
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa
File: 8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa (raw, json)
Hash identifier: lWAsE/cRVTUXGXFOu5kOHgqK3AVAq0k0OYSa914aKh0=
Subject key identifier: 2B:98:F4:D8:35:E6:C5:1A:CB:07:3A:C8:2D:55:3A:52:55:B8:5B:46
Certificate issuer: /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial: 010D0C9F4328584CD407719FF1C6F0806A4B0BE0
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 19905
IP address blocks: 157.188.0.0/16 maxlen: 24
161.185.0.0/16 maxlen: 24
167.153.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:71:9f:f1:c6:f0:80:6a:4b:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=e66c4af1-3651-4607-a0c4-edf9612cee7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:5c:7e:db:3e:ef:57:4a:db:b0:9d:1b:29:
e7:54:5e:7f:ef:68:c5:dc:e5:d8:ff:0d:00:a5:d4:
06:ff:95:e9:78:e6:c2:27:de:c8:cc:23:33:05:71:
c2:ad:4c:9c:41:9d:87:20:15:52:60:0f:c2:aa:b2:
85:df:fc:10:15:1e:15:c7:16:03:54:ea:9b:62:7b:
25:61:24:8a:8a:15:4d:30:c8:03:05:b6:ad:26:86:
7f:08:20:f8:da:e5:51:0e:16:b0:32:0c:81:20:db:
75:87:e7:08:5f:aa:46:92:21:2d:56:c0:f6:b5:3a:
a1:fb:2e:1c:b2:ce:b6:4c:8b:dc:fc:b0:53:0f:21:
8a:3c:db:23:71:43:08:27:b2:61:7f:ea:a3:7a:e5:
5a:69:1b:11:dd:70:49:62:f0:9c:c7:4d:cc:30:b9:
bf:6a:5f:b1:3b:74:0c:05:27:2a:78:47:00:c5:56:
5e:da:27:83:65:4b:fa:a8:41:77:01:a5:50:06:7b:
32:45:5d:0d:a2:0f:dc:9f:54:7a:a7:f7:3d:83:e1:
20:45:33:60:73:5a:c2:09:35:b7:29:01:9a:81:3a:
5c:1e:6f:50:f3:07:df:87:4d:bf:4c:a4:bd:87:9d:
18:87:83:76:54:6d:3f:7b:5b:c3:e8:ef:63:7b:83:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:F4:D8:35:E6:C5:1A:CB:07:3A:C8:2D:55:3A:52:55:B8:5B:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
X509v3 Authority Key Identifier:
keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
sbgp-ipAddrBlock: critical
IPv4:
157.188.0.0/16
161.185.0.0/16
167.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:a4:ca:bc:22:40:cd:39:c4:4f:cd:24:f6:f4:98:f9:61:1f:
04:61:5f:37:5d:71:1e:6d:3d:fc:a7:96:48:92:43:6d:55:53:
77:9e:6d:e6:a8:c6:c7:f2:7e:29:7a:77:18:ce:6c:ac:db:f1:
75:c8:58:d7:ef:4d:8a:87:a1:98:a6:57:09:2d:a1:2f:6a:ea:
bd:27:48:59:49:bd:b4:39:57:53:1c:50:a1:24:70:cf:63:b0:
64:0b:1e:c2:2d:dc:54:83:1e:ea:16:00:82:22:74:03:0b:6a:
cf:8e:f9:f7:0c:20:65:44:21:ca:a3:bf:91:95:28:8c:25:82:
3e:a0:06:71:29:8c:c2:cd:2c:5c:90:e6:90:16:82:97:da:11:
12:04:f4:65:70:59:73:49:3c:00:02:b2:90:4d:3c:3a:66:12:
f2:c3:9d:65:b2:27:db:2f:3e:23:68:40:eb:1e:f3:06:24:ce:
33:ad:8f:f6:5e:5c:e5:03:0a:38:d4:21:53:b5:6e:21:10:68:
c5:8b:70:e3:a4:08:40:55:ae:d0:7a:40:0a:5e:c5:50:94:8e:
3a:03:78:2c:47:e2:04:c0:b4:e9:d5:db:b8:d4:cb:f8:8d:17:
17:8a:e5:dd:9d:4e:65:89:1d:17:ca:d9:3a:15:1d:4f:ad:9e:
25:6b:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:19 2026 by rpki-client