
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
File: 288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa (raw, json)
Hash identifier: juFtaVtRtXOnqqwpqlsZjPUKA6Vy3F1kQahk9PF/b7U=
Subject key identifier: D9:2C:AA:93:B3:AF:DF:F9:B5:2B:7D:A5:1F:BA:04:89:E2:F2:5E:A7
Certificate issuer: /CN=194b4d95-965d-467f-835c-6cdeececce61
Certificate serial: 010D0C9F4328584CCD0C9CAE7F7745E7757D8B80
Authority key identifier: 2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
Signing time: Mon 09 Feb 2026 02:00:31 +0000
ROA not before: Mon 09 Feb 2026 02:00:31 +0000
ROA not after: Sun 10 May 2026 01:00:31 +0000
asID: 1062
IP address blocks: 23.166.216.0/24 maxlen: 24
104.166.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cd:0c:9c:ae:7f:77:45:e7:75:7d:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194b4d95-965d-467f-835c-6cdeececce61
Validity
Not Before: Feb 9 02:00:31 2026 GMT
Not After : May 10 01:00:31 2026 GMT
Subject: CN=c9843161-8ed0-4790-b6e8-1ee2fe80c4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:dd:b9:ed:1b:2a:b7:1d:28:32:09:25:c1:
2c:d8:f1:d5:35:81:fc:3d:1a:cd:95:d9:57:6a:86:
8c:75:ee:b6:62:c4:7f:ad:c3:21:8f:39:6b:fd:6f:
cc:68:03:43:37:40:af:5f:0d:0c:37:75:9d:9d:e5:
24:55:26:62:9e:cf:d0:18:a7:9e:ac:81:99:d2:a3:
c1:f3:a4:f1:82:a8:8f:b8:34:11:17:3b:ee:46:fa:
a8:c3:e8:c7:58:22:e1:1e:13:db:06:54:6c:f0:ff:
ad:bb:d5:d7:a0:17:60:ec:04:6e:79:9e:fb:55:f0:
64:03:5f:35:dc:50:79:0d:0b:e5:26:2c:0a:57:09:
66:f2:ad:75:52:8c:3f:17:ab:a5:e6:dc:49:28:7a:
8e:f5:d0:02:af:0b:22:bc:84:91:a9:40:33:76:5e:
6a:6f:ec:e5:97:be:6d:bd:fa:9f:b0:24:30:71:71:
5d:85:1e:1d:ff:b1:59:3a:fe:3f:c5:1f:d9:2b:28:
5e:b6:c5:e3:67:60:1c:0a:41:c2:30:6e:f8:58:ea:
64:c9:27:e0:1b:85:15:5a:bf:eb:ea:98:b0:82:65:
77:a9:c9:98:98:85:3f:35:cd:25:8f:a9:26:55:da:
0e:88:8d:b4:c1:60:7f:69:cc:5a:61:aa:fc:70:25:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2C:AA:93:B3:AF:DF:F9:B5:2B:7D:A5:1F:BA:04:89:E2:F2:5E:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl
X509v3 Authority Key Identifier:
keyid:2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.216.0/24
104.166.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:a4:b2:ec:96:a1:32:1d:20:51:73:1e:dc:3d:ad:c2:15:c0:
c3:58:d5:7d:b8:79:fd:9a:a9:49:09:80:c2:85:14:94:36:b2:
14:e2:41:d0:10:85:7e:63:0c:2b:35:77:a7:9c:90:e1:22:93:
9e:43:ae:b6:9c:03:ea:6a:d9:c9:99:98:91:3f:a5:9d:7b:00:
11:a9:81:1b:35:27:ee:d5:63:85:29:bc:49:a7:91:82:99:d5:
f2:5d:67:e6:37:1c:b4:85:9e:cf:69:01:5b:ae:32:5d:bd:94:
f0:d0:8a:8e:fc:41:44:cc:ae:be:f8:d4:ad:c5:40:fb:4c:67:
fd:43:f1:a0:f7:cc:d9:cb:b9:dd:a7:b9:90:aa:04:b8:79:2b:
00:5f:42:ef:2e:0c:3a:27:41:35:52:dd:b9:c5:00:b8:13:12:
33:a0:16:f5:07:03:d6:6f:d6:e4:8c:a8:a0:6c:0a:73:74:70:
72:e1:aa:20:d2:bd:58:29:b6:71:a4:94:14:46:fe:47:a7:70:
1a:53:63:1e:c5:b6:85:f6:c7:97:60:79:05:10:ae:e6:5c:06:
07:0d:98:27:77:d8:bb:89:68:3a:52:7a:80:62:89:b3:6c:6f:
f3:a1:42:0e:29:71:15:d2:93:73:21:96:af:e8:67:7d:e2:13:
64:22:f4:30
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzNDJyuf3dF53V9i4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTk0YjRkOTUtOTY1ZC00NjdmLTgzNWMtNmNkZWVjZWNj
ZTYxMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
Yzk4NDMxNjEtOGVkMC00NzkwLWI2ZTgtMWVlMmZlODBjNGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPzdue0bKrcdKDIJJcEs2PHVNYH8PRrNldlX
aoaMde62YsR/rcMhjzlr/W/MaANDN0CvXw0MN3WdneUkVSZins/QGKeerIGZ0qPB
86TxgqiPuDQRFzvuRvqow+jHWCLhHhPbBlRs8P+tu9XXoBdg7ARueZ77VfBkA181
3FB5DQvlJiwKVwlm8q11Uow/F6ul5txJKHqO9dACrwsivISRqUAzdl5qb+zll75t
vfqfsCQwcXFdhR4d/7FZOv4/xR/ZKyhetsXjZ2AcCkHCMG74WOpkySfgG4UVWr/r
6piwgmV3qcmYmIU/Nc0lj6kmVdoOiI20wWB/acxaYar8cCW66QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNksqpOzr9/5tSt9pR+6BIni8l6nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTRi
NGQ5NS05NjVkLTQ2N2YtODM1Yy02Y2RlZWNlY2NlNjEvMjg4YzEzNzctZDQ1Yy0z
Y2U3LTg4YzktMWViYmZhNDFlNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTk0YjRkOTUtOTY1ZC00NjdmLTgz
NWMtNmNkZWVjZWNjZTYxLzE5NGI0ZDk1LTk2NWQtNDY3Zi04MzVjLTZjZGVlY2Vj
Y2U2MS5jcmwwHwYDVR0jBBgwFoAUL6PHkmAdD3drpwbu4Z7SNOf4kFcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTRiNGQ5NS05NjVkLTQ2N2YtODM1Yy02Y2Rl
ZWNlY2NlNjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF6bYAwQA
aKZ5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGuksuyWoTIdIFFzHtw9rcIVwMNY1X24ef2aqUkJgMKFFJQ2
shTiQdAQhX5jDCs1d6eckOEik55DrracA+pq2cmZmJE/pZ17ABGpgRs1J+7VY4Up
vEmnkYKZ1fJdZ+Y3HLSFns9pAVuuMl29lPDQio78QUTMrr741K3FQPtMZ/1D8aD3
zNnLud2nuZCqBLh5KwBfQu8uDDonQTVS3bnFALgTEjOgFvUHA9Zv1uSMqKBsCnN0
cHLhqiDSvVgptnGklBRG/kencBpTYx7FtoX2x5dgeQUQruZcBgcNmCd32LuJaDpS
eoBiibNsb/OhQg4pcRXSk3Mhlq/oZ33iE2Qi9DA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:05 2026 by rpki-client