
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa
File: 4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa (raw, json)
Hash identifier: Kg000DHMlFT0CDZSExCSr0i6S2ZL2gDiykVsf9EAsqo=
Subject key identifier: 33:D3:E8:72:12:E9:0C:10:7D:F4:C0:4B:BC:7C:28:19:7E:57:E4:2C
Certificate issuer: /CN=688165c5-c42e-4c66-a760-e605ebd8b2a3
Certificate serial: 010D0C9F4328584CAE5737AB169A36DADFF7DC00
Authority key identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 395089
IP address blocks: 192.160.102.0/24 maxlen: 24
2620:132:3000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:37:ab:16:9a:36:da:df:f7:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688165c5-c42e-4c66-a760-e605ebd8b2a3
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=16598292-7e9c-48b4-9753-d5b3cb7866fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:93:ee:1d:ca:ba:c7:51:49:0f:25:7e:87:
04:77:ce:8c:18:e9:52:9a:a8:09:f3:5c:05:42:e1:
c5:32:6f:85:30:c0:27:b7:4f:07:66:71:15:d3:16:
d9:3f:9a:ad:b8:db:6d:d6:70:ac:26:64:41:76:d4:
63:28:91:6a:de:e2:31:96:56:2b:26:6a:53:bd:18:
46:a3:4e:58:8c:7c:9d:96:32:9e:45:21:ac:b0:19:
db:b3:12:4b:42:38:b3:a3:e8:29:bf:83:42:bd:d3:
92:ab:43:0e:e5:a0:e1:7b:b1:a6:c8:a7:18:5e:4d:
28:e7:48:89:b6:6a:62:60:be:8c:27:74:13:3c:5e:
5b:6e:59:26:f9:ca:f0:ee:a5:4f:3e:9e:07:b5:9c:
62:9c:9e:b9:64:c0:bd:bb:4d:4b:0c:b4:62:ed:07:
b6:4c:67:d4:e8:3c:b2:09:5f:02:a6:9f:7f:8a:db:
01:35:06:4c:e9:71:9d:b9:08:eb:87:58:49:d9:31:
bd:48:30:5d:b7:26:c0:e0:86:ed:5d:90:4a:0c:4c:
67:d9:25:5c:8a:a8:09:76:b9:08:85:b3:c1:9d:1a:
ae:0f:3e:07:19:b4:21:28:c8:67:f0:59:7e:ee:0d:
5c:bb:a7:cf:f7:b6:96:7c:ee:e9:bb:b9:c0:9d:f8:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:E8:72:12:E9:0C:10:7D:F4:C0:4B:BC:7C:28:19:7E:57:E4:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl
X509v3 Authority Key Identifier:
keyid:08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.160.102.0/24
IPv6:
2620:132:3000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:ad:52:8c:9c:ce:88:d2:3f:82:a6:0e:a8:e9:17:34:f0:51:
f4:95:1f:b5:a7:57:b7:e2:28:ba:87:fc:ca:28:b7:8f:e1:ea:
40:a9:ea:9a:1e:08:ee:cd:71:c5:26:28:8c:d8:0d:89:8b:47:
46:91:69:ff:0f:d4:fb:7c:65:1d:ea:49:09:2a:6b:93:9e:22:
00:f1:04:e1:b4:73:46:2e:c5:4d:75:90:d2:fc:dd:f4:5e:70:
ba:ff:bc:21:74:21:38:1b:bb:ac:21:1c:6b:9a:ba:f2:2e:76:
5a:c8:69:b3:9b:73:7c:6b:99:78:15:13:1e:fa:b4:43:3d:fc:
b0:9a:c1:c0:90:d8:25:80:2a:ee:92:31:0b:33:e9:fa:ac:f2:
b2:d5:34:e1:ea:a3:5c:a1:d5:47:a7:e3:33:f8:b4:23:67:4d:
ee:d7:f9:8e:f9:2a:f5:76:94:28:bc:3a:24:8b:fb:0a:73:75:
46:39:62:0f:ef:b9:a3:26:cf:8b:37:73:46:27:81:0e:66:0f:
3f:72:27:7e:37:b4:cc:4a:fb:18:a8:d1:0e:0f:27:7a:af:08:
ee:1e:6b:da:11:5f:12:b1:0b:32:f9:bd:c7:df:95:70:48:67:
65:08:d6:4f:f4:63:f4:1e:91:c7:bb:1d:43:b5:90:b9:8c:12:
b5:da:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:04 2026 by rpki-client