2:4e:
3e:a5:57:b8:e7:41:70:81:fe:a6:9c:42:c0:9f:19:
00:8f:cc:c3:e0:09:3c:55:97:3e:52:2a:f3:3e:49:
34:65:e9:bd:15:61:b8:7e:97:4e:a2:98:58:d1:de:
9b:57:7d:b7:01:fc:09:c1:5f:46:a8:5d:f2:08:2b:
a2:7a:70:bf:c7:dd:5e:f3:eb:5a:9f:88:b7:da:44:
9f:76:c9:79:54:bb:61:83:f4:7a:9c:e6:90:4f:b4:
12:95:30:fe:24:b5:5c:01:2a:37:fc:8f:5c:23:35:
13:a7:af:a0:b0:b7:e6:8c:4e:95:ae:d8:a8:3a:31:
9b:54:3f:9e:94:c4:e1:a6:11:1f:90:3f:96:27:04:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:73:F8:EC:DD:C1:5F:03:13:59:23:DA:78:36:92:90:CD:52:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/88878503-ca57-3c1e-b74f-4fdbb01c2b80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/08ed5d26-737b-4818-a76d-ac026d331614.crl
X509v3 Authority Key Identifier:
keyid:B8:54:5F:B0:9B:1A:05:9C:0F:03:AE:4F:1D:3A:0A:17:9F:0D:D9:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:a4:b5:3d:8f:4d:2a:c1:8e:78:d2:5d:b9:a2:44:d5:0a:17:
53:8b:e1:1d:81:43:d0:ad:cd:b6:47:2a:32:ba:8e:b5:d7:4a:
3a:56:59:c0:61:92:43:bc:b8:a3:ca:82:80:b8:96:13:ef:69:
c4:5b:f4:b5:55:db:27:46:73:75:ab:24:5e:7c:b2:4a:f2:17:
32:40:77:0d:ab:4f:e3:9a:df:d4:12:a4:43:f3:ef:4b:e0:fc:
50:d0:9c:73:f1:92:15:4d:36:97:93:ab:3b:ab:a6:83:11:f3:
a9:62:00:d7:29:86:15:b0:10:25:bc:9c:7e:7f:28:b6:a9:03:
6a:5e:34:6f:51:95:73:74:23:42:1b:1b:5a:cb:5c:d2:2a:c2:
e5:6f:17:11:f6:b3:10:d7:3d:d4:9f:cc:5c:76:a7:47:6c:49:
12:49:7e:a5:d0:73:21:9c:e2:bd:4d:6f:f4:da:f3:b2:65:44:
07:58:94:31:ec:07:17:03:c2:14:ff:7a:8d:5f:f6:9e:f5:18:
01:b7:77:fb:dd:60:b3:35:f0:89:9a:6f:0c:2c:52:2e:df:4d:
80:bd:37:84:5e:57:64:4d:0f:43:6e:1e:77:1f:1c:fa:2f:c9:
3a:38:4b:3b:7c:44:13:df:2e:30:de:85:ff:8b:49:03:5e:72:
60:e1:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:20:51 2026 by rpki-client