
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa
File: f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa (raw, json)
Hash identifier: Q26QwNej6L0gUU6oyFmpdjDOdkSEbQZCnmkMnPTTcwM=
Subject key identifier: 88:05:CE:AF:22:F4:31:F3:1D:9A:6B:44:DF:20:E6:DC:06:DC:43:07
Certificate issuer: /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial: 010D0C9F4328584CD210791B116C6F5DE7B94780
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa
Signing time: Tue 10 Feb 2026 21:07:35 +0000
ROA not before: Tue 10 Feb 2026 21:07:35 +0000
ROA not after: Mon 11 May 2026 20:07:35 +0000
asID: 2496
IP address blocks: 129.237.2.92/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d2:10:79:1b:11:6c:6f:5d:e7:b9:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Validity
Not Before: Feb 10 21:07:35 2026 GMT
Not After : May 11 20:07:35 2026 GMT
Subject: CN=2922ceea-6155-46af-a04b-41753ec07e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:fc:3a:c6:48:59:aa:50:b7:9c:ee:a0:a0:
83:3d:6a:d8:0a:79:e2:05:01:96:a8:f4:e1:8b:00:
8b:b0:c4:57:43:d2:c8:c7:a7:dc:02:73:86:06:90:
80:68:c1:bf:42:05:37:d1:56:ce:25:b5:b3:ae:9f:
31:a3:01:9c:5c:1d:75:62:73:a5:17:72:37:2b:1a:
97:d0:1d:78:2d:22:57:b8:ee:21:a1:f8:d7:fc:47:
b6:ef:79:02:c4:41:c4:5f:b1:e4:47:35:86:8d:2a:
9a:ce:c6:0c:43:93:4b:8c:58:38:ea:cb:a7:5e:86:
3d:4d:f8:98:de:1e:50:02:05:fd:ac:59:3d:1b:50:
5f:6d:3a:ad:7a:8d:26:30:82:3e:d6:3f:e8:ff:fd:
7f:cc:19:68:1a:20:79:c7:a1:bb:e8:94:da:04:c8:
af:a3:77:aa:9c:43:13:09:59:77:82:60:88:52:db:
22:1e:bf:7d:9f:dc:9c:42:59:3c:bd:0e:aa:00:14:
bc:c3:c6:65:e1:2d:1e:52:e1:8f:9a:74:1d:fd:35:
fa:15:97:1b:67:79:51:a4:49:1f:e9:16:1f:b7:4b:
90:89:0b:a6:b0:ba:23:23:2f:38:55:81:1a:08:2a:
62:ba:21:69:db:b9:81:b7:d1:d4:3b:b7:18:ba:8b:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:CE:AF:22:F4:31:F3:1D:9A:6B:44:DF:20:E6:DC:06:DC:43:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
sbgp-ipAddrBlock: critical
IPv4:
129.237.2.92/30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:5c:47:a6:dc:1c:50:60:43:c1:ff:c8:6b:4c:6c:45:11:33:
63:b0:2d:6c:c4:03:d4:e2:c7:d3:be:a3:97:33:70:40:40:69:
35:81:c0:70:65:fe:75:a8:d5:42:35:11:04:76:12:d7:79:a1:
78:d4:e3:cc:44:b9:b6:17:b1:cb:a6:52:23:a5:c6:34:38:84:
e9:82:37:93:bb:08:15:8c:36:5a:3b:ca:eb:e1:58:c4:c1:a8:
ff:7f:7a:2c:64:ab:5d:61:10:e0:52:d5:f7:3b:05:96:ae:83:
20:a2:e6:ea:f9:c7:83:31:8b:af:91:da:3e:b1:b7:d7:94:67:
82:64:75:6d:ff:4a:28:86:b9:74:04:77:ee:84:ca:e4:b2:da:
c0:78:7e:cb:d4:45:b2:0b:4f:d3:63:1f:d0:0c:34:1c:3b:60:
c7:27:66:3a:e8:1d:4a:63:15:0d:89:37:a6:57:2e:87:db:97:
c3:80:af:6b:e5:85:fa:09:20:90:d0:d8:77:4e:e4:e7:9f:83:
a1:37:0b:06:f2:a6:0c:5f:4a:f7:da:60:55:45:f0:02:61:3d:
da:1d:c8:a7:7b:69:81:0e:6d:2a:56:45:76:72:62:54:09:b4:
4e:f1:b4:e9:cd:c8:a4:53:16:8d:15:eb:ca:0d:6a:df:4b:de:
65:64:6d:6a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzSEHkbEWxvXee5R4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThiZTNjNWUtNjk3OC00OWJmLThmNjYtMDVhYTZiMWMy
MDIxMB4XDTI2MDIxMDIxMDczNVoXDTI2MDUxMTIwMDczNVowLzEtMCsGA1UEAxMk
MjkyMmNlZWEtNjE1NS00NmFmLWEwNGItNDE3NTNlYzA3ZTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEn8OsZIWapQt5zuoKCDPWrYCnniBQGWqPTh
iwCLsMRXQ9LIx6fcAnOGBpCAaMG/QgU30VbOJbWzrp8xowGcXB11YnOlF3I3KxqX
0B14LSJXuO4hofjX/Ee273kCxEHEX7HkRzWGjSqazsYMQ5NLjFg46sunXoY9TfiY
3h5QAgX9rFk9G1BfbTqteo0mMII+1j/o//1/zBloGiB5x6G76JTaBMivo3eqnEMT
CVl3gmCIUtsiHr99n9ycQlk8vQ6qABS8w8Zl4S0eUuGPmnQd/TX6FZcbZ3lRpEkf
6RYft0uQiQumsLojIy84VYEaCCpiuiFp27mBt9HUO7cYuovooQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIgFzq8i9DHzHZprRN8g5twG3EMHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGJl
M2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFhNmIxYzIwMjEvZjEwYTQzMTEtM2YzMS0z
ZTdhLTg2N2UtMTBhNWE1MTk5ZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThiZTNjNWUtNjk3OC00OWJmLThm
NjYtMDVhYTZiMWMyMDIxL2E4YmUzYzVlLTY5NzgtNDliZi04ZjY2LTA1YWE2YjFj
MjAyMS5jcmwwHwYDVR0jBBgwFoAUtLV6vDnImsdK8ZqNipMaX1x2UUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOGJlM2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFh
NmIxYzIwMjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUCge0CXDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCLXEem3BxQYEPB/8hrTGxFETNjsC1sxAPU4sfTvqOXM3BAQGk1gcBw
Zf51qNVCNREEdhLXeaF41OPMRLm2F7HLplIjpcY0OITpgjeTuwgVjDZaO8rr4VjE
waj/f3osZKtdYRDgUtX3OwWWroMgoubq+ceDMYuvkdo+sbfXlGeCZHVt/0oohrl0
BHfuhMrkstrAeH7L1EWyC0/TYx/QDDQcO2DHJ2Y66B1KYxUNiTemVy6H25fDgK9r
5YX6CSCQ0Nh3TuTnn4OhNwsG8qYMX0r32mBVRfACYT3aHcine2mBDm0qVkV2cmJU
CbRO8bTpzcikUxaNFevKDWrfS95lZG1q
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:02 2026 by rpki-client