
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa
File: 2005afc5-6398-3704-ae6d-145db2a4d7af.roa (raw, json)
Hash identifier: I9fNgwdBPZFFKDvhlICU5KBr/jMdweGvBGxJU3SxwTw=
Subject key identifier: 1A:24:2F:4B:FB:DF:31:80:71:BE:FC:39:C6:62:A3:7D:2C:99:6B:9D
Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial: 010D0C9F4328584CD2A1EE8BCB241A06BFF0DC00
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa
Signing time: Wed 11 Feb 2026 02:00:32 +0000
ROA not before: Wed 11 Feb 2026 02:00:32 +0000
ROA not after: Tue 12 May 2026 01:00:32 +0000
asID: 16504
IP address blocks: 143.170.0.0/16 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d2:a1:ee:8b:cb:24:1a:06:bf:f0:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
Validity
Not Before: Feb 11 02:00:32 2026 GMT
Not After : May 12 01:00:32 2026 GMT
Subject: CN=94740701-8eef-4acd-9a32-0c90320c6e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:98:63:af:19:e2:7e:8f:38:c2:ea:c1:fb:
2f:ff:e6:39:2d:80:95:c6:ed:48:f5:ca:0f:70:ee:
ac:98:ef:9c:62:76:7e:eb:b5:ee:c6:d2:eb:3f:5c:
37:a9:a6:e2:46:7b:f6:f9:0b:7b:96:0d:5e:0f:fb:
c9:21:46:0a:aa:1c:b9:cf:b1:32:1d:84:66:d7:1e:
c3:00:89:57:cc:08:43:c7:f0:2a:b9:c4:27:fd:59:
ab:29:a0:31:8d:4f:a0:78:b0:71:37:ae:63:5f:59:
2a:63:e2:fd:86:64:fa:7b:e9:7e:eb:23:cd:4c:6c:
fa:3d:90:47:e1:4e:88:34:b7:83:fb:7c:b0:c2:62:
f5:59:02:4d:a9:83:17:5f:de:dc:9c:af:89:2a:4a:
10:5b:60:67:fd:72:00:7d:d4:31:38:6c:79:5a:91:
0f:a5:a3:0f:83:d5:ce:f1:7f:f9:9d:d8:52:79:66:
82:02:f0:11:61:02:7f:5e:0a:80:e1:ff:e0:9e:0d:
83:9b:6e:55:6c:3e:46:97:50:83:ba:78:03:ac:54:
29:4d:7a:25:57:e5:fe:14:71:2b:73:01:97:75:8c:
21:e9:cd:ae:06:62:d4:64:33:af:e3:c8:4b:d5:b0:
c8:5a:dd:88:ec:e3:a3:60:2a:af:dd:16:e2:85:56:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:24:2F:4B:FB:DF:31:80:71:BE:FC:39:C6:62:A3:7D:2C:99:6B:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
X509v3 Authority Key Identifier:
keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
sbgp-ipAddrBlock: critical
IPv4:
143.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:03:d9:06:f0:b0:76:17:20:0b:32:62:40:a0:d8:ca:d6:c2:
6b:8a:19:23:12:d6:49:20:4f:05:81:ac:76:f8:42:83:0a:f7:
86:9a:d9:d2:8b:fd:09:83:69:60:49:8f:cc:40:f5:22:bd:fc:
09:1e:7e:8d:7e:c8:9b:a4:8d:87:23:c5:30:ca:65:81:e1:9a:
67:3c:73:a7:9d:6c:1a:c5:dc:4b:78:68:b9:20:3c:14:bf:88:
6f:33:3d:bb:35:f1:4f:a9:a1:af:78:b4:61:e9:66:d1:f1:aa:
e3:58:e1:f9:01:92:85:76:22:da:91:49:1c:be:0c:15:08:f8:
83:75:43:80:bd:97:1d:1b:6e:4e:b6:95:f9:cf:ea:2f:4f:27:
b5:df:fc:b1:d7:c2:13:26:85:d4:2f:03:8e:1c:eb:cf:76:68:
bf:0f:3b:fe:38:d8:dc:21:14:14:47:8e:dd:70:4c:2f:50:3a:
2d:f8:19:ad:46:9d:a0:09:c5:2a:36:c7:8b:e9:4a:cf:c8:0c:
48:a6:c2:a3:32:ac:c2:b1:3a:b2:46:4c:b8:9f:33:b3:d7:56:
33:be:82:35:ee:27:c6:59:81:e4:6a:90:ab:79:a2:34:fd:b5:
8b:22:fc:6f:1d:07:f8:f6:60:55:92:9b:08:0f:b4:d3:9c:31:
da:60:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:19 2026 by rpki-client