
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa
File: 0be8b0af-8061-36c3-8885-a1d714a9af7a.roa (raw, json)
Hash identifier: MWc/wLdPWC3AZKvf+w9B3abDlU1ufB7dPbzFZIh2l4Q=
Subject key identifier: 15:13:0E:C9:D7:6C:19:76:50:19:CE:84:A5:E8:9C:CB:81:B1:92:EA
Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial: 010D0C9F4328584CDC67844E017EFEF29CAA5200
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa
Signing time: Sat 14 Feb 2026 14:00:41 +0000
ROA not before: Sat 14 Feb 2026 14:00:41 +0000
ROA not after: Fri 15 May 2026 13:00:41 +0000
asID: 10430
IP address blocks: 164.116.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dc:67:84:4e:01:7e:fe:f2:9c:aa:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Validity
Not Before: Feb 14 14:00:41 2026 GMT
Not After : May 15 13:00:41 2026 GMT
Subject: CN=c83c425e-a6d9-42f6-a65a-d47ab04491c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:64:5a:30:fd:58:0e:d2:71:dd:85:51:e6:
e5:73:75:c4:fb:57:0e:16:47:f0:33:3c:46:45:f8:
11:e9:1a:eb:fc:58:46:22:00:46:0a:a1:b8:19:67:
49:1b:cc:0a:bd:66:84:d4:53:7c:79:12:6e:f2:ee:
da:c7:ee:f9:a4:4f:5c:be:b6:65:b4:24:9f:e2:0e:
a0:10:f6:53:89:23:02:d7:8e:ea:f6:ac:92:e5:00:
ed:80:c0:da:cc:4b:30:7f:11:1d:80:30:fb:94:fc:
71:30:f7:56:29:15:b8:a9:46:be:c8:e5:bf:91:fa:
c0:d5:8e:e9:ca:b7:dc:90:0a:de:95:c5:42:98:02:
fa:2b:aa:08:62:8c:37:6c:9c:7d:ef:d1:e2:a9:37:
af:56:2a:87:38:fe:bb:03:db:04:00:c6:94:73:f3:
20:f5:92:7c:46:1a:c3:aa:46:0e:0f:9e:8b:29:e6:
9f:6a:4c:a2:f8:29:d7:d7:0f:fa:de:55:be:cd:6d:
79:1e:00:9c:f9:11:48:4e:59:63:33:1a:7d:05:35:
fa:62:7d:5c:e2:8d:ef:6a:af:1c:58:8f:f0:b6:79:
28:30:be:b5:f5:75:cb:ab:d0:6e:5b:a7:86:e4:74:
54:26:4f:7b:07:11:79:10:af:e3:7b:11:21:8a:79:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:13:0E:C9:D7:6C:19:76:50:19:CE:84:A5:E8:9C:CB:81:B1:92:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
X509v3 Authority Key Identifier:
keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
sbgp-ipAddrBlock: critical
IPv4:
164.116.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:bd:74:80:86:2c:31:84:c1:3b:cd:38:d6:20:5b:08:90:1c:
5d:bd:70:a3:db:6a:88:f8:85:77:15:be:f4:31:46:8a:25:26:
7d:5f:a4:84:09:4c:a9:67:0f:14:ee:51:a5:84:99:99:58:c2:
8a:2b:8e:02:94:f9:c4:a4:a8:5b:41:ce:8f:bf:8f:9f:2f:ef:
31:7c:8b:35:7a:e0:10:fa:b5:c1:4a:be:9c:d7:e7:a6:a4:5f:
61:e5:e3:2b:94:33:96:d1:2c:18:e0:59:04:8d:d2:94:4f:e8:
7d:49:d2:b0:f0:ac:9c:59:0e:d6:a6:70:76:02:99:7a:7c:da:
b1:28:a1:f2:63:91:08:6e:80:da:d0:70:36:7f:02:d4:4f:5e:
1d:1a:65:2b:77:4e:aa:03:c3:e0:e2:83:7b:a1:fd:6e:16:be:
70:b5:69:f9:76:91:b2:0c:61:03:6a:22:8a:cf:38:42:27:40:
98:78:fc:8a:93:b4:c6:ab:a5:fb:59:cb:1e:8d:fa:ba:76:30:
59:3f:63:22:64:0f:2e:bf:0f:75:8e:0e:13:99:77:7d:07:8f:
ce:d6:86:94:10:23:25:8c:b2:17:2e:dc:97:30:c2:57:4d:ef:
dc:cf:bc:23:97:5e:6c:cb:1b:23:94:de:7a:a4:cc:8b:57:ff:
01:03:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:59 2026 by rpki-client