
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa
File: ae2d7c57-9385-33b3-8fce-32b111842f86.roa (raw, json)
Hash identifier: GdrAf9tvwiSayPX1kRPxVNK8X9Fk5wmaENknwebfuC4=
Subject key identifier: CB:DD:DD:2D:D5:3B:0E:C0:94:E2:55:63:BF:64:C4:A4:8D:B7:87:BC
Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Certificate serial: 010D0C9F4328584CEE8CDE731A364A659DCC37C0
Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa
Signing time: Sat 21 Feb 2026 02:00:32 +0000
ROA not before: Sat 21 Feb 2026 02:00:32 +0000
ROA not after: Fri 22 May 2026 01:00:32 +0000
asID: 2386
IP address blocks: 170.2.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ee:8c:de:73:1a:36:4a:65:9d:cc:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Validity
Not Before: Feb 21 02:00:32 2026 GMT
Not After : May 22 01:00:32 2026 GMT
Subject: CN=9af14ad2-32f9-42d0-87d5-f9ed96a9d8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:7f:36:43:a9:c5:5a:35:23:03:77:4b:93:
93:aa:38:ff:8a:fb:b9:e8:10:5f:e1:88:5f:dd:08:
e9:66:5a:7a:ad:28:2f:d6:b4:58:ec:46:87:54:75:
35:19:13:fb:9a:b3:fa:2c:91:a3:d4:c4:f1:3f:a4:
d7:44:d6:f1:88:58:3b:ee:9b:ea:f2:2a:f1:2d:d4:
06:0b:c3:f5:60:30:b7:b6:48:77:af:be:2f:ba:7e:
0e:be:43:d8:48:09:e7:96:6e:85:e8:ee:d4:4e:28:
43:e2:fd:e7:f1:e6:0b:37:4b:9a:81:9d:01:50:de:
8e:c9:35:31:6d:e2:b3:06:80:8d:c6:e2:3c:fc:d2:
7f:a3:0e:65:56:a8:2e:0b:89:81:d7:1c:f2:83:dc:
dd:94:6a:eb:cd:70:21:92:8b:19:38:7d:08:f7:0f:
e3:a5:53:63:3a:53:56:51:23:02:93:71:3b:8d:7f:
ce:1e:21:99:1d:e8:e9:30:05:3a:e2:a7:d4:69:19:
6b:6c:c0:79:23:03:d9:1d:e2:f2:a1:c1:f4:79:31:
ff:49:36:37:62:b3:77:89:7a:41:41:e8:1f:d9:02:
ca:7d:87:ac:df:7c:b1:ed:22:a4:a8:9a:e0:7d:87:
f1:63:42:fb:ab:ad:8b:5d:27:df:67:0f:9a:0b:b0:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:DD:2D:D5:3B:0E:C0:94:E2:55:63:BF:64:C4:A4:8D:B7:87:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
X509v3 Authority Key Identifier:
keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
sbgp-ipAddrBlock: critical
IPv4:
170.2.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:92:b4:92:bf:44:03:cb:1f:a0:62:81:91:b9:32:cb:9d:78:
e3:3e:f0:79:58:c2:99:a7:6b:31:26:87:21:1e:f5:70:74:ba:
8b:ad:a6:37:f4:d9:b4:53:2f:33:09:71:44:df:17:f2:96:94:
9a:cb:95:21:1c:69:e4:fb:9b:df:c2:a4:b2:cb:4b:6f:e2:e4:
1b:8a:11:fb:25:29:15:a1:c5:74:ab:58:4c:24:db:e2:3a:ee:
44:09:c4:65:ea:7d:35:41:c6:96:85:c4:75:c7:91:1f:b2:4c:
39:16:af:57:a1:42:5f:61:3a:e3:d4:72:43:e3:ea:c3:d3:29:
39:3e:09:23:ab:dd:f9:32:94:7d:5e:2f:43:83:a7:48:12:b1:
48:ef:06:4f:c1:f7:b6:89:4d:6c:e8:70:eb:f4:ac:6f:c1:b1:
e3:45:30:5d:e6:7f:62:87:b2:76:35:37:6d:7c:14:72:33:2e:
00:e6:b2:9f:f4:f6:6d:ae:3d:96:0d:d8:08:d4:a0:96:cd:5c:
b7:25:a4:5b:d9:fd:95:a9:68:fd:09:60:94:52:9d:73:cb:ad:
16:05:86:5e:cd:00:4b:0e:c1:97:bb:44:07:50:08:a5:47:f4:
91:2e:2a:7d:3b:03:39:c3:9f:9c:11:69:e8:78:c0:48:f2:f8:
50:49:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:40 2026 by rpki-client