
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cef9d5e7-8ce8-30cc-8b0d-aabe07a4e3b9.roa
File: cef9d5e7-8ce8-30cc-8b0d-aabe07a4e3b9.roa (raw, json)
Hash identifier: Egv9ifbl3oDWPrsZdSYH+eplJiaJVXlH0Oqy5edjYJo=
Subject key identifier: 3B:CB:BE:5E:89:61:BA:F6:3D:47:43:C0:F2:C3:88:EE:98:67:2A:74
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584CEFF250168B21C5D8D891D740
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cef9d5e7-8ce8-30cc-8b0d-aabe07a4e3b9.roa
Signing time: Sat 21 Feb 2026 14:00:41 +0000
ROA not before: Sat 21 Feb 2026 14:00:41 +0000
ROA not after: Fri 22 May 2026 13:00:41 +0000
asID: 397230
IP address blocks: 198.133.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ef:f2:50:16:8b:21:c5:d8:d8:91:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 21 14:00:41 2026 GMT
Not After : May 22 13:00:41 2026 GMT
Subject: CN=69af820a-6b6b-4154-82a2-7a686d48e28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:14:64:44:93:f1:73:fd:44:52:76:41:1e:7f:
91:d8:ae:cf:13:9f:31:2c:b7:71:65:d9:ff:01:c7:
b2:6e:cf:66:ae:2e:bd:22:01:03:66:81:84:9c:35:
55:be:57:14:a5:19:80:5a:f4:b1:58:ab:cd:17:18:
88:d1:69:a2:f8:13:cf:57:90:0e:61:ae:34:19:97:
da:11:1d:09:67:83:74:e6:1e:53:a4:62:07:5a:95:
84:5e:f5:f9:f4:64:c8:ad:c0:c5:46:1f:bb:62:0a:
ca:13:d9:6b:48:03:22:02:56:89:d0:28:6e:48:e5:
fb:76:34:b9:d0:33:fc:d1:a0:de:6c:ae:5b:5a:19:
d8:62:e0:73:0f:c3:b7:56:6e:37:b8:87:60:58:1e:
8f:44:b0:03:80:53:03:91:a7:ba:e2:7d:21:06:c9:
00:b8:5a:ca:54:70:ca:ac:66:44:d0:65:d2:00:13:
f3:1c:47:cc:7b:37:33:c1:9d:04:e1:2d:e9:14:d9:
a1:90:37:26:0a:67:48:5e:ed:66:b1:2d:35:30:ed:
6c:97:c1:f5:e4:bb:7e:24:4e:15:98:f6:4c:79:f3:
86:ea:83:e7:7e:8b:f6:10:aa:08:da:5f:3e:6c:a4:
70:2f:8e:2d:b2:30:ce:66:95:ee:26:98:4d:44:22:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CB:BE:5E:89:61:BA:F6:3D:47:43:C0:F2:C3:88:EE:98:67:2A:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cef9d5e7-8ce8-30cc-8b0d-aabe07a4e3b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:94:67:08:c7:1a:99:34:b4:41:69:44:e8:cd:d7:9a:ef:b3:
1b:d6:d9:4d:ca:08:5f:f6:a0:2a:c3:db:9d:89:a5:a9:2c:7a:
bb:b6:af:bb:4c:31:31:6e:80:87:b6:3e:64:a2:e9:0a:2e:e0:
4b:89:68:39:c4:03:e1:83:5d:46:4d:0c:da:a6:de:c1:ea:6f:
6c:72:ad:e8:f9:80:a0:05:c5:2f:f7:6e:a5:6f:c9:3d:49:a9:
c0:bb:20:df:5f:4c:ba:81:99:ff:74:0a:16:6c:33:cd:cc:48:
ef:7d:da:9d:73:1f:54:f8:16:78:9c:98:41:e4:19:0b:01:92:
55:69:a2:20:0e:44:86:9f:54:4d:e3:03:41:9a:89:32:be:1d:
74:e0:4d:64:30:fc:6e:75:b6:84:58:6e:69:e0:f6:f1:5c:36:
f8:35:a1:19:d6:99:47:97:1e:5d:cb:b4:12:49:86:ac:56:15:
0b:55:17:79:61:27:83:cc:9f:5f:51:ae:af:e9:e6:f8:37:0f:
2b:75:7e:17:e6:47:a0:08:02:2b:f9:86:13:a9:ba:70:12:04:
ea:ad:91:5e:e9:a4:53:76:97:a3:10:79:c1:0e:cf:df:9d:ac:
3b:f2:25:56:4b:59:7b:ba:0a:45:dd:19:e4:89:a4:6d:a9:f6:
27:c4:a1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:01 2026 by rpki-client