
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa
File: 08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa (raw, json)
Hash identifier: ywcE/G7/HLltx8MKSPrgN0WLep49aK6GWtDjeDYwDQk=
Subject key identifier: 3D:8D:00:8A:8B:6A:ED:58:B3:82:B2:B7:90:DD:FD:29:13:6D:E7:7F
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584CD99CC0B1B32B202C1D828300
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa
Signing time: Fri 13 Feb 2026 14:00:41 +0000
ROA not before: Fri 13 Feb 2026 14:00:41 +0000
ROA not after: Thu 14 May 2026 13:00:41 +0000
asID: 62651
IP address blocks: 216.131.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:9c:c0:b1:b3:2b:20:2c:1d:82:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Feb 13 14:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=d12ec846-55a7-425b-a37c-cc74c18ba90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:fc:2e:31:00:4c:28:10:9c:77:88:18:18:
7c:ca:cd:60:67:2d:63:37:59:d0:78:e9:a1:94:f9:
a1:3b:b6:7b:2e:c9:b3:2e:56:52:64:3f:3c:cf:ad:
4f:1b:89:18:17:ae:a2:44:44:0e:d8:f2:b8:fe:c3:
d0:09:68:a4:55:cf:1f:c5:9c:53:2b:16:02:7e:98:
93:e6:52:f7:b8:fd:e1:b9:0b:67:e0:eb:31:12:c9:
1a:a1:9b:f9:f5:25:fa:9a:67:52:0b:91:de:a7:00:
b8:91:a3:ba:5f:a6:7c:fe:4d:fc:42:1a:2d:fe:a2:
f0:82:a5:54:cb:10:f2:bd:77:10:87:24:09:98:00:
15:33:17:3a:0e:37:73:7a:6e:25:9e:5b:68:31:f8:
8a:a5:f0:ab:b2:c6:88:9f:dc:89:8b:df:85:64:7c:
8e:b3:45:e6:06:24:1d:47:e9:27:0f:b1:dc:ca:2b:
9f:b7:56:4a:0b:b7:8c:49:4d:98:5a:67:83:8a:bb:
70:5b:87:72:ea:01:ee:56:a5:e0:7d:5d:39:ee:18:
d4:00:a1:50:ad:93:bc:b5:56:31:0e:ab:9c:c1:2d:
b9:b0:ab:6d:11:ef:57:a2:6f:57:14:43:12:1d:4c:
66:cb:23:47:45:d5:40:6c:92:08:29:2c:e0:e4:59:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8D:00:8A:8B:6A:ED:58:B3:82:B2:B7:90:DD:FD:29:13:6D:E7:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:f4:84:aa:6c:7f:a3:7b:2b:a1:1d:20:a3:27:fd:5f:16:74:
f7:23:86:79:c0:45:ce:a5:39:ad:aa:bf:3e:22:4d:c8:ba:f6:
2d:ac:3a:98:04:c8:32:05:2c:16:1e:8d:1c:ec:67:32:38:1b:
16:44:4b:fb:3e:4c:a9:2e:b0:a3:9c:98:e1:05:ad:55:52:a1:
2a:97:fd:40:b9:8e:ef:67:cd:53:93:4c:e6:62:0d:c2:b6:ee:
79:78:53:f5:61:23:55:69:d9:e8:be:69:ef:67:fd:1a:50:64:
46:b0:9d:a6:33:56:34:23:00:94:dd:02:26:2f:94:39:b8:f1:
26:93:5d:2f:72:ae:10:53:07:80:e5:73:e8:4f:4f:be:e1:ad:
c6:d4:23:3e:d3:7e:d1:3b:53:90:d3:cc:df:03:1d:2c:6a:d3:
30:14:a8:05:da:8e:c6:90:f6:14:e0:19:b3:3e:7d:a6:a5:7c:
62:d2:a0:fc:82:f4:94:50:38:3d:5a:ad:e3:41:3f:02:4d:42:
41:00:2c:d8:49:9d:7e:e9:38:c2:47:e3:e1:e5:33:e6:fd:0f:
ef:1d:e7:ee:66:84:bc:00:5a:43:de:f8:b8:cc:ff:b8:6a:d0:
33:ad:ae:78:08:8c:a7:b7:d5:32:e7:19:01:4a:7e:a3:1b:25:
ac:84:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:48 2026 by rpki-client