
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8563e5f6-949a-3c26-8f2d-7402b45c89d9.roa
File: 8563e5f6-949a-3c26-8f2d-7402b45c89d9.roa (raw, json)
Hash identifier: 9ZhwkPXsoyC9/bphA0aItQIZv67GLoJOpadV4ngOkjg=
Subject key identifier: 8E:52:00:9F:7B:1C:E4:37:71:D2:DA:F9:34:76:30:A8:6A:A5:EE:45
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584CD407A0A77E08DB9897D18A80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8563e5f6-949a-3c26-8f2d-7402b45c89d9.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 54113
IP address blocks: 199.232.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:a0:a7:7e:08:db:98:97:d1:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=7c27f37d-536d-4237-ac55-2e3c26399359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:0d:c4:5e:ce:82:c0:83:09:a7:e7:1f:5c:
89:1b:48:29:84:af:27:63:6d:6e:2f:05:8b:76:48:
27:29:8f:c5:fe:35:2e:7a:cd:cb:ee:26:2e:a5:6f:
32:b2:8d:79:d1:24:72:f4:46:16:ce:4f:d9:79:31:
cf:3b:58:a9:d8:b1:7e:73:85:40:b5:10:e5:3c:1a:
d7:c7:47:5c:f7:0a:aa:ec:b4:53:41:02:74:95:4e:
e2:e6:bf:1d:6c:e3:8b:98:fc:21:33:1e:06:3b:92:
6a:f3:f2:90:f7:37:60:6a:51:f8:2a:b6:28:65:ed:
74:be:16:8e:f4:2f:25:b6:0f:85:5c:60:a6:38:25:
ce:7d:00:f0:5a:17:3c:37:45:db:91:99:79:a1:3b:
d2:53:9c:69:5c:bb:24:96:1a:10:3e:6d:9d:d5:39:
0f:35:3d:09:68:b0:d0:10:79:54:c1:84:5c:4a:3a:
af:cd:37:26:1c:29:be:04:b1:bd:6e:1c:52:85:f6:
20:45:b4:9a:dd:59:7a:0d:4f:32:73:36:c2:c3:59:
83:6e:e8:61:19:63:28:d7:16:d7:9c:1c:0e:bc:75:
c9:b0:d4:3c:21:97:8c:5e:56:a6:e8:15:db:48:4f:
de:69:6a:e1:49:4e:ee:27:0f:3d:b0:b4:a6:81:83:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:52:00:9F:7B:1C:E4:37:71:D2:DA:F9:34:76:30:A8:6A:A5:EE:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8563e5f6-949a-3c26-8f2d-7402b45c89d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
199.232.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:eb:f0:8b:28:ed:24:e1:27:42:84:be:a3:d9:17:ec:e1:4a:
b9:1c:c5:e5:7a:c7:5e:d8:b4:28:89:fc:c7:9e:07:23:f8:74:
56:a3:6f:85:a6:98:87:dc:d2:d8:0d:9e:17:b3:78:df:bf:f5:
7e:eb:77:36:d3:ed:0d:56:3a:cc:6d:6a:02:08:6f:cd:0c:ea:
01:01:a8:c1:f8:ce:c1:06:91:40:61:b5:f8:74:82:aa:23:d9:
17:2b:16:6e:c4:21:45:d0:36:d8:ef:ff:e8:b9:f0:2b:05:a4:
de:5d:84:0b:72:d5:52:33:90:01:0b:c1:88:21:55:ef:e6:b1:
7f:ab:6d:cd:d1:58:0c:ed:39:86:26:c6:b8:37:04:87:ad:b9:
87:a6:d8:61:b8:cf:91:fa:c3:1f:9d:be:a5:4e:4b:1a:14:ca:
36:ca:8f:35:f0:df:b7:35:a1:dc:46:95:2d:0d:d0:48:92:bc:
60:a7:8e:25:05:c8:53:74:8f:56:5b:dc:9a:b1:b8:c9:c4:96:
09:70:93:ff:14:1c:61:81:39:ab:9b:65:a0:0d:a4:f5:62:31:
08:5d:89:6f:22:0b:6c:91:ba:4b:68:66:fc:63:8b:1c:41:8f:
cf:10:b8:98:b5:68:55:3f:ce:27:a7:0d:c0:11:c2:c5:50:c3:
6a:0e:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:16:00 2026 by rpki-client