
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/89df5dbd-c0ce-324f-8189-e5aa24a40457.roa
File: 89df5dbd-c0ce-324f-8189-e5aa24a40457.roa (raw, json)
Hash identifier: lerY7PDAodo8ankBdSL/x+PJcEq2tT2ELeafULdpXZc=
Subject key identifier: 54:DB:D3:B0:81:8F:AB:AC:06:B9:0C:D5:1B:BE:30:44:24:FE:38:0E
Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Certificate serial: 010D0C9F4328584CEA5CF167E6D171BF6F40E5C8
Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/89df5dbd-c0ce-324f-8189-e5aa24a40457.roa
Signing time: Thu 19 Feb 2026 14:00:40 +0000
ROA not before: Thu 19 Feb 2026 14:00:40 +0000
ROA not after: Wed 20 May 2026 13:00:40 +0000
asID: 8075
IP address blocks: 137.70.154.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:5c:f1:67:e6:d1:71:bf:6f:40:e5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Validity
Not Before: Feb 19 14:00:40 2026 GMT
Not After : May 20 13:00:40 2026 GMT
Subject: CN=86ed11b0-d96a-483a-b0e5-bc40d2af5766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:ee:f0:12:5f:3c:89:a6:5a:6a:50:43:79:
fb:92:b7:b6:aa:a1:e4:e9:ba:53:ee:26:ea:24:85:
58:a4:64:db:a8:b6:07:ee:6c:fc:fb:ea:b9:bb:60:
a5:66:ea:80:26:e5:86:0c:be:70:d6:aa:14:b1:95:
1e:63:9b:f1:10:e3:9e:34:81:ca:2d:66:dc:7d:fb:
58:bf:f4:1d:e0:80:49:bb:dc:16:b9:9b:8c:65:a9:
58:7d:71:65:80:83:cd:56:8b:97:0c:4b:6a:81:e1:
8c:d4:75:c3:66:cd:30:ae:c1:80:2c:39:67:9d:20:
2a:6a:a5:56:60:a1:ef:c8:cd:5e:00:4e:61:fb:e6:
e8:43:2a:6a:f9:c6:c8:b4:55:8a:1e:24:5d:59:40:
90:99:78:db:3e:b3:35:04:6b:8e:6c:c4:7d:18:d5:
99:fb:91:a0:57:bc:0a:67:ab:86:ae:8d:2d:6e:7e:
ba:83:d7:00:f2:87:23:3a:06:c3:e8:4d:17:4f:ce:
3d:d7:17:9e:59:6e:65:a3:3f:25:1e:6f:6a:66:d4:
95:84:42:c2:a5:24:45:fb:ad:18:0b:aa:7d:35:4f:
ae:e9:be:07:4f:1d:60:12:98:e8:05:10:78:15:e4:
5c:a7:92:61:a9:e8:19:36:1a:d1:43:fd:8e:f7:de:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DB:D3:B0:81:8F:AB:AC:06:B9:0C:D5:1B:BE:30:44:24:FE:38:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/89df5dbd-c0ce-324f-8189-e5aa24a40457.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl
X509v3 Authority Key Identifier:
keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
sbgp-ipAddrBlock: critical
IPv4:
137.70.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:2b:13:24:3c:f0:fe:c0:48:f6:00:4e:29:1e:56:4f:ee:03:
92:c6:48:be:82:f3:77:1d:9a:22:e0:52:6c:99:eb:70:61:16:
12:e2:cf:92:72:7a:d1:5a:72:f9:8d:9e:ae:0a:cb:f7:03:9d:
d5:16:42:16:cc:0f:25:98:a3:46:38:03:d2:3e:b9:c4:81:a8:
e3:2f:bc:38:a0:a3:da:a2:aa:fe:e9:1d:ec:eb:c4:12:d3:91:
98:40:52:ce:be:2c:79:a4:ae:41:21:d5:ed:ce:6b:97:c3:1d:
c5:aa:c0:56:07:94:ff:25:f1:b5:67:c5:88:54:2e:19:a9:83:
7d:23:33:f1:21:68:cc:c8:95:65:ea:5f:e8:18:46:90:9a:8f:
7f:59:65:39:78:c9:7c:2f:f9:23:f7:6e:ec:80:7c:dc:01:2d:
36:05:a6:35:c2:99:c0:df:58:fe:f4:ad:e3:83:dd:06:93:77:
9e:29:25:4c:99:35:aa:9a:cb:5b:58:85:06:97:fc:8b:2e:5e:
97:de:a2:6b:5d:de:cf:5b:2d:95:d4:a3:b1:96:dc:d7:82:6e:
04:01:b7:81:21:8e:08:cb:cf:e2:18:8e:3d:c1:4b:90:13:f4:
26:58:e1:11:17:a3:30:96:f7:d9:80:c4:21:25:0a:c1:38:6b:
80:5e:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:30 2026 by rpki-client