
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
File: aefaffa5-f3e0-3cff-b520-95718774c4ca.roa (raw, json)
Hash identifier: 3FyoR9DD7mILRhu7VPJ4f7LHOFiVqaCqMxejfKqG+Co=
Subject key identifier: 6D:26:DD:08:BE:15:F0:6E:BB:34:B3:A6:BA:5D:21:66:C5:1E:E6:C3
Certificate issuer: /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial: 010D0C9F4328584CD4076634F7E0C78CB5F4F480
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 397745
IP address blocks: 167.100.16.0/22 maxlen: 22
216.47.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:66:34:f7:e0:c7:8c:b5:f4:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=e8146bca-2f66-4333-b9e4-7c40aa5dce6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:5d:b4:7f:a6:ae:e8:fc:75:a9:97:40:7b:
d1:a9:13:66:57:04:74:03:de:f2:2e:97:dd:6d:00:
c0:ea:46:f7:ed:82:d4:87:e4:23:a7:b2:d4:2b:fe:
d1:78:32:fb:2e:71:81:0d:02:1d:d1:c1:13:77:7c:
3c:c4:6f:06:c0:89:6e:03:05:39:d9:9b:62:33:ac:
47:6d:60:c0:1c:84:2b:e3:c1:9b:a2:7f:c4:03:ad:
c9:cd:53:ca:ba:3d:d0:0e:4f:5d:19:af:87:9d:18:
88:54:36:9d:c3:ff:ed:5c:db:6e:92:71:33:e6:38:
76:8d:f3:97:53:10:c6:19:2d:9a:b9:9b:0f:b8:91:
cd:21:eb:bc:f1:e2:c8:d9:05:cc:45:0a:e9:af:f9:
c4:e6:e9:bb:48:d2:16:d4:95:ff:be:a7:86:5d:df:
42:bd:49:81:bd:d3:1a:ee:b4:12:e6:94:8c:06:e9:
b9:d5:43:a7:49:61:0e:29:74:59:ed:ab:8c:39:b2:
a3:73:38:9b:64:4f:f9:0b:c9:7b:2f:83:8d:37:4f:
49:59:73:6c:14:41:ef:df:d0:64:d8:62:aa:bb:1f:
46:61:2f:f1:5c:7c:c5:8b:0a:ec:c8:5e:10:e0:7f:
ba:1a:f5:c7:85:2f:da:a6:bd:50:ac:91:66:d5:0c:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:26:DD:08:BE:15:F0:6E:BB:34:B3:A6:BA:5D:21:66:C5:1E:E6:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
X509v3 Authority Key Identifier:
keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.100.16.0/22
216.47.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:2f:8a:c5:de:2a:bc:cc:ca:cb:ac:ca:b6:88:b8:42:8c:8f:
50:eb:37:3d:51:7e:7d:58:82:dc:58:a6:c3:6d:de:c5:6e:16:
c6:25:73:d7:e7:7d:45:6f:e4:f7:f2:f4:34:7b:e8:19:c8:c1:
44:13:fc:bc:63:0a:36:5b:ad:b2:6b:26:ef:3f:e3:dc:49:48:
5a:bf:97:3a:fe:04:15:11:36:40:0b:70:93:b7:b6:93:29:b0:
b4:45:ff:67:cf:5b:60:9c:b5:30:d0:e5:f4:18:58:79:1e:6a:
f5:2d:e6:93:b8:d3:23:a0:4f:ba:85:f7:14:a1:fa:50:a5:d3:
18:6c:65:06:04:8b:4d:51:30:f2:a3:3c:a7:38:f1:33:d3:1c:
2c:6d:93:a8:46:a4:c8:5c:fb:bd:1e:02:ed:8b:12:79:f0:e8:
37:87:2e:52:d8:be:77:52:82:9e:82:33:64:73:b6:26:3b:62:
42:50:10:38:63:9e:38:a7:9b:07:1a:6e:87:eb:f3:eb:a4:5d:
72:ba:2c:fe:28:9b:f0:73:47:08:da:39:1d:29:3d:93:f9:7d:
8e:a4:ac:2c:cd:66:94:96:2b:25:28:b9:53:03:96:2c:12:5c:
2e:61:a4:7f:b3:37:98:c2:ac:82:78:14:be:c1:27:b9:85:1c:
8c:d4:5a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:28 2026 by rpki-client