
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa
File: a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa (raw, json)
Hash identifier: dqVeEoeZAju1t/IjjH2Bghs9rAatQC0Q42vpehUfWfA=
Subject key identifier: B4:7D:D7:94:74:B3:3C:0A:B3:3C:FD:D0:C9:76:8C:DB:74:F0:B7:DB
Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial: 010D0C9F4328584CD13CA3D9024EBF566EC47580
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa
Signing time: Tue 10 Feb 2026 14:00:41 +0000
ROA not before: Tue 10 Feb 2026 14:00:41 +0000
ROA not after: Mon 11 May 2026 13:00:41 +0000
asID: 1448
IP address blocks: 156.146.128.0/17 maxlen: 17
158.41.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d1:3c:a3:d9:02:4e:bf:56:6e:c4:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
Validity
Not Before: Feb 10 14:00:41 2026 GMT
Not After : May 11 13:00:41 2026 GMT
Subject: CN=0f398e55-cb87-49c5-a1db-91d653096bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:4c:79:a5:59:a4:2f:1d:f5:83:ce:12:78:
0b:9f:d2:62:27:a9:b4:5b:5c:25:2b:6f:d7:08:b2:
b7:e0:6a:ae:ca:22:7b:4a:f7:6e:a2:47:cb:b2:e9:
4b:b3:c4:82:a3:30:c1:64:b2:58:1e:e4:0c:24:9e:
aa:70:d3:bc:20:ad:b9:a6:07:79:94:25:e8:06:a8:
70:93:0d:71:7d:a1:b3:c8:dc:08:ad:57:8d:6d:8a:
8c:8d:b8:cd:82:38:19:60:a5:57:21:fa:9c:8c:08:
93:ad:7b:e9:17:e5:bf:34:9a:66:d6:6f:44:a9:b3:
9e:2c:fa:a7:f3:21:6a:40:79:59:72:cc:b9:98:20:
17:d4:b1:e6:f0:4f:1c:69:39:8d:e5:28:8b:ba:0c:
4c:ab:a4:ce:8f:05:42:87:03:2e:48:24:da:3b:10:
78:8f:4b:81:49:41:1c:4f:67:5b:11:a4:fa:a3:5f:
8d:b9:a0:9a:b4:27:63:cf:08:f5:80:f6:21:d3:34:
e7:8b:43:f1:7b:1e:c0:26:37:10:3e:11:ea:ee:aa:
ed:0d:b8:54:9c:a4:9f:09:e1:bc:c1:84:25:46:79:
33:36:d6:57:8a:29:6d:a5:26:a2:37:b1:94:a1:64:
e2:e4:ee:f9:f1:90:79:ef:41:e5:3e:99:1b:6e:73:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:D7:94:74:B3:3C:0A:B3:3C:FD:D0:C9:76:8C:DB:74:F0:B7:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
X509v3 Authority Key Identifier:
keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
sbgp-ipAddrBlock: critical
IPv4:
156.146.128.0/17
158.41.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:7d:af:b0:b4:dd:dd:50:38:76:a1:7a:5b:23:c4:27:ee:86:
fc:29:97:d4:f6:3d:5a:11:90:47:7e:16:b2:0b:57:97:24:7c:
19:e9:1c:63:96:4a:b1:f6:17:d5:9b:59:34:2e:eb:9b:f7:aa:
54:30:f9:05:7c:ca:0e:55:b1:3e:9b:5e:94:1c:bc:cd:4f:2f:
35:9d:7c:51:58:9c:f4:61:45:7a:da:44:4e:05:0f:eb:8b:88:
18:f1:b2:63:45:60:cb:e2:ff:2e:80:9c:77:ac:51:af:fa:a6:
cf:c3:89:26:8e:0b:28:12:e1:9e:4e:ed:85:21:93:72:95:e2:
da:96:f9:a0:37:1a:86:c7:93:0a:57:5b:7a:cf:14:98:13:8b:
cc:4e:d6:b0:ee:3d:5d:b7:57:1a:bb:da:c0:c4:79:af:63:1c:
e1:98:d7:e4:88:83:72:eb:77:99:74:80:30:73:0f:14:c1:f3:
ae:c3:c4:18:fd:ef:6a:b0:a4:1e:da:1d:c9:b6:ff:de:44:4a:
67:bb:1c:66:33:68:4e:7d:85:47:dd:4a:50:16:51:b6:fa:f1:
89:a0:d0:8d:75:1e:94:3a:b6:ce:9a:a9:6f:80:cf:af:dc:48:
68:96:e2:1b:cc:6b:9e:84:c3:7f:72:79:33:77:6a:2b:1b:5f:
15:f8:da:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:53 2026 by rpki-client