
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa
File: bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa (raw, json)
Hash identifier: A/IyjIDkgJYHjd03t5hyTA2G0anGzaLlTDp3mkPCU0Q=
Subject key identifier: 76:1E:3F:37:A4:90:0C:8D:5F:2E:90:67:26:5F:06:4C:CA:DE:D9:CE
Certificate issuer: /CN=0638a41c-1a08-44d2-a17c-c5272b5171a2
Certificate serial: 010D0C9F4328584CC429A9E7E4694993739A8200
Authority key identifier: C1:F7:3F:D2:75:CC:DF:E9:FF:07:1B:07:E0:8B:EC:06:6F:28:D2:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa
Signing time: Thu 05 Feb 2026 21:37:01 +0000
ROA not before: Thu 05 Feb 2026 21:37:01 +0000
ROA not after: Wed 06 May 2026 20:37:01 +0000
asID: 399033
IP address blocks: 98.158.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c4:29:a9:e7:e4:69:49:93:73:9a:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0638a41c-1a08-44d2-a17c-c5272b5171a2
Validity
Not Before: Feb 5 21:37:01 2026 GMT
Not After : May 6 20:37:01 2026 GMT
Subject: CN=381371ba-6c47-4226-95d9-ad564cebfd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:93:0e:3f:d1:2f:b5:3b:2f:78:2e:c2:09:
a3:ed:9f:dc:e9:2e:c2:af:46:6e:61:b5:67:66:a0:
5e:4e:df:62:ed:8a:06:45:eb:6c:85:24:1c:be:44:
ae:88:d5:1c:ae:82:4e:46:e4:3f:8e:41:11:c9:1e:
f8:c9:74:b2:2a:18:91:af:a3:0a:73:29:61:4e:92:
db:92:45:78:50:f4:cc:61:7b:f9:c9:ba:4d:37:c1:
a5:ac:bc:c9:d6:6a:08:7f:6a:d2:69:d5:89:77:59:
aa:49:a7:80:ad:46:66:0f:4f:54:22:b0:45:a0:24:
70:3f:68:ed:29:7f:57:86:8e:1a:28:c6:f4:78:81:
19:7f:2c:ef:78:7d:10:a4:44:ac:38:f8:27:b6:7b:
f6:0d:5a:09:48:c6:03:ec:79:66:a5:c7:de:eb:f3:
e3:ab:d4:f6:22:f5:7c:bd:08:de:6c:8c:a1:01:d9:
78:c7:00:45:ab:be:ab:5c:3b:5d:da:70:f2:80:00:
fb:61:2d:dc:2c:33:a8:d5:4f:38:5e:43:8d:f1:ab:
71:28:31:8c:a4:7c:b8:0a:48:f7:f0:82:93:a9:c5:
1d:c8:e7:12:b5:e4:75:12:b2:bd:15:aa:06:41:5d:
aa:a9:cb:5e:1e:e5:1a:87:f2:01:47:66:62:42:3d:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1E:3F:37:A4:90:0C:8D:5F:2E:90:67:26:5F:06:4C:CA:DE:D9:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.crl
X509v3 Authority Key Identifier:
keyid:C1:F7:3F:D2:75:CC:DF:E9:FF:07:1B:07:E0:8B:EC:06:6F:28:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.158.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:d7:6f:2a:17:1d:80:a3:f8:79:1d:3a:ef:ed:fb:66:39:eb:
3d:1b:6b:64:1b:3e:db:1c:df:ff:cd:30:87:1c:42:9c:5e:a2:
5f:f6:c6:a9:e3:49:97:15:ed:a4:62:e1:70:60:47:40:49:fc:
7b:74:96:ca:f4:88:40:90:da:ef:ff:03:e1:a0:de:85:99:ba:
99:2c:4e:43:61:6c:12:f9:a5:cd:7b:ad:58:69:9e:93:66:7c:
0e:46:51:74:b6:70:dc:25:f6:e8:5a:3d:ec:1c:50:d4:78:58:
c1:27:e9:8c:77:3f:f4:ba:ae:e5:19:02:c4:cb:7a:a0:77:38:
79:b0:ca:ca:47:b0:d6:02:eb:89:bd:ac:c7:43:9f:15:5f:03:
57:ec:d1:48:99:39:d4:93:e0:07:90:bc:79:52:76:42:47:7f:
1a:53:9c:4a:a4:84:fc:e6:ce:a7:3a:5a:53:99:9d:ec:cf:08:
22:92:f5:7b:b5:cd:17:78:50:ff:60:d1:16:8b:9a:2a:cc:57:
8c:75:0d:f0:8d:bc:0b:a4:23:89:e4:b1:2b:5b:75:1a:d8:a6:
4f:56:6e:3a:6d:77:7e:5d:9e:99:e8:12:81:d8:17:0f:38:3f:
a7:80:c3:dd:09:f7:5b:08:c7:c7:1b:73:58:ab:2c:a0:19:8c:
f8:7f:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:17 2026 by rpki-client