
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4af0f0a7-0d7c-327e-9c77-fce572b9ca89.roa
File: 4af0f0a7-0d7c-327e-9c77-fce572b9ca89.roa (raw, json)
Hash identifier: jpIAXB/dRKd+D8+MVRBJcQ0KQu8HtccOwLQbqtecMAc=
Subject key identifier: 43:75:61:71:51:21:71:27:B8:CF:5D:D8:4D:9B:34:F3:F4:4D:02:A7
Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial: 010D0C9F4328584CC1E1C4F410A2BFB491FA5980
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4af0f0a7-0d7c-327e-9c77-fce572b9ca89.roa
Signing time: Thu 05 Feb 2026 02:00:31 +0000
ROA not before: Thu 05 Feb 2026 02:00:31 +0000
ROA not after: Wed 06 May 2026 01:00:31 +0000
asID: 834
IP address blocks: 198.1.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c1:e1:c4:f4:10:a2:bf:b4:91:fa:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Validity
Not Before: Feb 5 02:00:31 2026 GMT
Not After : May 6 01:00:31 2026 GMT
Subject: CN=75633cda-44fc-4a56-8c29-f5e655ed348f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:5a:53:57:ff:0c:da:58:32:ae:ae:cd:37:
f6:8c:6a:d9:46:ba:f9:db:a3:18:12:a6:65:dc:70:
5a:d2:01:ca:0e:af:ed:05:1b:48:57:99:29:a4:1b:
48:7d:47:2a:c7:b9:27:a7:47:f6:66:d5:4f:54:9a:
78:1c:8f:87:5f:10:81:ad:e9:aa:a8:54:08:31:c6:
d6:fa:2f:f6:5e:a6:3e:52:ad:4d:fb:d6:49:da:66:
4c:5f:a1:38:5e:d5:f9:a3:74:e0:13:a4:d5:5c:18:
5b:c2:a1:cb:aa:fb:21:5e:1a:70:7e:2d:bf:40:ae:
5c:37:44:1f:7e:13:4b:d8:b4:13:66:ae:a5:f1:16:
ab:9b:8f:32:bf:dc:9e:38:63:cf:4e:9d:2f:a0:3a:
fc:5b:80:fe:e3:4f:d6:ab:81:52:28:41:25:44:9f:
4b:08:c4:2c:22:87:b5:bd:2d:3d:19:5a:72:45:88:
5c:7a:a7:8c:5a:5b:36:99:5b:a9:f2:95:ec:c0:8b:
56:4d:ff:e0:42:cd:b0:99:22:fd:ec:21:37:ec:e6:
bc:2d:de:1c:ce:f9:af:09:86:ae:56:4b:5b:b5:f7:
a9:4d:e6:55:42:9d:68:58:45:8f:bf:80:fb:84:09:
6a:98:a5:85:f2:19:a8:86:c5:b0:79:1f:98:41:2e:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:75:61:71:51:21:71:27:B8:CF:5D:D8:4D:9B:34:F3:F4:4D:02:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4af0f0a7-0d7c-327e-9c77-fce572b9ca89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
X509v3 Authority Key Identifier:
keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.1.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:06:88:e4:43:f4:fb:c0:4a:1e:c1:fa:51:c7:d3:d4:24:14:
c7:15:0c:b1:e2:e7:4a:d6:99:7b:3d:c3:99:de:03:c9:19:80:
d6:d4:d8:e9:3a:b4:d9:d4:8c:e5:aa:62:be:35:11:d1:16:d3:
85:5f:77:fa:89:5d:d6:a8:c9:d6:6d:94:68:92:27:8e:52:f0:
ba:73:ba:3b:19:3a:90:34:d2:de:53:54:f9:e1:79:c6:87:b9:
33:83:fb:9c:57:a9:c8:26:cb:77:1a:6e:17:c3:65:c0:df:5d:
7a:8d:14:17:8c:78:87:20:84:ea:53:28:6d:a0:85:c5:2d:24:
5e:0b:f0:48:5e:0b:9b:92:c4:66:71:9f:4a:8a:95:e9:1a:19:
61:b6:6c:f0:18:64:27:5f:c3:a4:d3:73:c0:90:d1:9e:76:d3:
37:07:60:21:a8:9f:85:53:2d:18:2b:23:cf:b2:88:2a:25:7f:
7d:33:94:68:fb:52:8e:a0:08:c2:e5:46:bf:19:b2:a8:77:ae:
99:6c:4f:46:90:ce:f2:d1:eb:2b:60:26:f9:b5:bd:34:56:d1:
7e:3a:32:ec:3e:db:9a:25:80:a2:ae:02:ea:d4:62:6f:22:3d:
8d:cb:f3:ab:42:26:2b:8e:57:d2:b1:b2:ed:ba:d7:5a:13:22:
04:61:5b:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzB4cT0EKK/tJH6WYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDIwNTAyMDAzMVoXDTI2MDUwNjAxMDAzMVowLzEtMCsGA1UEAxMk
NzU2MzNjZGEtNDRmYy00YTU2LThjMjktZjVlNjU1ZWQzNDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJtaU1f/DNpYMq6uzTf2jGrZRrr526MYEqZl
3HBa0gHKDq/tBRtIV5kppBtIfUcqx7knp0f2ZtVPVJp4HI+HXxCBremqqFQIMcbW
+i/2XqY+Uq1N+9ZJ2mZMX6E4XtX5o3TgE6TVXBhbwqHLqvshXhpwfi2/QK5cN0Qf
fhNL2LQTZq6l8Rarm48yv9yeOGPPTp0voDr8W4D+40/Wq4FSKEElRJ9LCMQsIoe1
vS09GVpyRYhceqeMWls2mVup8pXswItWTf/gQs2wmSL97CE37Oa8Ld4czvmvCYau
VktbtfepTeZVQp1oWEWPv4D7hAlqmKWF8hmohsWweR+YQS6VWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEN1YXFRIXEnuM9d2E2bNPP0TQKnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNGFmMGYwYTctMGQ3Yy0z
MjdlLTljNzctZmNlNTcyYjljYTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgH1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAGiORD9PvASh7B+lHH09QkFMcVDLHi50rWmXs9w5neA8kZgNbU2Ok6
tNnUjOWqYr41EdEW04Vfd/qJXdaoydZtlGiSJ45S8LpzujsZOpA00t5TVPnhecaH
uTOD+5xXqcgmy3cabhfDZcDfXXqNFBeMeIcghOpTKG2ghcUtJF4L8EheC5uSxGZx
n0qKlekaGWG2bPAYZCdfw6TTc8CQ0Z520zcHYCGon4VTLRgrI8+yiColf30zlGj7
Uo6gCMLlRr8Zsqh3rplsT0aQzvLR6ytgJvm1vTRW0X46Muw+25olgKKuAurUYm8i
PY3L86tCJiuOV9Kxsu2611oTIgRhW/k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:10 2026 by rpki-client