
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa
File: 4a3e3800-5ec5-3b00-932f-a0909a00190a.roa (raw, json)
Hash identifier: lTmuu7UPoAqO8697WzinLrsV5Cq8gEsr6a2HcC1W9XQ=
Subject key identifier: 68:8D:6A:A2:74:47:9D:35:EE:AC:27:90:11:65:9A:1C:A4:55:92:12
Certificate issuer: /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial: 010D0C9F4328584CF1577E8668768248849D6840
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa
Signing time: Sun 22 Feb 2026 02:00:32 +0000
ROA not before: Sun 22 Feb 2026 02:00:32 +0000
ROA not after: Sat 23 May 2026 01:00:32 +0000
asID: 396982
IP address blocks: 161.223.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f1:57:7e:86:68:76:82:48:84:9d:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Validity
Not Before: Feb 22 02:00:32 2026 GMT
Not After : May 23 01:00:32 2026 GMT
Subject: CN=3f98d902-b614-4ed6-a280-a09da45a523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:4d:2b:d7:aa:a4:25:b1:cf:b1:46:14:c0:
0f:88:17:1a:41:9e:7a:70:f9:2f:d1:db:c6:d1:ce:
6b:41:d6:b4:47:c3:42:94:d0:0f:6f:b4:a8:fc:1e:
f0:fa:03:1b:e4:6e:b7:48:22:0d:b6:5f:53:7d:4a:
4d:45:cc:1f:e9:7a:8d:6c:54:0b:51:6e:40:54:00:
06:77:be:85:d7:ff:59:a1:47:4a:9a:df:65:9e:db:
b4:f6:b0:ae:3c:d6:64:30:03:93:d7:51:70:6d:cf:
3f:5c:9a:b3:47:d0:f6:0b:4a:e9:04:ef:d6:d4:ea:
c3:87:54:47:44:62:30:7b:71:7e:b7:1b:89:70:e0:
0e:8d:e7:02:1a:ce:ff:2f:b0:3a:4a:ae:6e:af:e2:
ec:f9:07:44:eb:27:da:d6:ad:12:63:14:15:8c:5a:
f4:d1:af:e8:4a:d5:8c:3a:24:3f:07:4d:59:da:cb:
cf:7a:4f:79:10:92:8c:bc:a5:aa:d7:a0:5e:c0:a9:
a6:f5:fa:bd:fa:92:8e:08:42:87:d5:09:13:c5:7b:
6d:76:1d:dd:4f:04:8c:b6:b3:ab:5b:25:e7:19:f3:
a0:0d:c9:3b:9f:69:4f:ae:41:ba:c8:10:66:b4:fe:
31:2f:c7:6d:e0:20:1a:d3:d9:23:53:32:3c:58:64:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8D:6A:A2:74:47:9D:35:EE:AC:27:90:11:65:9A:1C:A4:55:92:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
X509v3 Authority Key Identifier:
keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
sbgp-ipAddrBlock: critical
IPv4:
161.223.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:59:3f:e9:7e:d1:5a:90:98:07:ca:30:1b:cd:ff:cd:9a:0c:
27:6d:31:ac:b7:d0:87:19:b0:3f:d4:f5:4a:cf:59:7b:08:7b:
92:2a:f7:a8:81:c7:1e:ed:9c:dd:eb:d0:b7:b3:de:83:8a:74:
ff:df:6a:d8:48:b9:b5:4a:46:8f:c0:29:c0:31:36:3d:1b:b8:
22:8b:9f:9c:bc:b3:02:5e:47:78:e5:99:1a:e5:85:af:4c:51:
73:83:bf:49:d8:f8:95:50:df:75:30:52:98:72:49:6f:13:e8:
eb:e9:ec:d4:e0:e3:f8:4f:6e:8d:2e:2c:a9:85:50:19:9e:96:
1f:cc:8a:33:6d:f4:1b:ca:8f:cf:b3:59:8d:1a:5a:bc:19:2f:
1b:ba:b7:6f:a4:e0:e4:33:67:e7:40:75:a3:99:dd:28:1f:0a:
99:30:fc:2b:88:20:5c:bd:a4:d9:52:6a:e3:c0:40:35:bd:01:
a1:1e:9e:a0:f4:ab:89:15:93:75:09:ab:67:92:ea:37:3b:9c:
4a:6f:6e:64:c9:6f:87:6d:ff:49:68:d4:6f:68:da:20:1b:07:
5b:35:b8:0e:0f:8f:a5:50:ec:af:6a:34:96:32:eb:42:77:df:
d4:4a:ba:d1:8c:e3:5a:d8:a4:6d:f7:08:92:a1:fe:f1:bd:cf:
56:80:5b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:29 2026 by rpki-client