
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa
File: f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa (raw, json)
Hash identifier: E+BiC7ay+PXUCaKwUjfnvAGX+9sP+DJ0yTv/d/4xd2o=
Subject key identifier: BD:2B:14:A8:48:CA:AB:83:4B:B2:B5:34:CF:3D:3E:EB:1C:AE:FB:62
Certificate issuer: /CN=9179e4ff-328d-4753-b8f9-9149f799cfec
Certificate serial: 010D0C9F4328584CD6D20C4556B3B0B6E197FF00
Authority key identifier: 65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa
Signing time: Thu 12 Feb 2026 14:00:40 +0000
ROA not before: Thu 12 Feb 2026 14:00:40 +0000
ROA not after: Wed 13 May 2026 13:00:40 +0000
asID: 400298
IP address blocks: 172.99.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d6:d2:0c:45:56:b3:b0:b6:e1:97:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9179e4ff-328d-4753-b8f9-9149f799cfec
Validity
Not Before: Feb 12 14:00:40 2026 GMT
Not After : May 13 13:00:40 2026 GMT
Subject: CN=85672ddf-2dac-4438-b894-f53f57a628a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:7a:44:f2:bc:3e:22:0a:50:be:9b:65:fe:
93:66:f7:1a:18:89:c1:29:1a:7f:6a:bb:1d:0a:13:
3a:ff:a8:84:e3:ca:e3:62:fe:66:86:44:b3:e9:e7:
b9:66:90:51:3b:7e:ac:d6:c8:ef:24:28:b1:cc:66:
97:46:43:40:08:61:ef:1b:07:78:1a:21:fe:20:4f:
ff:49:09:77:cb:b0:67:04:13:70:47:55:97:58:68:
2b:ab:db:21:34:62:df:59:b6:94:cc:e3:1a:ba:de:
ad:6d:b1:8d:ef:17:bf:33:86:bb:5b:e4:b5:3d:ef:
a0:40:58:cd:3f:1d:11:47:a4:79:4d:d2:bf:55:99:
9e:c6:a6:90:6d:65:11:12:06:8b:c1:54:b6:31:d7:
d4:61:23:d5:51:71:3d:7e:62:14:70:d4:50:cd:37:
3b:8b:ce:20:52:6b:27:63:46:95:ad:58:3f:e5:4b:
90:d7:22:22:4b:5b:f1:cd:66:18:f0:4e:11:bb:6e:
9a:43:24:62:f6:95:85:b2:f9:62:27:d0:2d:08:ae:
8c:e3:04:e3:b1:43:5a:7c:9a:78:ef:e4:bf:ad:20:
4d:f6:be:ae:35:c9:80:a9:b4:02:7a:ab:ad:eb:08:
ad:d6:dc:e6:d1:90:05:c1:b0:98:e1:1b:64:1b:b3:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2B:14:A8:48:CA:AB:83:4B:B2:B5:34:CF:3D:3E:EB:1C:AE:FB:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl
X509v3 Authority Key Identifier:
keyid:65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer
sbgp-ipAddrBlock: critical
IPv4:
172.99.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:2a:af:89:2a:14:1e:6f:9d:63:d8:d5:79:46:71:56:18:30:
0d:2d:0a:e8:31:79:ac:ac:a5:ac:d7:18:33:7c:43:7c:af:2e:
b7:50:8f:95:9d:f4:bf:0b:d1:1f:e5:62:62:9a:97:80:ed:f5:
26:dd:21:63:52:da:20:85:c9:82:6d:1b:a1:08:15:23:a5:4a:
88:bf:d7:6f:6e:e2:6e:89:16:b1:e1:41:38:da:1d:d1:54:42:
5a:fe:df:54:d3:f0:09:6b:ae:f9:76:a5:93:e7:c9:1b:ba:27:
96:c8:6f:71:25:5b:c0:7f:17:9f:99:4b:11:3c:6c:fa:a4:94:
42:05:e9:52:ef:a9:46:0e:23:b6:eb:76:84:2f:0f:66:6e:5c:
82:6a:a6:59:a1:e7:7d:08:f6:aa:78:d2:e9:be:c2:bf:d6:de:
48:b3:32:26:5c:0d:57:1a:f7:ff:1d:15:87:0b:a5:90:6a:4f:
8a:4a:60:b1:4e:76:2f:f6:dc:28:d2:42:c6:86:16:d5:eb:fe:
3e:00:e5:fe:83:53:d6:f4:2e:a7:ad:0e:a5:7b:23:c6:52:0a:
32:1b:85:43:e3:cd:41:ec:91:bc:d4:61:8d:8f:fe:7e:6a:0e:
18:86:66:d5:c6:66:31:31:d4:d1:3f:07:67:2e:f4:b4:90:39:
8f:0e:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:15 2026 by rpki-client