
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa
File: 261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa (raw, json)
Hash identifier: qcPZFwmrgHM/ZMA3AGMRld4Ce9lp70PFBxTSu61s+kM=
Subject key identifier: 88:D3:99:E5:20:53:27:6A:A6:EB:AE:27:C7:01:27:0C:BD:1B:E4:CB
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584D6AAAB03A902D9CEDBFCE4100
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 16509
IP address blocks: 170.85.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:b0:3a:90:2d:9c:ed:bf:ce:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=635dbad6-7fcf-4db8-a37e-8dcf60397a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:86:ac:d2:40:6f:4c:09:4d:c9:a6:9c:d8:
bd:b7:50:77:16:42:ea:1d:e5:32:1f:07:b5:b1:fb:
76:11:d2:19:af:19:4b:73:fd:87:8e:31:f5:87:6c:
b9:e8:7b:71:04:4a:16:fc:43:00:a5:56:f0:88:94:
d3:41:63:ef:48:ce:c8:01:a1:b3:77:96:cd:9c:02:
af:59:3d:2a:bb:e3:54:dd:fd:a7:2b:43:31:87:99:
0f:0c:de:a4:f8:67:b9:3f:1f:4d:9a:cd:7e:48:de:
80:cb:62:5f:4c:13:fd:48:02:f3:d5:d1:f0:76:7a:
33:7d:92:cb:f2:a4:b2:cf:e7:24:ad:3f:41:b4:72:
6e:98:df:5d:61:e0:38:0a:23:c7:f9:f1:6d:24:b0:
60:78:06:70:cb:40:d3:05:01:0a:d2:89:a6:01:6d:
3d:f8:f8:c0:55:68:71:43:58:dd:7c:32:fa:e0:24:
61:9a:94:4a:96:85:24:cd:4f:fa:91:4b:5b:94:51:
77:d8:d2:bd:97:ef:2c:23:d9:5d:ff:69:5e:47:84:
7d:4e:57:0c:52:01:db:2e:90:3e:c5:11:90:fd:17:
5a:d6:60:05:7a:9c:15:2d:b3:28:81:ce:7c:6a:6f:
b8:c9:36:80:76:15:80:de:9d:a9:54:6a:71:8b:56:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:99:E5:20:53:27:6A:A6:EB:AE:27:C7:01:27:0C:BD:1B:E4:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:79:c0:67:60:b5:04:fa:14:a1:b9:9e:e1:92:0e:e5:7d:7e:
43:08:e4:87:e4:34:04:14:67:2e:69:dc:d8:4f:63:2e:96:47:
c6:4a:1f:cb:60:61:fd:03:bd:8f:71:a1:ba:5f:54:fd:00:59:
c6:f2:6c:09:11:3c:32:d1:3b:87:3a:10:0d:38:60:c8:a8:e8:
f1:62:f4:26:ef:e2:c6:4d:34:b9:f6:c8:de:f4:06:75:5d:7b:
47:d1:45:8e:9a:41:2d:5a:da:5e:f7:b6:18:8a:f5:0a:e5:b7:
bd:e9:55:cc:1d:d3:4d:27:c7:57:c8:17:00:c1:43:60:e0:9e:
7e:5f:d6:cd:93:bc:0a:82:87:40:64:ef:22:2b:25:7a:b4:31:
b4:f9:29:55:ac:46:9f:6b:0a:29:3a:9c:97:1e:18:aa:9b:e3:
e5:01:6c:c9:cf:a4:0d:b3:eb:2d:8c:27:69:79:f1:50:fc:24:
c9:ea:f2:75:85:56:f9:d6:9b:06:72:2a:4e:6b:4c:cc:f3:61:
59:92:b0:69:9c:f1:d2:d5:53:d5:1a:11:2d:8f:c1:e7:23:7b:
22:af:02:74:d5:f9:d0:b7:37:c2:75:c1:cd:26:2c:27:5f:81:
ba:e2:f9:05:ce:bb:56:58:fd:69:62:49:76:f5:f8:48:2e:b5:
cf:1d:8b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:18 2026 by rpki-client