
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa
File: 128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa (raw, json)
Hash identifier: 4bL6eWLyGPt/0Ns29/hiAOncqgRt4qTfEyAQES16Xns=
Subject key identifier: 96:59:CD:C8:3D:0B:52:DC:B7:F5:35:C0:A8:AA:21:2A:DA:A1:D9:FD
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584CD40785F41E898B69BD446B00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 54113
IP address blocks: 140.248.220.128/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:85:f4:1e:89:8b:69:bd:44:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=a0f0ad5d-6388-4d37-b750-0966d1b118fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:6b:db:65:a7:26:76:d6:8f:cf:ba:71:b4:
aa:0e:1d:67:41:7b:4e:8e:ec:3e:90:39:31:1a:01:
53:5a:dd:de:7e:0b:f8:cc:84:b2:f4:7a:ea:e9:de:
d4:d1:94:71:60:91:5d:25:bd:4e:7d:bf:fe:26:71:
9a:7d:e2:51:70:29:51:d0:bf:19:cc:5c:c4:61:55:
a2:f3:c4:76:93:bb:d1:e5:56:2e:43:82:b6:30:32:
fb:ca:73:ad:7b:a7:66:05:ea:a2:d9:e1:35:31:02:
d2:c8:5e:a0:4c:dd:a9:fe:4b:51:fc:da:6b:d5:c0:
55:89:56:62:fb:3a:b0:76:15:95:a3:06:59:ab:25:
8a:6a:3c:25:e3:65:c9:cd:ca:01:b9:80:3e:35:a7:
ba:c5:52:c1:77:81:53:d8:e5:cd:cb:16:04:ad:2d:
a6:03:33:a3:92:3c:ac:bf:be:f7:6b:b4:b5:35:84:
50:40:ef:38:7e:26:8b:f9:13:05:4f:e0:70:43:9a:
c0:a2:08:4f:cf:1a:96:34:1c:de:93:c5:22:9c:d4:
e9:a4:32:b7:c6:db:38:75:98:f0:b1:46:d2:c5:ef:
a0:8f:18:8d:26:da:72:87:a2:46:de:57:ec:f3:5c:
32:e6:b5:f6:fd:95:6d:af:ac:3b:2d:fe:ba:15:aa:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:59:CD:C8:3D:0B:52:DC:B7:F5:35:C0:A8:AA:21:2A:DA:A1:D9:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.220.128/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:71:c3:21:3c:eb:c3:50:a7:55:73:4d:00:92:f1:49:b1:45:
f1:1c:0b:77:4e:a5:83:1c:0d:e5:ad:0b:42:f0:9f:48:96:be:
9d:b3:81:60:73:df:02:42:ac:6b:fa:f2:76:a9:c2:29:03:bb:
a1:85:04:30:0d:00:0a:2b:fd:04:cd:b3:24:47:ac:0f:81:2c:
e7:11:f1:a3:fd:c4:85:c5:ca:d7:c2:d1:cf:f9:17:80:b6:54:
d8:1e:d7:b2:4a:11:e6:f7:6e:9a:31:56:d5:44:a0:c4:38:5e:
30:a1:36:3b:e0:89:a3:48:3d:a9:68:8c:7b:f4:44:e8:51:22:
15:24:3f:bd:c9:06:e1:06:3f:aa:f6:bb:84:58:50:ed:0f:40:
f9:d6:7f:37:d8:bf:86:66:6b:a7:0c:aa:54:b7:61:c4:4e:09:
0a:d7:c4:19:1b:1f:05:ef:35:a9:9e:f0:b7:3c:6b:83:cf:93:
1e:84:88:99:09:b3:2c:ba:64:b3:cb:73:67:bd:fc:53:f6:6e:
39:f0:3e:32:3e:5b:2e:5e:1b:67:6c:93:8b:18:38:fb:68:35:
29:f0:0a:df:e2:f4:a0:11:20:41:33:b4:01:6c:fa:da:b5:c5:
cc:bd:64:b0:a1:c5:d7:6b:df:0b:a3:2b:44:7c:6b:c2:bf:95:
de:3f:8a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:45 2026 by rpki-client