
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/0395e48a-e337-3165-b134-5c62b28818bd.roa
File: 0395e48a-e337-3165-b134-5c62b28818bd.roa (raw, json)
Hash identifier: vD2RnvmKVXI37UfK++gHOZLrLJzdOg6UYRY8g4sRThI=
Subject key identifier: 61:45:DF:C4:32:9F:23:27:35:C3:96:09:AC:38:29:15:F4:C1:47:3A
Certificate issuer: /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial: 010D0C9F4328584CF1577C93AF98F7B35D0CD8C0
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/0395e48a-e337-3165-b134-5c62b28818bd.roa
Signing time: Sun 22 Feb 2026 02:00:32 +0000
ROA not before: Sun 22 Feb 2026 02:00:32 +0000
ROA not after: Sat 23 May 2026 01:00:32 +0000
asID: 14618
IP address blocks: 161.223.187.0/24 maxlen: 24
161.223.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f1:57:7c:93:af:98:f7:b3:5d:0c:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Validity
Not Before: Feb 22 02:00:32 2026 GMT
Not After : May 23 01:00:32 2026 GMT
Subject: CN=9c1fd8b6-8fe2-4540-8a79-a4c374f9145c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:a7:19:43:d7:82:ea:93:38:2b:cb:58:90:
15:11:c2:46:1b:43:b2:3d:a2:62:e2:57:82:df:6a:
cf:ca:18:69:7c:cd:7b:6f:fe:30:01:04:bf:80:95:
e4:ed:e0:ad:38:bd:03:84:af:3e:1b:19:a1:13:ee:
a0:81:fa:54:39:01:a8:3e:f2:38:d8:2e:b3:38:a3:
39:c0:e5:6f:e5:d8:ef:03:02:cf:9d:c8:c7:ca:52:
0f:7a:49:44:aa:cf:2a:6f:97:93:1c:6d:63:bc:8e:
f3:01:dc:b2:c8:2c:b5:f8:cc:0b:a8:a2:31:13:92:
ee:6f:50:9d:d6:8d:11:60:6c:6b:df:eb:63:49:7c:
8a:e0:90:b3:0b:6a:64:cb:3c:d0:57:e0:55:bf:65:
74:a9:03:7b:e5:e5:3b:e6:f5:64:e6:c9:a6:bd:a4:
56:59:c1:01:0b:65:44:38:44:e1:d4:f9:66:a3:d1:
4a:4f:9b:9c:2d:40:c9:1d:e3:2c:66:d8:fc:34:eb:
e1:0d:c2:0c:cc:06:df:45:30:09:6c:2e:ff:17:d8:
f0:f6:16:4f:74:ab:d2:1a:9f:d2:d2:a4:c3:3b:f2:
af:5c:18:0b:e9:5b:c4:7e:81:47:a6:8e:79:70:fe:
26:41:80:63:fe:fe:14:90:c6:8f:7d:f6:57:f0:c1:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:45:DF:C4:32:9F:23:27:35:C3:96:09:AC:38:29:15:F4:C1:47:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/0395e48a-e337-3165-b134-5c62b28818bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
X509v3 Authority Key Identifier:
keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
sbgp-ipAddrBlock: critical
IPv4:
161.223.187.0-161.223.188.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:58:e6:05:6c:89:fa:7f:ed:6e:2a:d3:11:e3:c8:be:74:1e:
d0:09:39:a4:9c:b9:b4:3e:6d:1f:05:e9:b4:e9:80:57:e5:00:
12:4a:53:56:21:58:68:55:72:5a:e0:43:ed:26:5a:7d:7c:a7:
02:b0:fb:eb:1a:c7:f3:39:0d:cf:16:45:7c:43:e3:70:40:b2:
25:6b:05:58:84:dd:a8:a4:fb:da:65:a2:22:7f:cc:61:8c:8c:
66:7e:00:c1:90:70:d9:6b:ae:e2:f1:de:74:d9:82:d4:c7:90:
c7:22:27:44:56:57:a9:1c:17:eb:27:67:bd:56:c7:7f:dc:b4:
f8:da:9b:61:55:96:8b:27:86:b7:28:41:9d:6a:a4:39:f3:53:
52:64:d3:f5:af:6a:e2:b4:04:8d:f5:1c:b4:54:cf:ee:46:dc:
b6:0b:1f:af:5d:95:83:bc:f6:ee:72:a3:d8:4a:d0:dc:f9:b3:
92:79:c8:96:fd:3a:12:46:ec:4c:e7:da:43:68:28:41:d8:7b:
9e:c2:42:fc:ee:42:83:b8:46:95:76:74:31:19:66:48:0a:d9:
a3:22:62:31:8a:5f:e1:ad:6e:99:23:2f:9f:f8:24:85:bf:de:
23:8f:79:48:f9:92:33:9e:ea:8c:f2:02:eb:58:3a:21:7b:af:
3a:de:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:16 2026 by rpki-client