
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa
File: 4e00c024-f493-3f70-9db1-bef788678325.roa (raw, json)
Hash identifier: N9JsUVnUrPJy9EaxUqJWMN/+R6rTUNUGRnoJPb3ZuYA=
Subject key identifier: 4B:57:29:81:2B:37:34:FB:A8:98:D6:B3:30:43:43:5F:13:43:A8:12
Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial: 010D0C9F4328584CDC6788C5D714F6CB8CAC0F00
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa
Signing time: Sat 14 Feb 2026 14:00:41 +0000
ROA not before: Sat 14 Feb 2026 14:00:41 +0000
ROA not after: Fri 15 May 2026 13:00:41 +0000
asID: 210645
IP address blocks: 2602:2c9::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dc:67:88:c5:d7:14:f6:cb:8c:ac:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
Validity
Not Before: Feb 14 14:00:41 2026 GMT
Not After : May 15 13:00:41 2026 GMT
Subject: CN=43b86691-736a-4a74-9701-5bca509d4359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:b8:f7:47:5d:c2:46:53:d2:74:ea:a0:fb:
eb:30:db:c7:80:e0:27:15:c4:18:1b:bd:1b:42:32:
27:26:2c:69:2e:47:ae:2f:7a:71:e0:9b:7d:68:92:
4a:f4:16:de:b1:70:8e:08:69:59:ef:b5:ea:20:e4:
8f:4c:06:0d:91:21:63:e6:b8:9e:55:8f:e0:dd:62:
ab:a9:14:24:6d:65:9c:45:c6:e7:c0:54:1a:8a:32:
fe:82:15:85:4b:94:be:59:72:ec:2e:90:a4:31:70:
8f:1c:c2:0f:60:a6:a5:0c:40:59:02:f8:b1:0a:7a:
6b:06:93:f8:b6:4a:2b:0e:83:00:97:82:f0:28:1b:
87:ac:c2:38:f4:c9:d8:c3:43:5a:04:92:7d:c2:6c:
69:9b:bd:62:ec:c5:86:ad:d5:e8:d1:4a:51:f2:bb:
15:ae:56:d1:e9:77:ff:87:9f:84:21:81:e1:76:ae:
f3:94:0b:36:be:5f:fa:ff:f9:7e:2d:10:a7:a5:91:
96:07:ae:36:34:03:cf:0a:22:94:d4:ef:52:63:cd:
75:28:4a:fa:95:41:d6:b4:5c:99:47:d7:a5:d2:04:
0d:80:b6:ba:07:83:ec:39:3a:5b:83:a4:79:95:5f:
76:40:50:f3:1e:ef:48:8e:74:d7:58:10:90:68:c5:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:57:29:81:2B:37:34:FB:A8:98:D6:B3:30:43:43:5F:13:43:A8:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
X509v3 Authority Key Identifier:
keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2c9::/37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:a1:4d:69:45:84:71:8a:51:00:a4:19:47:d9:f4:7f:59:bd:
08:c9:99:58:cd:99:03:57:ed:c8:ee:88:5e:03:b2:9c:fd:7f:
e8:ba:11:db:29:b0:17:ac:1f:8e:85:4f:74:dd:24:06:96:d2:
ee:17:c8:22:63:cf:e8:ea:ee:b3:28:81:a9:12:c9:7e:7d:be:
1a:57:60:66:0a:36:bc:9f:6c:9d:f3:33:dd:5f:f7:f5:86:27:
d0:ce:bf:ab:af:53:1f:e7:31:7d:1b:b1:68:c9:ac:90:d1:30:
0e:e8:97:20:ca:c5:f8:2e:ec:9d:e9:98:4a:bc:cc:f0:ee:58:
36:80:af:cb:ef:f9:c5:44:a4:32:2a:61:17:0b:82:bf:15:e2:
9b:a0:6f:32:43:de:f7:cc:32:7e:87:fc:b9:6d:83:4b:c3:84:
fd:bb:41:42:25:6f:6c:25:da:44:52:d0:6a:c0:fc:69:59:45:
5a:47:46:56:ad:49:47:c8:92:8e:6d:4b:42:fc:e9:38:df:cb:
5d:ab:cf:5d:ed:10:24:a0:99:2b:f1:c2:8c:4b:fc:e5:18:75:
b5:b9:15:55:26:7d:d0:85:84:70:77:e8:f3:e9:f3:aa:e3:06:
89:9b:f3:cf:90:f6:ae:2a:70:f2:e0:1f:a7:03:31:38:19:c9:
ea:30:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:48:09 2026 by rpki-client