
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c450799-d9d5-41eb-ad25-2768dab6c120/02488d3f-8e4d-3908-8044-7566cd01e03d.roa
File: 02488d3f-8e4d-3908-8044-7566cd01e03d.roa (raw, json)
Hash identifier: Dxb3s3uc2guPv3+lGEy4Qrw9yr57mNHLPjNND9ZZw28=
Subject key identifier: F3:33:4D:A8:55:D3:10:C0:75:EE:1A:D5:09:7C:12:E3:7E:C8:9F:75
Certificate issuer: /CN=2c450799-d9d5-41eb-ad25-2768dab6c120
Certificate serial: 010D0C9F4328584CF6FB9F7DA82BF910976B1B00
Authority key identifier: F1:92:68:C1:5D:FA:D4:6D:72:9E:78:FA:3E:DC:BD:6D:15:8F:22:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c450799-d9d5-41eb-ad25-2768dab6c120.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c450799-d9d5-41eb-ad25-2768dab6c120/02488d3f-8e4d-3908-8044-7566cd01e03d.roa
Signing time: Tue 24 Feb 2026 02:30:29 +0000
ROA not before: Tue 24 Feb 2026 02:30:29 +0000
ROA not after: Mon 25 May 2026 01:30:29 +0000
asID: 398837
IP address blocks: 199.248.6.0/23 maxlen: 24
2602:811::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c450799-d9d5-41eb-ad25-2768dab6c120/2c450799-d9d5-41eb-ad25-2768dab6c120.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c450799-d9d5-41eb-ad25-2768dab6c120/2c450799-d9d5-41eb-ad25-2768dab6c120.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c450799-d9d5-41eb-ad25-2768dab6c120.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f6:fb:9f:7d:a8:2b:f9:10:97:6b:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c450799-d9d5-41eb-ad25-2768dab6c120
Validity
Not Before: Feb 24 02:30:29 2026 GMT
Not After : May 25 01:30:29 2026 GMT
Subject: CN=31c794b1-c4d8-412f-a300-d7b760593669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:03:f6:ef:66:bb:bf:c1:59:0a:5c:76:fe:
a4:a4:98:1a:6c:91:4f:da:b2:e1:70:05:a4:7d:3f:
52:3d:28:8b:79:76:46:7c:f4:24:30:00:28:5b:07:
2d:1c:7a:0a:16:fc:e3:52:fc:59:99:29:a7:10:89:
f9:70:93:b9:cf:14:e6:eb:bc:f6:9e:71:da:c5:f2:
a0:73:77:01:f7:4e:ef:32:1e:7f:f3:0a:da:ef:38:
bc:3d:4d:f7:c8:11:df:48:ca:be:8a:1d:ed:e1:dc:
3e:5b:22:d7:61:08:b6:0f:8c:15:68:a8:1e:e8:29:
5c:21:7f:95:50:a1:19:0e:d0:1d:2b:f2:47:d2:b8:
c6:d2:ce:72:c1:94:7d:86:b8:db:f8:6b:4c:f6:a5:
9e:88:4b:0d:b1:7e:00:2d:7e:d8:b2:93:df:b4:04:
67:df:d8:f3:f6:f8:14:5b:da:d3:34:1b:51:ce:30:
be:b3:f8:b6:d7:24:bc:8f:6a:37:df:c4:d9:b5:e2:
9e:2b:16:9e:44:5e:1d:09:b8:35:03:a3:bf:ab:b3:
35:51:b2:0a:b5:8d:6d:50:cb:e3:4d:26:e1:d3:06:
95:46:ce:20:d4:43:3e:3e:22:3a:f4:fb:c6:dd:c4:
30:01:f5:d1:6e:4a:1e:72:d1:a0:82:5b:76:aa:4f:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:4D:A8:55:D3:10:C0:75:EE:1A:D5:09:7C:12:E3:7E:C8:9F:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c450799-d9d5-41eb-ad25-2768dab6c120/02488d3f-8e4d-3908-8044-7566cd01e03d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c450799-d9d5-41eb-ad25-2768dab6c120/2c450799-d9d5-41eb-ad25-2768dab6c120.crl
X509v3 Authority Key Identifier:
keyid:F1:92:68:C1:5D:FA:D4:6D:72:9E:78:FA:3E:DC:BD:6D:15:8F:22:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c450799-d9d5-41eb-ad25-2768dab6c120.cer
sbgp-ipAddrBlock: critical
IPv4:
199.248.6.0/23
IPv6:
2602:811::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:a9:24:99:05:b4:06:bb:e3:6f:8f:25:5e:7b:62:85:ae:ad:
51:73:93:fd:f9:7e:3d:6d:fd:6f:8e:6a:f5:e6:e4:ba:76:e7:
b1:53:37:2e:1c:8d:aa:e0:dc:f0:6b:ef:e3:bb:a5:07:7e:4b:
84:f8:a8:b2:ed:f4:22:31:b5:bd:ed:15:33:bc:99:5c:06:08:
88:55:28:1e:a9:c3:05:ee:39:df:12:d9:d1:60:ce:f7:98:a9:
01:47:76:a7:5b:b4:81:2c:a9:a3:31:79:0b:2d:a8:cb:fb:47:
b6:18:f3:6e:22:b3:eb:24:c0:b0:cc:1f:9a:81:08:aa:a9:9f:
56:8a:aa:f9:f4:92:b9:a2:e4:e9:38:63:4f:62:84:14:18:08:
75:be:f0:30:f4:cb:17:2e:00:5f:ae:4e:51:98:f3:a2:cd:bf:
fe:3a:6a:99:d7:36:ef:e0:a7:c3:2c:bd:27:63:4e:be:ac:02:
af:fe:af:ed:f9:68:87:f1:89:83:1a:28:75:9a:53:df:1a:12:
0c:38:ff:9d:11:6f:2e:09:89:b3:1c:21:07:65:22:bf:ee:89:
c0:92:92:4d:0e:fd:40:66:25:a6:b9:e1:b8:80:d5:db:aa:b4:
db:8d:eb:d2:eb:07:fc:77:dd:a9:dd:7a:89:1a:07:23:4a:54:
1c:b2:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:56 2026 by rpki-client