
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa
File: ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa (raw, json)
Hash identifier: J83te+O8ihQHkehs9l1LljI3wslzI1lZAkeJ4R+X8ds=
Subject key identifier: 58:06:CC:1F:E3:EE:EA:3F:5D:F4:81:3F:85:92:41:FC:69:F7:BF:A8
Certificate issuer: /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Certificate serial: 010D0C9F4328584CF2BCF6A98E3189C1E6EDC640
Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa
Signing time: Sun 22 Feb 2026 14:00:41 +0000
ROA not before: Sun 22 Feb 2026 14:00:41 +0000
ROA not after: Sat 23 May 2026 13:00:41 +0000
asID: 394413
IP address blocks: 159.28.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f2:bc:f6:a9:8e:31:89:c1:e6:ed:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Validity
Not Before: Feb 22 14:00:41 2026 GMT
Not After : May 23 13:00:41 2026 GMT
Subject: CN=9634792c-3f02-41ba-aff0-f167d4dba8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:44:ae:5e:1b:1b:2f:3f:16:bc:d1:6d:8b:
2d:b9:3d:de:a3:e1:e8:10:63:f9:72:6e:a2:84:00:
b0:69:4f:5c:57:8d:41:aa:ec:b9:ab:b0:10:37:8d:
1c:b9:33:da:08:bc:48:16:7d:45:ba:0f:2c:c6:ab:
f3:ae:0c:a2:e9:ae:26:b3:7e:a7:af:1d:c2:08:a9:
5e:5e:1a:9d:ad:1e:cf:1d:2b:02:55:47:78:2c:23:
d4:fb:b6:9c:70:fc:1a:22:da:7c:29:ca:46:cd:6f:
54:62:6b:d0:cb:e3:3d:3f:ac:f5:7e:d5:8a:86:5a:
90:41:51:f3:cd:ba:1e:75:a9:33:78:bd:71:30:59:
c9:37:c4:63:86:17:fc:43:36:31:2b:d4:46:3f:60:
b9:79:3e:de:4f:77:fe:94:6b:79:44:82:14:67:e9:
7f:fa:06:53:7e:b7:3d:9a:8c:22:bd:74:95:fa:8d:
f2:e7:4d:95:e2:18:00:c3:bc:8b:d2:81:32:da:97:
88:b9:fb:df:c1:fa:61:59:94:64:9c:61:c6:93:41:
94:09:3d:f2:16:37:a0:db:f7:29:e3:cd:e3:b8:20:
64:11:57:9d:54:a1:84:2e:a7:f9:6c:9d:b9:60:b3:
30:6d:01:c1:2a:6a:4b:a9:b6:76:36:52:f0:9d:12:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:06:CC:1F:E3:EE:EA:3F:5D:F4:81:3F:85:92:41:FC:69:F7:BF:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl
X509v3 Authority Key Identifier:
keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.28.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a1:17:e2:ab:db:be:41:ef:c5:60:7b:c2:00:23:90:7b:a3:
d4:0b:fa:7f:49:2c:61:0e:59:cc:41:0e:b7:5b:5f:c3:04:2a:
51:c8:3d:48:ad:a3:9f:ef:86:92:4e:0c:f6:f1:28:c4:50:83:
72:5e:69:76:9f:1f:da:c9:bf:b2:a0:a6:cc:2e:ff:08:d6:3d:
ce:82:66:6c:20:d2:9f:5c:88:01:0a:18:cd:27:04:bc:91:5c:
15:bc:33:2c:e8:f0:69:57:76:e9:14:73:da:8a:4b:fb:12:9a:
63:5c:61:75:bf:5c:cc:91:7b:6a:bb:69:32:a3:e2:66:2c:75:
5d:2b:49:63:24:7b:7c:7b:a1:2f:5a:36:0b:98:b4:79:1d:c3:
ae:4b:56:c1:de:f5:7e:85:52:1b:f7:59:41:f8:a9:e7:15:85:
b8:f6:67:bf:ea:4a:ae:5a:9b:a3:03:c2:79:fe:78:16:07:b7:
4a:67:f1:3d:c7:ed:66:71:81:3c:73:bb:0e:9b:95:cc:42:8a:
a6:dd:96:e7:36:7e:96:68:03:97:7d:23:d5:11:37:dc:70:72:
0c:27:de:16:e8:bf:0b:f2:e9:61:25:76:26:e2:38:f5:c3:48:
72:7b:b2:3d:95:40:69:c2:cc:5c:80:2b:40:9a:cb:c7:97:13:
bc:fe:47:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:55 2026 by rpki-client