
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa4e6123-70a5-3699-8fda-43a3b61fc845.roa
File: aa4e6123-70a5-3699-8fda-43a3b61fc845.roa (raw, json)
Hash identifier: 3xejQpAgtnXJGF7JIGBIOKxYAGW1RH5yxr/txq/hE+Q=
Subject key identifier: 2C:B6:56:E5:93:FC:32:A0:EC:AB:3C:15:B6:59:79:05:3A:E3:96:DF
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584CE8F7791D31286CDD665E5300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa4e6123-70a5-3699-8fda-43a3b61fc845.roa
Signing time: Thu 19 Feb 2026 02:00:32 +0000
ROA not before: Thu 19 Feb 2026 02:00:32 +0000
ROA not after: Wed 20 May 2026 01:00:32 +0000
asID: 20001
IP address blocks: 142.147.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e8:f7:79:1d:31:28:6c:dd:66:5e:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 19 02:00:32 2026 GMT
Not After : May 20 01:00:32 2026 GMT
Subject: CN=5d3805c3-a7e2-4880-b236-eff82bfdb2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:01:6f:c1:f5:a6:44:72:76:3a:b8:a7:64:
c2:8f:a7:ae:a9:ab:ed:15:2e:44:3f:30:57:e9:37:
7b:47:f4:7d:ae:a4:a6:18:81:62:c0:6d:be:02:72:
02:65:7a:8a:43:f8:ff:42:aa:84:cd:b0:85:50:47:
98:7b:99:5e:22:ce:a5:28:ae:df:aa:81:27:91:ea:
08:40:c8:d1:59:27:ce:35:2e:43:94:df:ea:30:ed:
89:e9:f3:c0:37:a4:d9:76:c6:3f:20:7a:41:02:f0:
8a:4a:b4:87:6b:db:e1:e2:cb:00:4f:2b:7d:5f:81:
7d:3c:84:e5:33:a7:8c:c8:18:7c:f6:84:4c:89:7d:
ed:9c:22:2e:a8:43:f1:cf:90:a0:21:d7:93:94:8e:
10:9a:09:f8:37:46:f2:4f:89:32:63:e8:02:e2:94:
30:66:46:99:76:b1:77:4c:66:ce:f2:54:7a:41:97:
0b:59:09:2b:d0:27:5f:6c:65:d6:dc:dc:00:c3:10:
28:df:33:44:48:2c:86:7f:15:cc:05:d5:0b:5f:c9:
e0:88:b5:f4:dd:b1:fa:f6:50:b2:b0:bc:64:f7:e3:
ff:f4:4a:e3:9e:01:91:1b:ac:da:81:2b:e6:75:78:
a6:9a:83:d6:98:9b:30:c9:0b:3b:57:cd:03:67:9e:
e7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B6:56:E5:93:FC:32:A0:EC:AB:3C:15:B6:59:79:05:3A:E3:96:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa4e6123-70a5-3699-8fda-43a3b61fc845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
142.147.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:85:4c:40:52:e4:86:e7:bb:65:c8:ff:56:b6:05:71:fe:2e:
09:0f:87:d3:e7:75:b7:3c:58:71:b1:2c:c3:34:e0:7f:e6:0d:
34:1a:8a:76:52:02:4c:31:0a:8d:04:16:6c:67:3b:0c:56:47:
3a:d7:c3:de:c8:dd:67:36:7c:7d:c4:ec:a4:60:69:db:f8:a6:
9e:e7:7b:ef:77:5a:f8:f4:29:3a:64:b0:32:ca:63:74:9e:d3:
da:aa:7a:dc:16:da:90:b6:47:92:e7:63:8e:1a:2d:1b:0b:8c:
ad:f2:e6:45:51:2d:79:d5:c5:56:c5:ee:4c:fc:52:7b:6d:cd:
9a:ec:cf:75:36:36:a3:c5:b0:29:05:39:fd:b1:74:1e:27:3a:
ca:3a:ec:83:f2:38:50:d4:d3:73:17:77:95:1c:e9:17:91:a0:
41:e7:9e:d7:36:10:80:50:8e:07:5c:50:91:98:04:6c:8a:28:
c9:80:8d:82:ac:03:08:26:de:43:4c:ed:aa:00:b3:0a:1f:d6:
c0:7c:fa:e6:84:54:2d:e7:be:90:23:ab:d1:e6:fc:1d:15:65:
a2:b9:ee:1f:37:99:dc:8e:eb:f1:d1:bf:33:ff:6f:6d:3b:7a:
8b:21:e9:df:a8:0c:13:aa:2e:6d:d5:94:ed:69:84:ea:09:60:
e3:26:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:08 2026 by rpki-client