
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa
File: 0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa (raw, json)
Hash identifier: VUEpn3L9ODlKH4LyW1gJAJ5EcCFk25Rk1zCkO8V07cQ=
Subject key identifier: E0:09:10:29:FF:DE:33:50:E9:10:FF:03:E3:57:48:2D:81:93:51:C4
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F4328584CD40767C13B9EFF907C7D5880
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 2153
IP address blocks: 137.164.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:67:c1:3b:9e:ff:90:7c:7d:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=821a3ec4-8570-44f9-8604-e53192c56a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3b:51:74:74:ce:8b:27:24:f2:c5:42:e1:87:
94:6b:30:7b:ed:11:59:47:bf:aa:ba:d7:b6:f1:15:
6b:33:53:90:23:f7:7a:6c:91:e1:b2:6e:8b:cd:cc:
bf:72:a4:10:7a:cc:05:b9:4e:38:48:d5:5e:70:60:
7e:1e:cc:6c:e1:13:a1:5e:af:c1:95:ec:ae:ff:89:
7b:54:8f:e7:ed:61:92:93:9f:a0:6a:dd:f8:7a:30:
04:1c:99:02:00:89:7d:00:bf:5f:d0:aa:7a:f5:7e:
87:6c:7a:ea:f3:ab:ec:a8:ae:99:6c:1f:ec:01:46:
b1:fb:41:fc:46:92:a0:d0:91:3f:93:0d:d2:02:98:
36:bd:17:9a:af:10:6e:a5:84:f7:40:c0:76:13:42:
42:fe:44:93:d1:a0:28:9c:98:06:d4:d7:b2:ef:cf:
37:58:b3:9b:98:72:e2:67:c0:74:03:b9:c0:e2:e9:
c2:53:5c:2c:f2:89:e8:06:1e:f4:36:e8:a9:cf:33:
fe:ed:f8:5f:6e:df:f4:b3:8a:b9:f5:1a:72:52:6e:
9a:7d:89:46:d1:0f:d4:57:95:86:60:eb:86:ad:89:
3b:e8:70:d5:3e:74:4a:68:f1:b4:04:c9:05:71:73:
34:10:d2:63:ff:87:fd:29:29:d7:05:1b:0f:d1:85:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:09:10:29:FF:DE:33:50:E9:10:FF:03:E3:57:48:2D:81:93:51:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
137.164.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:0d:a9:14:a7:1f:bf:c6:81:3a:c7:c5:11:cc:f2:fa:9c:bc:
06:ed:fc:59:73:d9:fa:54:b1:40:e7:87:a7:3e:8e:83:cd:a7:
df:a9:c2:05:54:8f:6f:83:40:8a:08:c1:64:3f:65:88:0c:0b:
64:5d:6f:57:43:3c:e4:9e:ee:6c:bd:cf:bf:4c:72:a6:a5:e6:
8e:e3:03:8e:be:97:a2:4d:85:e4:85:55:c9:4c:37:f2:04:a3:
62:7a:01:b5:e3:11:4a:9a:b1:16:f0:51:f3:cd:0c:59:54:ce:
23:2e:88:9b:8e:5a:6e:be:4e:c7:82:0d:29:ee:17:0d:fd:20:
ee:1c:53:f2:f0:36:bd:75:e0:b1:eb:c8:7c:af:9f:77:f5:bd:
f3:48:85:c0:9c:e9:48:de:7b:30:45:7e:c7:fa:41:b4:19:9d:
9b:eb:2e:f3:ff:dd:a4:c2:43:4f:03:ba:35:f0:f3:24:30:a9:
0e:d6:5e:a0:df:4b:bf:39:c2:7f:1b:bb:d9:56:ee:54:31:ba:
c2:9c:26:aa:b8:f3:5f:5c:49:87:fe:1e:d1:a2:b9:0d:0c:1f:
7a:ac:14:7a:ca:76:e6:7c:a3:b9:db:98:0e:72:7d:a5:f6:7a:
a1:67:64:de:dc:09:35:fd:b2:f7:16:4c:50:1a:51:38:b1:d5:
f5:c0:4f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:09 2026 by rpki-client