
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/b9da01fa-b342-34a6-a479-a5d74c6fb62b.roa
File: b9da01fa-b342-34a6-a479-a5d74c6fb62b.roa (raw, json)
Hash identifier: U1RIWMx6OorZnY7bSUxcx+oL/JgPBIov5MVfgAnAaVg=
Subject key identifier: F7:57:29:9B:14:05:74:36:2B:61:95:AE:39:2E:11:BD:8A:C7:38:9A
Certificate issuer: /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial: 010D0C9F4328584C9967113B034B4356551218C0
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/b9da01fa-b342-34a6-a479-a5d74c6fb62b.roa
Signing time: Wed 21 Jan 2026 14:00:38 +0000
ROA not before: Wed 21 Jan 2026 14:00:38 +0000
ROA not after: Tue 21 Apr 2026 13:00:38 +0000
asID: 209453
IP address blocks: 173.246.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:99:67:11:3b:03:4b:43:56:55:12:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Validity
Not Before: Jan 21 14:00:38 2026 GMT
Not After : Apr 21 13:00:38 2026 GMT
Subject: CN=b400ea83-b4d4-4413-b8c9-90fb2fd4168b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:46:5d:d9:1f:b3:4d:7c:4f:fe:02:f9:6d:bd:
81:22:35:4b:5e:92:52:b2:d0:be:d6:9a:54:34:51:
a5:ea:85:ed:98:45:8f:52:f8:9b:30:5d:09:38:83:
b2:41:f2:bd:5e:cf:7c:3e:62:f6:d2:7b:4a:4d:27:
d7:49:31:4a:54:d2:1b:e8:2f:47:7a:87:c3:55:4b:
63:4a:00:bb:ff:be:f2:bc:80:e3:85:51:e7:2c:38:
82:c0:35:0f:85:e1:69:cd:86:a3:0f:42:1f:e0:c6:
54:fa:27:73:a9:47:81:84:1b:5c:a3:44:61:e4:21:
cf:e7:5c:da:cc:1c:cf:4d:bb:ea:fb:e9:c9:20:58:
fc:8d:a2:f4:fb:51:8a:24:f7:ec:95:e6:a2:3b:6c:
9f:66:03:3a:7f:14:ef:6d:19:1c:aa:0a:a5:da:ba:
4d:59:6a:f3:7a:62:b6:10:80:69:bf:f5:27:56:61:
32:ef:c5:b1:9c:00:c6:27:c2:c7:ec:bf:2d:52:dd:
90:1d:d9:7c:5f:5d:82:5f:bb:d6:3c:f8:4d:e4:39:
4d:6b:6d:09:73:f9:be:73:0f:27:9c:1c:e0:8c:19:
78:90:31:bc:81:5d:f1:03:19:6e:30:18:7b:86:81:
c9:e9:02:ae:f5:b5:58:e7:dc:5f:1f:0f:70:88:fa:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:29:9B:14:05:74:36:2B:61:95:AE:39:2E:11:BD:8A:C7:38:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/b9da01fa-b342-34a6-a479-a5d74c6fb62b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
X509v3 Authority Key Identifier:
keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.246.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:34:e2:54:15:6b:23:7e:7d:2b:05:0b:83:cd:6f:56:eb:5b:
2e:93:2d:b2:88:3c:94:76:a1:d4:db:89:8e:f5:32:4a:00:80:
49:4e:96:62:d0:20:7b:80:fe:44:3d:20:0f:44:95:a0:7d:79:
46:59:29:83:91:09:ea:eb:9f:83:9a:19:f5:1c:0b:ad:60:4f:
a7:f3:c3:b2:eb:74:8a:19:40:bd:b3:e1:7c:50:d1:5f:4b:04:
3d:e3:37:e8:b2:ff:5e:49:ff:77:51:ec:c8:70:2b:cc:84:05:
0b:f0:bf:0f:b0:08:f2:9d:3f:dd:ae:88:17:03:5b:5d:7c:f3:
c9:60:a6:08:dc:8a:ff:21:f6:c3:f2:20:73:0f:32:df:a7:64:
82:87:40:5e:d0:65:a7:4c:05:80:db:37:48:57:18:18:3b:b8:
8c:0c:b2:4f:7e:d8:21:46:79:b9:bf:11:41:b1:ac:9c:d5:4c:
83:13:7e:59:e2:a0:f5:1a:77:3e:3f:07:75:b4:8b:3c:b0:28:
da:0d:02:5f:35:ce:5d:be:cc:87:cd:5e:e4:d4:34:e9:e6:c6:
e6:04:c4:cf:b6:de:e8:1e:8c:56:6b:bb:22:15:25:88:b5:52:
7f:06:2a:df:70:83:9b:b5:16:c1:b5:02:de:e3:d8:10:d7:6e:
4c:37:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:26 2026 by rpki-client