
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa
File: 31f66624-a6b9-3acd-938b-89b2386f5b28.roa (raw, json)
Hash identifier: /UkNDUIcFQ99jvy4BhKbqLnsaH3KnOKSbB3nqyJVBGQ=
Subject key identifier: 08:C4:2E:CB:46:EC:48:9F:FE:84:64:7D:96:9D:B2:B1:CB:45:B0:6B
Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial: 010D0C9F4328584CDB0214398945E15BB74D5680
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 40788
IP address blocks: 108.168.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:14:39:89:45:e1:5b:b7:4d:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=d6b5cca7-a023-44e4-9d11-79ad50f98419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:95:2a:33:a4:d9:39:b3:e9:23:47:75:c4:
73:39:f1:8c:db:4f:93:4d:58:94:0d:0e:1f:d9:f0:
74:60:b3:1f:4f:7c:20:33:9e:7a:5f:83:5f:9f:39:
ac:a5:94:36:0c:8c:36:ed:d3:d1:b8:6e:ba:2b:c5:
03:87:c9:5c:e4:2c:f7:51:91:83:33:4c:b5:60:f0:
16:a7:d8:0d:83:8d:5f:9a:7e:a1:47:81:fd:7c:cd:
03:9a:1c:44:14:41:a7:8b:f8:8b:69:45:cd:0d:c9:
38:89:73:01:3d:58:51:a5:b2:93:a6:3e:dd:db:34:
3b:21:3a:4c:85:a5:40:61:db:0e:a9:4f:32:8a:70:
e5:b2:7e:dc:b0:95:6e:70:03:af:46:cd:2d:47:1a:
94:cb:ce:67:b1:db:18:98:d3:12:96:cc:ed:ad:83:
75:fd:e9:f8:d6:9c:86:a9:e0:3a:79:d4:bc:3e:ae:
0d:98:a3:7c:93:0a:25:9b:83:1e:8e:87:26:de:a7:
2f:5f:24:62:34:61:f4:a0:97:d1:91:b5:8f:16:78:
e0:da:4b:16:bc:30:db:69:2a:ed:9a:85:5c:c8:14:
2f:26:a9:d4:83:91:3b:97:b5:2f:33:4c:6b:0a:b2:
14:fa:5c:3a:6f:b5:20:82:2f:32:9c:c0:56:15:b1:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C4:2E:CB:46:EC:48:9F:FE:84:64:7D:96:9D:B2:B1:CB:45:B0:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
X509v3 Authority Key Identifier:
keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
sbgp-ipAddrBlock: critical
IPv4:
108.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:4f:17:35:29:5d:78:91:af:b8:fe:b1:7f:e7:5a:7e:39:6b:
8e:ca:25:57:9e:ea:13:a4:5c:5e:0a:f3:8e:d1:64:af:3f:c8:
84:d5:02:d1:1e:3e:6a:98:e6:17:a4:b7:90:77:75:ec:f4:2f:
46:dd:47:42:d2:24:67:8e:fb:5d:87:59:70:f5:c4:1c:13:bf:
9a:b1:81:db:f7:1e:84:64:16:4e:7f:64:98:67:c5:a2:e8:10:
0a:5e:94:02:c4:cb:e4:1d:5a:93:0b:90:49:11:b5:f8:75:a8:
ba:5b:40:b2:72:72:0c:51:ea:9c:87:0e:a9:ca:f0:ab:f6:96:
e6:fb:e0:0b:9a:c1:21:d1:e8:95:4c:43:f4:60:05:67:38:f3:
c8:ac:d9:55:fb:cb:e6:47:01:3d:e1:23:40:11:56:88:f3:73:
27:77:c3:9a:ce:82:7f:20:78:28:ff:e4:b9:93:b4:b9:62:95:
fc:8a:de:61:39:78:97:a8:b0:e5:05:eb:4c:ea:1e:51:8f:cf:
8c:4f:45:61:58:4b:30:27:e2:86:0a:78:e7:f4:57:ab:ec:97:
04:e7:79:ef:cc:05:3d:1a:69:2c:33:62:ef:cd:22:3e:a9:be:
3c:3c:17:2d:a4:91:15:3d:43:b2:cd:40:e4:5a:97:84:a4:01:
98:6a:97:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:40 2026 by rpki-client