
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/43be9e63-8f11-39b3-aff7-3b46a1d98fd6.roa
File: 43be9e63-8f11-39b3-aff7-3b46a1d98fd6.roa (raw, json)
Hash identifier: Fyk8sw3EKIvlespqxfVF3DVjEsFPWlz4N3wer5j/ies=
Subject key identifier: 35:CB:31:09:6E:BD:07:BD:41:06:57:8F:DC:E3:20:88:04:D0:8B:ED
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584CD4079B44E9F4BDF4FEECCB80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/43be9e63-8f11-39b3-aff7-3b46a1d98fd6.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 54113
IP address blocks: 151.101.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:9b:44:e9:f4:bd:f4:fe:ec:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=297888da-25b5-48fc-96ec-c961ae508dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:06:30:3e:6b:db:b6:49:8d:5c:24:64:38:
41:b4:67:bc:61:78:da:42:48:85:84:ba:43:0c:2d:
b7:c5:4e:ec:a1:12:b9:2c:3d:67:80:be:60:8a:a2:
28:e1:1c:4a:9a:2d:9e:56:15:15:09:e1:7e:88:7e:
0c:84:0e:f5:0c:16:ae:43:c7:e3:9e:ef:7d:5a:b2:
83:d4:d1:63:f3:6f:61:ad:00:8b:b1:16:06:7e:f6:
f0:36:a5:e9:dc:b6:31:3c:c9:bf:8a:bb:66:7d:9c:
5f:6d:4e:10:ee:59:e6:dc:05:02:bd:d8:5f:b9:46:
2b:ee:1c:20:59:2c:93:01:d2:12:e7:bb:98:3c:57:
ba:9d:00:00:26:6d:f1:80:78:98:38:1c:bc:32:4d:
65:18:93:d2:5b:37:88:a8:12:83:b4:08:70:bc:ae:
48:a0:5b:c7:3d:52:09:0a:bf:82:0e:e1:85:aa:11:
9e:63:97:b9:e7:c8:ef:e4:fb:a0:bc:2d:4f:63:8b:
09:96:65:09:68:e7:94:b2:cf:d0:cd:b3:ad:ac:e8:
1f:58:3f:b8:4b:e3:a4:f9:a3:46:d0:c9:30:e6:13:
f8:f4:37:0f:47:d4:83:99:75:8d:5b:78:ba:dc:00:
68:52:c3:3b:30:3b:97:68:bc:af:39:55:e5:ae:00:
f5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:31:09:6E:BD:07:BD:41:06:57:8F:DC:E3:20:88:04:D0:8B:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/43be9e63-8f11-39b3-aff7-3b46a1d98fd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
151.101.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:19:42:4f:73:17:d5:31:7a:f1:15:20:85:b0:39:d4:c1:8d:
6f:bc:02:c6:24:6b:1b:62:99:f8:54:8d:36:09:fe:3b:08:7f:
f4:af:cc:52:54:69:b3:2f:9d:f1:49:7d:b7:5e:4f:fd:96:00:
9f:0c:d2:5a:e6:b5:c9:c5:db:11:93:47:85:f9:f8:35:7d:14:
5a:13:8a:c5:52:c4:19:b6:d7:fc:57:6e:b5:bc:48:07:d1:63:
b4:cf:cd:f8:0b:91:3e:57:a7:86:3b:d7:c0:ff:67:d3:62:64:
98:09:ab:65:9b:1e:08:b3:0d:2c:52:f4:6f:0f:70:c2:77:6e:
92:95:32:a6:7c:ba:27:d4:65:2d:f1:82:f2:a3:ca:1c:3e:9f:
dd:ab:7b:36:e2:f6:bb:99:70:ab:ce:95:db:05:7b:4b:bd:b0:
b7:16:39:25:6a:09:f1:2e:31:0c:cd:27:37:b9:c9:d8:fd:d2:
20:a2:d1:96:9d:b7:c2:4e:2e:21:c4:61:94:8c:6e:c2:63:3f:
ff:e3:67:86:48:72:d1:39:35:f8:0c:9d:91:da:57:06:c9:b5:
a5:39:4d:af:a0:82:d0:d9:1c:06:fe:6a:eb:07:72:a6:d8:b9:
21:12:b4:b3:51:92:6a:5c:cc:b0:2a:97:9a:3d:05:43:8f:05:
21:b2:b2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:34 2026 by rpki-client