
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa
File: 8edcb168-4dfe-3fff-883b-ec95736ecd00.roa (raw, json)
Hash identifier: AKZTfeVOa8eFbGImDw/YbeBLUWPHYFme/dI887VZ4jI=
Subject key identifier: 28:C0:55:A2:96:2E:0C:EF:B9:70:B1:BF:D3:E6:EC:FF:5B:93:E9:3A
Certificate issuer: /CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
Certificate serial: 010D0C9F4328584CA061CA1610C944D3B1526100
Authority key identifier: 58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa
Signing time: Sat 24 Jan 2026 02:00:31 +0000
ROA not before: Sat 24 Jan 2026 02:00:31 +0000
ROA not after: Fri 24 Apr 2026 01:00:31 +0000
asID: 0
IP address blocks: 149.112.96.0/22 maxlen: 32
206.81.80.0/22 maxlen: 32
2001:504:16::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a0:61:ca:16:10:c9:44:d3:b1:52:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
Validity
Not Before: Jan 24 02:00:31 2026 GMT
Not After : Apr 24 01:00:31 2026 GMT
Subject: CN=329cae3b-6d4d-4d7a-945d-6ae742db95dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:1c:90:47:44:42:e5:be:16:3e:b3:e1:76:
48:06:66:f6:94:a1:f8:d5:c8:37:df:d8:2d:d1:e8:
ba:6d:a3:06:f0:eb:21:b4:80:b9:7a:f5:79:10:9e:
f9:b8:05:7f:63:40:03:bc:8a:37:fd:5b:00:70:f3:
4c:b8:a9:65:2c:34:6f:23:2e:b2:36:2c:0b:44:a9:
d9:05:9b:02:92:f8:d3:3c:17:36:20:55:26:71:0a:
92:e9:18:8a:81:5f:f1:8f:7f:55:17:b9:fa:9a:16:
97:5a:fe:92:d3:40:46:cb:d8:d8:8f:e3:3f:6c:40:
06:37:8b:dd:a4:e0:7e:5e:35:1d:69:63:65:e7:e6:
26:47:3f:a9:0e:ed:87:79:f3:82:0a:70:62:0d:ad:
cc:d6:52:e1:8e:8b:e9:ad:d7:c0:8e:e5:3e:67:c0:
7e:6b:fb:51:13:dc:d6:c6:1b:d8:7e:33:d2:8a:60:
5b:37:d9:f0:94:80:97:c9:e6:e0:40:31:d9:6b:a2:
3a:fa:50:8b:40:92:10:99:a8:ce:dd:c9:86:5b:b5:
7b:29:f6:d8:d7:6b:be:f6:40:3c:11:c3:f8:11:28:
f7:16:3d:91:78:8c:78:07:c4:43:d4:3d:03:83:0e:
de:19:87:83:60:8c:7e:99:a4:78:cf:91:64:2d:12:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C0:55:A2:96:2E:0C:EF:B9:70:B1:BF:D3:E6:EC:FF:5B:93:E9:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.crl
X509v3 Authority Key Identifier:
keyid:58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.96.0/22
206.81.80.0/22
IPv6:
2001:504:16::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:52:ae:94:54:aa:66:8b:8a:59:a5:74:6f:3e:91:e8:89:b5:
a4:03:46:82:e6:18:b9:b5:36:36:0f:83:ae:7c:cc:6b:af:76:
01:57:81:19:4e:a8:58:e6:01:b9:53:6a:5a:01:c0:00:d6:5b:
eb:df:5d:99:10:be:44:52:31:18:fc:d5:0e:8c:cc:4d:51:2c:
0d:5b:6c:ea:6b:f2:d7:64:94:5a:f7:63:33:a3:db:18:62:9d:
e0:47:90:44:84:d3:53:e2:d7:cc:17:66:62:24:9b:00:fc:a8:
75:bd:a4:a4:29:be:9c:95:69:57:c6:e9:b4:5b:5a:73:2d:36:
b0:54:ad:0d:67:c3:53:c9:c5:de:9b:78:f9:a9:ba:be:31:30:
11:ad:26:2c:49:1c:a2:80:3f:03:0a:30:c2:37:39:b0:4d:d5:
c0:e0:4a:8d:ea:fb:1c:09:ab:b9:55:82:6d:9b:73:1f:7c:7c:
fa:a3:f3:94:68:99:0d:95:ad:58:8b:44:1f:ce:a5:f8:db:d7:
02:94:90:5a:da:86:f9:f3:3b:87:a6:f4:7d:cb:1c:97:10:45:
5b:4a:f3:16:bd:5a:66:a9:af:85:b4:44:5b:c2:47:58:62:25:
2d:9c:02:87:b2:f9:58:a0:6f:fb:78:af:33:69:0a:cb:bf:8e:
34:4d:be:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:28 2026 by rpki-client