
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
File: 2681e094-c5f0-376d-abe2-47d9d9497306.roa (raw, json)
Hash identifier: zFEngVpKE8VFfjrvvqHVfCamplbghuCkC3Wt9j+r2i4=
Subject key identifier: 5C:EC:A8:E2:89:72:5B:DF:66:61:66:C4:A1:04:7A:8F:B4:EE:FA:6A
Certificate issuer: /CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
Certificate serial: 010D0C9F4328584CA061A74FB2CAEB49BD83CF00
Authority key identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
Signing time: Sat 24 Jan 2026 02:00:31 +0000
ROA not before: Sat 24 Jan 2026 02:00:31 +0000
ROA not after: Fri 24 Apr 2026 01:00:31 +0000
asID: 36466
IP address blocks: 199.180.216.0/22 maxlen: 22
208.71.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a0:61:a7:4f:b2:ca:eb:49:bd:83:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
Validity
Not Before: Jan 24 02:00:31 2026 GMT
Not After : Apr 24 01:00:31 2026 GMT
Subject: CN=f386f9d3-145a-46bf-a4a0-fb0b62f37920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:0c:f3:15:82:0b:ea:6e:c3:3b:b0:5c:2e:
8f:9f:68:68:9d:66:72:82:a3:b1:97:55:8b:02:b0:
8c:61:4a:d0:5f:97:eb:48:0a:80:11:c1:cb:e7:e6:
bd:9b:5c:1e:33:84:83:63:c6:3e:a4:10:c6:72:19:
47:fd:46:af:20:14:03:a1:26:81:02:33:3c:cb:ae:
f9:83:08:ff:be:40:c8:b3:bd:32:5a:97:56:f1:d5:
ba:0d:34:4b:12:df:c7:e5:83:72:44:92:90:66:78:
2b:fd:8c:1b:b8:ad:d1:6c:9c:8d:84:71:04:d0:66:
71:f6:6d:6f:29:65:db:d5:d3:ab:a9:91:7f:73:ab:
d9:96:d5:34:0b:1d:04:63:c9:76:da:eb:56:e3:cd:
5a:e3:41:ba:d7:f2:e3:fc:80:38:79:db:d3:ed:56:
1c:1d:b6:8c:ac:a9:f9:ac:c6:5b:1d:1c:c5:20:2d:
b0:9e:87:40:d5:75:55:b6:bd:20:f6:65:f4:16:f9:
fd:f9:d1:a7:6f:7e:c8:aa:bf:67:9e:69:db:df:af:
d2:dd:49:14:39:ba:c7:88:12:dc:98:05:29:e7:ed:
d2:bd:5d:55:ce:84:8d:e5:1c:99:89:8f:ef:7b:95:
ab:cd:81:8d:6a:26:53:6e:8d:d6:c9:d8:0b:aa:5f:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:A8:E2:89:72:5B:DF:66:61:66:C4:A1:04:7A:8F:B4:EE:FA:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl
X509v3 Authority Key Identifier:
keyid:41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
sbgp-ipAddrBlock: critical
IPv4:
199.180.216.0/22
208.71.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8e:4c:06:06:4b:e0:f5:e6:ff:e0:81:29:17:a7:be:b2:6d:
2b:fc:93:2e:31:54:95:4b:f6:8a:b7:00:e6:c0:50:86:22:85:
f5:49:f4:5d:e8:a3:c0:8b:f0:74:3b:60:69:f6:3c:44:af:10:
22:bd:7e:d7:97:1a:26:6f:b0:e8:7e:34:6d:a0:65:71:8f:4b:
01:ee:0c:80:d2:4b:ee:1e:06:08:2d:a9:26:c4:18:25:b8:df:
7f:e2:92:5b:b6:b2:88:5d:20:35:fa:21:83:86:99:0a:dd:35:
a2:69:b1:c1:ad:57:67:17:82:e5:71:19:ff:5c:30:d0:ee:ab:
8d:4d:cf:e0:3f:05:12:7c:ac:07:3d:9e:40:f2:7a:e3:b6:d4:
1d:28:8a:0e:58:e7:a9:32:86:81:b1:cd:db:1d:54:f2:6d:55:
d0:17:ed:38:c7:e8:6c:82:a3:6c:45:79:6b:16:e9:a3:fb:8e:
b4:ed:f7:74:5b:62:ea:ec:91:a7:54:9f:1f:11:9f:02:aa:69:
78:db:b0:d0:ff:92:cf:6d:de:59:25:26:88:73:2d:73:ef:82:
b9:a2:74:51:08:01:b5:06:81:9a:67:91:84:7d:5e:37:6f:58:
41:fd:39:9a:47:11:75:9d:c8:ae:18:44:48:7c:93:4a:50:32:
06:79:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:49 2026 by rpki-client