
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa
File: dc349e18-8ab9-3cef-be26-6418afc11db3.roa (raw, json)
Hash identifier: FI9Zvl0HTike+ocsF7IiERxeKKtRKi0mnGKcKOS3eaA=
Subject key identifier: EC:CA:DF:53:53:DD:50:2D:97:D6:52:34:0C:8D:0A:2E:E9:C7:52:73
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584CF5879F705C622143A9D1A0C0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 63199
IP address blocks: 148.153.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:9f:70:5c:62:21:43:a9:d1:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=fe4a266f-0799-4ee6-af46-c50c6a84d261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:b0:40:c2:8e:7c:82:82:5a:10:df:20:c9:
73:64:1e:5d:69:66:d5:ca:99:bf:db:7a:6b:d3:0f:
b6:e3:8f:2c:05:3f:fb:41:cf:59:7b:62:56:1a:30:
f6:71:b2:22:34:68:38:e4:f3:bc:39:21:c6:a4:e5:
84:66:44:4c:48:d6:92:c5:52:07:3a:2e:16:d4:12:
8c:32:c5:e2:40:1b:47:c0:07:d5:f6:10:14:19:4e:
04:e7:17:bf:6b:e8:01:0d:18:6e:12:e9:d0:b9:12:
c3:e3:e0:28:5a:78:ee:46:77:ea:cd:c6:66:8c:90:
14:b0:34:5e:5b:58:6e:f4:44:1c:47:4e:5a:40:84:
64:a7:c5:1a:d9:ec:d1:1d:21:e4:cb:6e:fc:23:49:
f8:22:3a:c7:88:0c:6e:24:21:5c:5f:39:9a:41:95:
b8:d4:5d:cc:42:dd:10:2a:28:a1:46:83:ca:a9:dd:
77:dc:f0:cd:a2:1d:01:09:d0:b7:98:c4:7a:7a:2a:
21:06:3a:99:fb:84:3d:88:b2:df:28:f1:7f:4f:24:
eb:5f:6b:ee:44:41:67:e9:61:c3:a9:be:92:6e:1f:
57:8f:e7:f8:3c:68:01:47:b4:5f:dd:c7:7b:41:dd:
f1:66:b0:2d:4c:d3:85:4d:35:b3:43:44:ef:67:10:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:DF:53:53:DD:50:2D:97:D6:52:34:0C:8D:0A:2E:E9:C7:52:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:49:1a:d9:18:8b:78:e7:e8:97:15:e3:39:d2:cc:c1:fb:40:
54:9d:d2:96:48:3d:a9:3e:9c:95:ca:8b:71:6c:26:7c:79:e9:
74:53:3a:d6:e6:3f:2c:0e:9e:03:50:95:c3:61:05:22:94:ed:
07:60:51:52:36:9c:b9:17:59:39:6a:eb:33:d0:97:c0:c1:55:
6b:d8:87:b6:21:99:a0:09:e8:85:e6:dc:b9:e6:01:40:39:b4:
81:cb:d0:95:5a:0b:49:d2:d0:36:3f:7a:79:b2:ed:ae:b9:88:
5b:65:5b:08:81:a3:fe:51:d2:44:8b:d6:25:e1:49:d8:f5:81:
0a:ef:dd:f1:3c:29:ef:c4:65:b0:ce:9d:44:ec:da:4f:18:e6:
30:8b:51:f4:d7:9b:c0:b0:ef:16:c0:2f:fd:fb:17:a4:12:a1:
f3:13:27:d0:73:1b:01:a3:bf:6d:a0:77:fc:94:22:71:13:01:
0f:46:a9:0c:8e:b3:c4:e0:6d:7f:91:9f:dd:66:21:19:81:06:
d9:00:5f:9e:fb:7a:a0:43:19:cd:32:b1:20:9f:c6:93:e9:5a:
db:d7:05:02:b4:d9:e9:b8:2c:74:bf:27:aa:43:e2:15:28:bf:
1e:83:f0:a8:e6:d0:09:62:74:8b:4a:62:93:59:20:94:fd:06:
39:30:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:39 2026 by rpki-client