
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa
File: f97a8904-a92b-3e71-9209-0e718ad0a126.roa (raw, json)
Hash identifier: /nnEH0GC1eG1HFg18TeWDe08ksEM6kV2tT65atcnESE=
Subject key identifier: 16:42:8B:9B:6A:79:29:70:0D:A0:45:EF:5F:B7:F7:AC:B8:70:E7:92
Certificate issuer: /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
Certificate serial: 010D0C9F4328584D00B252768EACBE3504E3DE80
Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 10753
IP address blocks: 192.228.18.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:52:76:8e:ac:be:35:04:e3:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=cbdd3de4-bc84-4ca0-a55f-3ec9ea455c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:18:51:06:be:df:03:6d:cd:8a:e7:fe:3c:
d4:1d:b4:e3:89:85:ce:4e:3d:a3:46:d4:3e:2f:ef:
70:57:bd:98:78:59:90:da:76:e6:db:0c:80:b5:a7:
11:9d:b4:92:fd:fa:47:f7:21:ee:8f:72:88:7d:f3:
b6:13:35:b5:33:d1:e0:36:62:d9:3f:fa:09:4e:c6:
af:69:d4:dd:20:d3:18:4a:ed:10:ef:ff:0f:06:f2:
52:1f:a9:4a:c1:e1:31:fe:54:9f:c3:81:19:f4:b1:
76:4b:5c:97:5b:ce:d9:b2:0e:15:70:94:96:7f:6e:
56:e0:5b:ac:b4:5f:58:f1:78:1b:b3:39:bd:9e:e5:
ea:5c:b3:e8:21:28:09:73:67:29:73:4b:3d:76:c7:
67:f2:e9:ab:61:3b:6f:9d:21:00:45:84:c1:02:73:
3c:44:07:c8:66:54:ad:7f:4a:84:d7:d5:a6:9d:f6:
f1:35:f8:5b:2a:43:ca:a0:fb:16:dc:d9:f3:10:e8:
92:d1:91:75:ed:6e:70:f7:b3:d3:71:84:4a:31:a8:
15:ba:28:fd:4c:dc:e0:cd:61:4c:97:b1:43:50:eb:
f5:1a:ea:e7:22:5d:cf:ef:88:22:3d:51:ab:b2:6c:
24:d9:78:5e:70:b3:95:84:21:0d:dc:40:67:27:f1:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:8B:9B:6A:79:29:70:0D:A0:45:EF:5F:B7:F7:AC:B8:70:E7:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl
X509v3 Authority Key Identifier:
keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.228.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:22:f0:c0:fc:52:88:03:67:03:f9:c3:c4:c1:f5:39:3e:32:
f3:4b:a8:f8:51:85:75:dc:81:99:9a:54:db:40:15:d2:8c:dd:
f1:97:a4:b7:6e:9c:b8:a7:ef:30:f0:6a:fd:e7:f7:1a:de:94:
3e:46:8c:01:53:01:f4:25:6b:e4:f6:03:98:e8:f8:c3:64:8f:
55:bc:8a:0c:77:37:c6:b4:c7:18:53:e1:61:e4:1e:17:ba:25:
53:58:e3:ac:61:f5:9f:d5:08:d6:00:65:8e:74:54:ee:8b:af:
60:b8:65:50:37:6b:52:fd:7b:43:eb:08:20:da:1c:84:50:ed:
74:7e:64:fa:65:86:9f:72:2e:12:59:ea:94:a7:06:20:8d:42:
a0:ae:03:00:65:00:19:e8:6f:27:17:3e:23:7a:03:b2:51:4c:
23:ee:84:23:95:b9:82:36:f8:39:e1:ce:d4:10:8b:5c:27:ac:
7a:9f:fe:e4:59:5f:91:1c:f2:5d:e5:db:c2:45:b9:f6:02:bd:
20:e8:08:be:4d:72:d8:a5:ca:e7:66:5d:31:31:91:1a:47:88:
20:2b:20:59:e3:c9:ec:f6:16:0b:e9:1c:66:f1:b3:94:fb:cc:
65:68:92:a8:45:32:10:25:bf:33:a4:f1:49:33:dc:ad:3f:f8:
2d:c9:cd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:59 2026 by rpki-client