
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/4d87b2a6-1174-3a64-a887-e9aa8b48164f.roa
File: 4d87b2a6-1174-3a64-a887-e9aa8b48164f.roa (raw, json)
Hash identifier: bgYdit3WsYyQ9SdQh7hewNuSb4NX3UzwCADx/49rwIM=
Subject key identifier: 06:BB:38:DB:AC:AE:A1:DE:E2:05:13:ED:F0:A2:C4:2F:51:51:76:64
Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial: 010D0C9F4328584CB0DE1A1145D1FAE4BE8DD4A0
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/4d87b2a6-1174-3a64-a887-e9aa8b48164f.roa
Signing time: Thu 29 Jan 2026 23:44:25 +0000
ROA not before: Thu 29 Jan 2026 23:44:25 +0000
ROA not after: Wed 29 Apr 2026 22:44:25 +0000
asID: 15296
IP address blocks: 199.216.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b0:de:1a:11:45:d1:fa:e4:be:8d:d4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Validity
Not Before: Jan 29 23:44:25 2026 GMT
Not After : Apr 29 22:44:25 2026 GMT
Subject: CN=50926b2d-97c6-4e98-8833-3e3543a26595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:b4:84:bc:b6:31:21:4f:7a:8c:7c:1d:a6:
7e:ba:c4:ab:0c:75:68:60:53:81:76:6b:98:c4:12:
d1:4c:7c:1b:6c:1d:a2:a9:6c:c4:b4:ef:e5:8e:31:
c3:8f:ca:7c:a2:b0:ea:f2:82:a9:79:03:34:37:b1:
4b:3a:bf:4e:00:07:5e:71:29:dd:19:6a:a5:a2:42:
02:2e:3e:1a:61:89:a1:69:87:f9:91:ff:b5:b8:81:
0a:87:05:eb:c1:47:39:c1:5d:53:d6:45:81:bb:6b:
90:9b:67:90:ca:f3:f4:da:6b:9b:a2:39:3e:91:87:
94:c8:1d:07:fc:75:c6:1b:d0:42:e0:7a:91:c7:5f:
b7:85:2e:80:78:cc:15:86:07:b9:e2:c5:79:9a:a2:
5c:9d:11:3c:ef:d7:1c:1a:d1:52:d2:fc:1f:88:df:
c1:86:68:28:00:9a:fa:31:09:c6:62:33:9a:0b:8c:
21:fb:c4:4a:bd:cb:bc:63:79:cd:c5:44:62:8a:6a:
90:b9:fe:b0:20:e2:11:00:71:fe:12:e5:9b:2a:ed:
eb:63:d8:0f:2d:4b:2b:b5:3d:19:05:27:ab:b0:65:
1f:6e:bd:d7:df:ef:a3:9c:04:21:a2:90:cb:40:cb:
d6:a3:31:5b:93:36:ae:ec:37:0f:0d:92:d6:6b:95:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BB:38:DB:AC:AE:A1:DE:E2:05:13:ED:F0:A2:C4:2F:51:51:76:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/4d87b2a6-1174-3a64-a887-e9aa8b48164f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
X509v3 Authority Key Identifier:
keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
sbgp-ipAddrBlock: critical
IPv4:
199.216.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:f9:0e:78:45:f7:73:f4:d7:88:bd:47:5d:c4:0a:a7:11:69:
df:58:71:f6:5b:b5:06:3d:8e:67:15:1d:6c:29:1d:1e:5d:b3:
db:a0:07:12:e4:ad:b2:d7:af:9d:7d:9e:fa:c7:4b:55:47:20:
c9:75:25:5d:42:9e:fa:60:2b:18:41:06:a9:c2:d2:19:9a:36:
e5:51:63:06:63:92:4d:ba:34:52:38:6d:ea:ab:88:37:dc:40:
22:6a:a3:64:87:a1:8d:f6:60:41:9f:4d:e5:f3:5e:26:67:b2:
e2:76:3c:91:f4:88:bc:e9:e0:6a:99:19:f0:8b:b0:03:e4:e6:
10:80:18:bc:e0:9b:da:25:8d:f6:fc:79:de:48:28:98:82:d3:
39:13:12:b5:de:13:85:45:83:96:92:ff:d0:d6:26:db:86:05:
1f:e8:76:f6:cc:93:53:b9:42:28:05:82:5e:6e:fd:04:7a:20:
06:54:2d:15:b3:9b:74:4d:2f:1b:79:48:12:cf:e4:1c:4e:f9:
56:bd:57:7e:26:89:ae:37:69:a1:e7:25:79:35:35:e2:1b:4a:
43:89:bc:a6:aa:de:50:51:3e:5b:15:f8:80:d7:63:99:5b:fa:
2f:bf:6d:4c:83:8e:31:34:2d:20:1a:0f:bd:ac:5d:bf:38:ff:
46:c7:08:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:46 2026 by rpki-client