
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa
File: 975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa (raw, json)
Hash identifier: 8su3ryS10/KSYf3q2yAsZkeWJMDGGOi6DZD/A8HB8b0=
Subject key identifier: 30:D9:8B:3B:C1:AD:FC:83:52:0A:17:12:03:05:7D:16:CC:B7:79:F8
Certificate issuer: /CN=8d560541-dfe9-43df-8277-86d83aa610a1
Certificate serial: 010D0C9F4328584CE5844DBB21EF26E87B8DC200
Authority key identifier: 8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa
Signing time: Tue 17 Feb 2026 20:21:19 +0000
ROA not before: Tue 17 Feb 2026 20:21:19 +0000
ROA not after: Mon 18 May 2026 19:21:19 +0000
asID: 16509
IP address blocks: 204.11.172.0/24 maxlen: 24
204.11.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e5:84:4d:bb:21:ef:26:e8:7b:8d:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d560541-dfe9-43df-8277-86d83aa610a1
Validity
Not Before: Feb 17 20:21:19 2026 GMT
Not After : May 18 19:21:19 2026 GMT
Subject: CN=819d381f-783e-4df9-8764-91205cdb8cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:b1:6a:c7:f3:61:64:ea:cf:2f:a3:9d:de:
88:04:d7:6c:cc:52:8d:3d:ef:fb:86:40:a2:f1:af:
86:4c:4d:25:80:d5:c1:c4:eb:cd:41:d4:05:d5:08:
0d:6c:a6:a8:01:11:29:7e:30:bd:eb:9a:df:05:d8:
cc:c4:5d:12:cf:9b:ed:a3:f6:78:c3:39:aa:55:e3:
10:ab:1a:73:a5:ed:d7:6e:9e:88:d9:fd:85:1c:a8:
79:51:df:5f:20:24:64:1f:df:f3:2e:62:7a:91:06:
58:e4:8f:1c:79:61:2c:44:7d:3a:22:8e:85:1b:e8:
eb:f9:2b:e2:a9:da:ba:e8:8a:91:c1:b3:9b:98:7f:
0c:91:ef:8a:c3:29:e6:9f:5a:33:1d:85:42:ed:a9:
d6:f4:7a:2a:a0:ed:ed:c4:51:1d:06:63:43:d6:59:
88:43:e2:df:47:e8:06:a8:37:19:dc:68:1f:3d:50:
a3:95:e0:e7:88:ff:92:10:60:14:d9:29:36:5c:d0:
5a:ae:79:c7:7e:91:18:31:2b:de:b0:a5:eb:2d:5d:
09:a9:b8:38:50:d5:12:33:5e:f9:6c:d3:10:77:53:
f9:ac:35:94:c7:12:fc:df:24:e0:ae:66:b2:e5:7f:
7a:24:a2:c5:44:8b:54:12:22:01:55:74:2e:7a:b8:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D9:8B:3B:C1:AD:FC:83:52:0A:17:12:03:05:7D:16:CC:B7:79:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl
X509v3 Authority Key Identifier:
keyid:8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.11.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:e7:26:7d:0c:15:da:49:c9:05:24:c4:7e:ca:2f:fc:24:d8:
a2:49:ce:72:3f:8f:da:e6:d1:1d:0b:2c:a3:29:d9:2c:df:73:
45:ea:2a:5d:e4:e1:b0:a2:3a:66:cf:9a:ea:b7:20:38:06:62:
d5:8a:af:c6:07:8d:e1:3b:3d:c5:1e:94:ce:f9:54:95:14:43:
26:7f:1c:ce:a1:b0:01:04:e3:59:e3:a5:07:4f:ce:fb:e7:e9:
7b:19:af:37:2d:29:24:45:72:3a:87:d1:d5:9d:81:b2:8c:96:
70:33:15:ea:9f:38:17:b0:bf:74:76:00:6a:0c:09:8b:89:5a:
f6:db:68:63:8a:06:da:c0:4a:9c:90:fb:f0:17:70:49:a4:45:
0b:1d:ff:a4:80:46:c6:60:4d:43:20:f1:f1:3b:15:96:2f:30:
aa:b7:7c:4f:ee:b1:62:30:61:36:e1:a9:cb:b9:ac:66:d0:51:
2f:3d:bc:55:f1:80:5a:3a:26:d3:4d:e2:7d:85:08:b3:ce:44:
6f:da:f4:aa:92:2d:a8:73:66:05:67:b4:0c:73:60:77:1f:22:
e8:ba:0d:bd:c2:4c:35:59:80:94:0c:60:6c:3e:4f:48:0c:26:
8d:55:29:51:ec:45:0c:bc:7b:c6:c8:16:19:fe:25:20:63:f7:
2f:f0:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:55 2026 by rpki-client