
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa
File: 875cadce-0a07-3252-b823-2dab07525f7b.roa (raw, json)
Hash identifier: 3ssfK1aPgY2AbbUx5k7XhSVrqmq3+UW5ckFhjV0o+WA=
Subject key identifier: FE:1C:BC:A8:98:67:06:67:49:09:BE:B1:8C:2F:C1:D0:0B:2B:7F:E4
Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial: 010D0C9F4328584CE62CC2A0D8D190A2375ED700
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa
Signing time: Wed 18 Feb 2026 02:00:31 +0000
ROA not before: Wed 18 Feb 2026 02:00:31 +0000
ROA not after: Tue 19 May 2026 01:00:31 +0000
asID: 16509
IP address blocks: 192.157.36.0/23 maxlen: 24
2602:f7db::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e6:2c:c2:a0:d8:d1:90:a2:37:5e:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Validity
Not Before: Feb 18 02:00:31 2026 GMT
Not After : May 19 01:00:31 2026 GMT
Subject: CN=e06ba312-e2d9-4ca4-a37b-58b19da60294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fe:79:fb:74:61:91:b6:81:9b:26:ea:7d:67:
f3:87:34:6d:6c:9a:48:00:0d:fd:0d:f5:d3:59:f0:
82:b4:29:a2:ab:68:eb:6c:96:6b:fb:81:d1:2d:0e:
cf:3f:f4:a2:c7:89:0f:75:83:d1:44:cf:7e:0d:59:
5c:e9:f2:da:53:8c:d9:dd:19:e2:4e:c9:6d:a5:2d:
c7:42:3f:4c:3b:ab:be:6d:18:6b:dd:6c:4c:91:9d:
c2:4b:29:9c:ee:f3:32:6c:47:0c:4b:4a:65:6c:15:
fd:b2:1b:45:95:91:01:12:17:4c:81:ce:f4:8d:ab:
c9:41:d4:4b:38:8a:e5:9e:7f:54:10:1b:2c:b5:01:
d9:69:0b:d9:84:33:e5:12:03:f9:82:0b:12:3b:42:
2b:11:c3:fe:65:3f:e1:c1:c9:8d:19:78:d2:8d:7d:
15:88:e3:97:11:27:3e:db:40:4b:ff:b6:3e:0f:7d:
01:93:27:6a:48:cd:cf:b6:7d:ec:51:6a:39:c8:e0:
59:97:d5:bb:f4:8c:cf:b0:b1:e8:f7:db:42:a5:1b:
cf:6f:03:a4:18:95:88:5b:d5:ac:ad:2f:88:94:55:
f5:9f:04:7d:88:d7:f4:af:b0:0f:c5:47:d6:89:9f:
ec:c8:ad:61:96:78:2b:ce:f7:b4:99:8c:c9:e0:30:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1C:BC:A8:98:67:06:67:49:09:BE:B1:8C:2F:C1:D0:0B:2B:7F:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
X509v3 Authority Key Identifier:
keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.36.0/23
IPv6:
2602:f7db::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:7b:64:a8:48:f4:5e:9d:15:89:92:bd:02:d9:0d:44:52:c7:
9a:3a:db:5c:6b:67:54:a2:24:91:6e:ec:9a:db:4a:f3:6a:05:
ad:47:0b:c7:6d:dc:92:16:3d:fb:dd:fd:86:68:ab:c3:ba:d0:
c6:ed:93:1c:e5:da:81:1d:d9:a4:0d:b4:52:16:25:96:f7:66:
ee:ab:30:6b:da:a4:45:8f:56:38:13:00:cf:17:3d:05:83:52:
0f:3a:27:0e:54:2b:37:be:77:fd:0c:db:0b:a9:aa:18:15:aa:
05:f8:77:39:c9:15:a0:84:e9:38:ab:5a:a6:64:e2:0b:b6:d9:
b7:fb:85:64:23:e1:7a:c1:67:ef:1d:ff:cc:f3:f0:24:1e:a1:
6e:bb:12:2d:83:2e:38:5c:c1:bb:f6:2a:43:ab:5f:25:20:af:
d3:a0:9a:1c:b8:08:2d:c7:27:1a:c0:bc:d3:45:a1:82:c8:af:
33:4d:fe:94:de:98:81:cc:d3:68:f4:43:5a:7d:4c:92:1d:0b:
64:dc:78:8f:36:ee:31:29:fe:34:94:25:9b:d7:5e:10:c4:6d:
1d:11:51:44:e1:fd:68:43:84:60:e0:03:2f:58:ef:00:e8:5b:
ac:99:14:5c:64:ea:53:58:30:2e:92:90:6b:a0:15:46:8c:96:
53:80:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:40 2026 by rpki-client