
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa
File: f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa (raw, json)
Hash identifier: WpWzB08cQGUFOa4yExCX8tSYSKUUTUyAzjPdWhgi2Ao=
Subject key identifier: 8C:7A:3A:0A:36:3A:FC:3F:3F:10:07:1E:F0:B9:B5:D0:86:E2:D0:FD
Certificate issuer: /CN=5b68d593-6e81-44a9-9e8b-fede7b5621ed
Certificate serial: 010D0C9F4328584CCD0C8BCE74B81CA8D8690EB0
Authority key identifier: 06:CF:E3:01:1E:92:B2:C6:66:CD:51:98:4D:60:12:A8:51:9D:08:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa
Signing time: Mon 09 Feb 2026 02:00:31 +0000
ROA not before: Mon 09 Feb 2026 02:00:31 +0000
ROA not after: Sun 10 May 2026 01:00:31 +0000
asID: 40943
IP address blocks: 199.167.208.0/22 maxlen: 22
208.91.184.0/22 maxlen: 22
2604:3d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cd:0c:8b:ce:74:b8:1c:a8:d8:69:0e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b68d593-6e81-44a9-9e8b-fede7b5621ed
Validity
Not Before: Feb 9 02:00:31 2026 GMT
Not After : May 10 01:00:31 2026 GMT
Subject: CN=252a288f-ffa7-450f-892c-d7025465a75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:59:89:fc:b9:41:08:45:e8:7b:24:0c:0e:
c1:59:0a:19:47:c6:2f:2f:3a:e9:1b:f0:0d:45:ef:
b2:f4:ff:7c:be:62:0c:73:17:0b:f5:e0:b1:70:ce:
d4:b4:fb:7c:ee:27:db:f5:41:07:6f:b1:be:52:eb:
82:09:b2:49:db:02:07:da:80:dc:03:0d:46:15:54:
1d:93:80:16:b6:6a:d8:af:88:18:6b:e4:26:53:3b:
65:85:1e:fb:5d:79:3b:1d:72:0e:35:4b:e2:8f:ad:
3a:55:13:43:af:a3:0e:2e:c2:39:89:11:2e:08:fa:
e6:95:21:b5:b3:66:56:03:8e:62:b6:50:34:ab:92:
9d:ea:0f:ac:02:94:5a:18:d3:b8:02:94:38:83:49:
1e:81:04:fd:5e:d2:b3:a9:24:a9:f0:a1:1f:d0:85:
6d:70:b7:45:c6:88:11:6e:b2:b4:c0:b2:c9:34:48:
cd:69:13:7b:bf:af:76:cf:e4:f2:f0:38:b4:1b:4f:
66:ad:78:41:9f:0e:a8:37:08:dd:01:67:73:35:d9:
17:be:0c:de:e7:22:3e:7f:24:76:6f:8a:36:93:0a:
29:9a:a6:88:19:66:14:67:b6:65:a5:50:1f:96:fd:
9c:76:9b:8b:6c:aa:ee:3f:53:76:17:73:08:89:5b:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:3A:0A:36:3A:FC:3F:3F:10:07:1E:F0:B9:B5:D0:86:E2:D0:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.crl
X509v3 Authority Key Identifier:
keyid:06:CF:E3:01:1E:92:B2:C6:66:CD:51:98:4D:60:12:A8:51:9D:08:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.208.0/22
208.91.184.0/22
IPv6:
2604:3d40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:77:4e:55:96:8f:ef:37:45:62:01:f5:58:66:13:41:78:0f:
5a:dd:1d:48:08:95:45:a4:11:84:03:68:19:80:8a:c3:cc:17:
27:56:8d:2f:7a:c2:bf:32:9d:f5:3a:8a:36:d0:25:cb:19:30:
9e:55:d2:9d:e4:32:46:b9:eb:8a:65:66:af:57:5e:d0:53:96:
6c:1d:e3:75:fd:f0:5b:7a:18:00:4a:83:f0:35:0d:ba:e3:9a:
01:7f:db:49:4f:3e:54:61:80:c6:7f:7c:d7:5e:ae:1a:63:30:
54:b9:95:70:3e:0b:81:5a:50:fc:d9:c9:9d:1d:d6:82:01:b3:
9a:a3:80:72:82:d0:bb:79:af:53:ce:d0:5f:26:6c:d3:3e:9a:
41:cc:bc:3a:ba:9f:9b:f2:7a:d2:97:2b:11:87:dc:d7:d5:68:
ef:a9:a8:d4:4a:9a:d1:d3:ee:ea:0a:71:4b:97:a2:17:c1:11:
fc:e7:e1:da:33:3c:53:57:5c:5a:a7:46:0b:56:45:0e:97:e2:
37:07:1f:95:ac:22:59:1a:a6:63:be:d7:b6:83:0f:42:0a:62:
6e:61:7c:5a:cd:27:ca:73:1a:ba:ce:da:5a:46:13:21:00:3d:
33:2f:a8:b4:c3:bd:54:ff:83:1b:dc:64:d3:5c:2d:f7:f8:4a:
f0:3b:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:48:54 2026 by rpki-client