
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bff3a0fb-c657-3bcc-a3bf-1b1982c25b37.roa
File: bff3a0fb-c657-3bcc-a3bf-1b1982c25b37.roa (raw, json)
Hash identifier: RnKQidAh+sR0v7xObgpF85AeeaNF77NnSoecFN1plEo=
Subject key identifier: B0:B5:8D:09:01:76:D3:F5:9D:E3:F8:3F:1E:5F:6D:A3:09:4A:BC:F5
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584D0217891F61C5BDEA28D839C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bff3a0fb-c657-3bcc-a3bf-1b1982c25b37.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 11404
IP address blocks: 198.170.0.0/17 maxlen: 24
198.171.0.0/16 maxlen: 24
198.172.0.0/18 maxlen: 24
198.173.64.0/18 maxlen: 24
199.103.192.0/18 maxlen: 24
199.236.0.0/16 maxlen: 24
199.237.0.0/18 maxlen: 24
199.237.128.0/17 maxlen: 24
199.239.192.0/18 maxlen: 24
206.50.64.0/18 maxlen: 24
206.184.64.0/18 maxlen: 24
206.184.128.0/17 maxlen: 24
206.239.64.0/18 maxlen: 24
206.239.128.0/17 maxlen: 24
207.20.0.0/18 maxlen: 24
207.20.128.0/17 maxlen: 24
207.137.128.0/17 maxlen: 24
209.39.128.0/17 maxlen: 24
209.57.128.0/17 maxlen: 24
209.70.0.0/17 maxlen: 24
209.70.128.0/18 maxlen: 24
216.42.0.0/17 maxlen: 24
216.44.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:89:1f:61:c5:bd:ea:28:d8:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=c630b6e1-639b-4fef-8f82-8647eeaf8e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:db:0a:19:88:76:a9:7a:b9:9c:12:64:d2:
62:b4:e8:27:c9:86:d2:7b:0c:d0:9e:8f:ce:23:a0:
30:ff:4c:48:95:b8:d4:4a:14:ef:3d:39:a7:cb:6e:
a7:a8:74:73:07:91:af:f0:79:e1:21:ce:04:81:be:
07:f0:86:98:81:81:11:a0:c9:d4:d1:75:72:cd:01:
29:fd:ae:6d:78:33:61:a9:e1:5c:62:cc:20:a2:57:
af:3b:03:57:b2:27:63:a7:dd:f0:41:ed:26:c3:0d:
d5:09:e6:70:68:29:d2:4b:19:76:91:48:2e:7b:b2:
50:0d:5a:1d:20:b3:2e:96:f5:29:fe:ee:40:7d:0e:
d9:91:e0:12:f3:40:cd:c3:3a:69:3c:a1:6c:b0:1b:
92:2a:19:06:6e:42:a7:e3:96:45:ae:59:7c:23:70:
56:07:f9:f1:0a:29:a4:eb:35:f3:bc:59:8d:08:54:
f0:68:00:eb:e3:68:07:36:e4:0f:f6:7b:8e:eb:0c:
b7:d1:71:32:28:53:79:5e:20:58:18:5a:52:0c:bb:
52:c3:5e:35:da:4c:5a:85:11:7a:3e:67:71:23:bf:
92:a2:26:8a:39:67:93:dc:01:9d:c7:ab:b4:74:58:
3a:81:6c:90:4d:69:58:e9:b8:ae:4c:ef:d7:1d:98:
74:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B5:8D:09:01:76:D3:F5:9D:E3:F8:3F:1E:5F:6D:A3:09:4A:BC:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bff3a0fb-c657-3bcc-a3bf-1b1982c25b37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.170.0.0/17
198.171.0.0-198.172.63.255
198.173.64.0/18
199.103.192.0/18
199.236.0.0-199.237.63.255
199.237.128.0/17
199.239.192.0/18
206.50.64.0/18
206.184.64.0-206.184.255.255
206.239.64.0-206.239.255.255
207.20.0.0/18
207.20.128.0/17
207.137.128.0/17
209.39.128.0/17
209.57.128.0/17
209.70.0.0-209.70.191.255
216.42.0.0/17
216.44.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:51:a8:7d:7b:7f:8f:97:ad:6a:b3:30:8b:90:02:9c:f2:06:
4b:0c:d3:b6:44:dc:4e:50:fd:7f:f8:e0:49:aa:8e:35:99:8f:
9a:5d:9e:ea:3d:23:8b:f3:ab:f9:cf:e9:7f:d9:af:d7:2b:db:
92:ed:d9:14:42:6b:08:55:cf:b4:77:03:33:77:ba:57:98:b3:
16:be:ee:4c:2a:d9:cf:a9:cd:f8:41:aa:f7:f6:86:44:d5:9c:
7c:8a:fa:df:e7:e9:1a:d7:cd:78:48:cf:3d:3d:e4:81:d9:a8:
bb:72:aa:5f:10:ac:14:54:34:de:13:c7:7b:a4:a8:85:e3:62:
62:f3:90:1c:5f:d5:9e:de:61:07:32:36:4a:a1:e0:80:aa:af:
eb:7c:ff:f5:0c:8d:18:a2:cc:ac:0d:65:3b:b7:84:af:b8:5e:
ba:c0:ec:23:f4:c8:4d:e7:76:7a:bf:9e:26:4f:fc:fc:80:a2:
f3:fb:c3:e1:2b:72:e1:51:ec:70:5a:b4:fe:71:9d:ea:d0:32:
19:0e:31:49:56:c1:6d:49:d8:f9:5c:8b:dd:e9:df:b2:d5:e6:
b7:ad:5d:09:16:37:68:4e:89:04:1c:19:fd:4c:8a:8a:57:d0:
4a:d6:51:13:ba:cd:26:12:3e:fe:28:03:25:d0:02:76:ee:a7:
55:47:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:13 2026 by rpki-client