
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa
File: 1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa (raw, json)
Hash identifier: 4sjJ+YZvNewRojOLCylT8JasXtfX0bX19IqSyDdZ8fk=
Subject key identifier: 93:67:E1:22:C5:C5:6A:DD:E4:24:94:57:07:76:2E:5F:C9:9C:74:8F
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584D8695484E3DD5543A51816F80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 14061
IP address blocks: 143.198.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:48:4e:3d:d5:54:3a:51:81:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=a63dbf8a-f282-47d6-9610-acb95e7ed191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:51:a6:f4:71:2b:1d:17:0f:07:58:52:44:
59:5b:53:2a:1f:6b:02:6f:31:00:5f:7f:98:74:13:
78:98:e7:30:95:3b:7e:00:33:ec:4c:be:1c:16:7f:
97:ef:61:87:22:ce:ee:a7:46:c3:5f:33:88:c5:61:
e5:a1:39:a7:6d:8a:40:5b:50:7b:6c:5e:3b:8e:47:
06:08:1e:93:49:3b:e2:f8:6e:08:68:b5:ee:1c:30:
c9:40:b5:c0:db:c1:82:d6:d9:3e:46:d2:18:92:66:
dc:00:a1:d3:ce:e2:f2:11:54:b1:24:db:c7:89:a4:
8b:3f:a6:30:bf:f5:06:0f:21:eb:de:8f:6f:9c:5b:
f2:c6:75:cf:1e:a0:ba:94:2c:e4:fc:94:11:4f:33:
f2:3a:76:22:90:d8:42:b6:31:59:3e:88:69:f8:5d:
48:f4:40:21:81:6a:d4:68:0b:51:10:34:61:db:af:
ab:22:58:73:40:3c:c8:5c:a8:a8:e9:c8:76:cb:9b:
0e:d6:e9:f9:1a:5b:0b:66:36:76:bb:5f:35:23:56:
9c:3c:43:36:51:31:2a:7a:ef:bb:52:b4:ac:fa:09:
76:00:73:be:3a:92:00:6c:f0:32:d7:e9:7b:5a:c2:
9d:2f:23:fd:9d:7c:38:ad:88:ce:d6:ba:92:e7:1f:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:67:E1:22:C5:C5:6A:DD:E4:24:94:57:07:76:2E:5F:C9:9C:74:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
143.198.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:29:02:64:79:4c:c9:8d:7e:35:1c:cc:aa:53:41:33:84:60:
b0:01:88:31:1a:7f:cd:b5:83:2d:75:90:76:60:11:cd:66:c3:
0d:b6:52:ec:0e:83:7f:07:8e:28:9f:ec:a8:4f:82:f8:a4:b1:
47:e0:97:38:7c:87:b0:93:c3:f2:29:93:b5:32:6a:53:53:d4:
ef:01:e7:e9:b2:c9:d4:0a:6e:d7:a9:4f:8d:4a:f3:eb:44:42:
4d:0f:aa:61:79:03:58:e6:90:94:71:9e:0f:8d:5c:6d:cb:25:
51:e4:d4:5d:ab:f9:b7:c9:e4:1b:63:46:94:cd:27:e6:2b:c7:
90:b2:fc:04:f6:29:80:32:a3:61:13:9a:05:3e:46:4a:d6:f0:
72:93:51:9b:5f:0f:44:8b:6b:74:d5:f0:b6:07:af:ca:8d:35:
18:3d:f5:97:46:12:75:e2:99:2f:7f:92:6c:80:30:9c:1b:27:
16:1d:be:94:6e:15:e5:d0:0f:f4:1b:1e:70:03:5f:19:4e:5f:
a0:bc:2d:bf:38:90:2c:d6:22:8e:62:2c:67:b0:b2:d7:57:8b:
e6:af:d2:75:76:6d:c6:d3:d5:6e:6b:72:4e:54:0d:2f:2a:80:
cd:5c:fc:a6:ab:e5:1a:ed:ac:f6:c1:d3:29:b7:52:6f:10:94:
e2:e7:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:41 2026 by rpki-client