
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa
File: 5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa (raw, json)
Hash identifier: bFlJYSHfpakb6ton4inLkLm6/ANM5rs16xVo8+vwldw=
Subject key identifier: E2:B2:4E:D9:DF:94:0A:68:F9:7C:01:C4:9B:22:9F:18:13:0F:AE:53
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584CEBC22EAFE7D2BB0E6CDE2460
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa
Signing time: Fri 20 Feb 2026 02:00:32 +0000
ROA not before: Fri 20 Feb 2026 02:00:32 +0000
ROA not after: Thu 21 May 2026 01:00:32 +0000
asID: 6391
IP address blocks: 97.107.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:eb:c2:2e:af:e7:d2:bb:0e:6c:de:24:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Feb 20 02:00:32 2026 GMT
Not After : May 21 01:00:32 2026 GMT
Subject: CN=ae964a21-5e0b-4bae-a345-5b6b0880ccc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:56:e7:ec:9c:d2:50:46:ad:e6:e5:05:69:
d4:ee:86:30:de:ca:80:78:d1:f6:b5:17:ac:86:15:
84:ab:6a:d1:e7:a9:a4:00:98:19:a5:bb:68:2a:89:
45:f4:7a:a3:0d:22:69:09:4b:79:35:9e:36:6f:2c:
fe:64:18:d2:a5:9b:a2:ed:4d:a4:63:10:a6:21:0b:
77:7e:e3:ec:29:aa:80:82:26:b0:ec:ef:36:80:b1:
26:7e:d2:f0:82:2a:2f:3f:4e:c9:a9:22:47:72:79:
5d:33:2c:40:05:1b:ec:14:0e:c9:ad:e8:55:50:c1:
5c:85:1c:86:34:27:aa:a6:bb:ff:3a:26:f7:38:b3:
8d:82:4e:ca:26:ae:a5:bb:b6:b3:a5:cd:39:4b:1e:
f2:4c:4a:f7:b3:c4:47:f4:ee:04:39:1c:21:68:fd:
fb:dd:ef:9e:ad:28:62:aa:5e:96:de:fe:3f:ac:cc:
fe:2d:5d:f1:82:ef:db:bd:38:de:13:b1:00:11:63:
e1:ae:5c:a3:b9:47:02:4e:2e:25:46:72:62:1a:f1:
d0:0b:c5:cd:b6:2e:b4:b7:46:2c:c1:a9:6b:1c:54:
62:b0:df:a8:06:af:8d:3b:07:d9:cc:02:67:3e:a3:
9a:cc:c2:db:97:3d:50:2c:52:36:34:78:db:dc:c0:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B2:4E:D9:DF:94:0A:68:F9:7C:01:C4:9B:22:9F:18:13:0F:AE:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
97.107.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:32:f4:c4:85:77:40:32:f2:db:d4:1d:92:c5:52:fa:32:14:
56:27:2b:ae:a1:ed:ed:08:43:00:0d:c6:09:9a:a2:8e:3f:89:
c4:a3:64:8a:24:9d:9d:23:e2:31:17:7c:fe:2f:5d:fe:cb:3c:
eb:fd:fb:fc:ba:22:c6:be:15:29:ce:91:aa:18:d8:51:67:4a:
65:cf:04:f1:d2:3c:ee:57:96:fb:f6:6f:8f:56:91:fa:b8:d9:
e4:c4:9e:3a:ec:de:d2:9d:18:58:76:4d:d4:fe:c9:83:02:87:
c7:a2:bb:72:74:ff:1b:3a:e8:6a:72:f4:e5:91:3b:16:83:f7:
85:43:88:70:f1:29:17:55:5d:5c:39:73:c9:fe:9f:93:4b:80:
87:51:ba:f6:3b:5e:60:80:29:e2:90:28:75:0e:22:90:9e:50:
87:ab:d2:f4:6a:91:19:b9:5a:c8:a1:d5:99:62:de:be:cc:fa:
21:3b:3b:64:b6:92:97:bc:28:33:30:33:4a:32:0e:9c:2a:3f:
90:f2:0b:3e:00:16:fd:56:e1:dc:63:e7:70:5e:ce:24:95:97:
5d:94:3e:8e:26:17:f6:3f:36:4c:1a:4d:d9:60:64:d9:ac:d6:
7c:90:10:10:01:b8:33:94:43:fd:06:c3:1e:10:e5:08:cf:d0:
ba:21:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:44 2026 by rpki-client