
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa
File: 2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa (raw, json)
Hash identifier: SuSCcc284AQYt5PnCCuZW+AiDwqwSoZZaEBf721okCo=
Subject key identifier: F5:E0:86:17:09:CC:01:68:97:0F:3E:E9:11:B6:D1:E2:B8:2C:88:12
Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Certificate serial: 010D0C9F4328584D60E4FEDAC9F3032FAD692D40
Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 399804
IP address blocks: 158.51.124.0/24 maxlen: 24
158.51.125.0/24 maxlen: 24
158.51.126.0/24 maxlen: 24
158.51.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e4:fe:da:c9:f3:03:2f:ad:69:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=17c05e19-3f09-4bc0-bfe0-d74258ce7f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:f0:ab:85:bf:5a:65:6e:25:a6:61:81:ed:
33:2f:8e:44:67:ab:cc:94:e0:3f:83:20:80:1c:a4:
ae:be:9d:cb:cd:5f:ed:11:e0:8a:5e:1b:dc:54:d8:
17:ea:0c:72:76:c9:5d:e4:b3:7d:4a:ae:f5:45:3c:
5a:bf:a1:88:ea:1f:85:c1:7c:cf:89:b3:b9:1e:0d:
fc:63:f6:a5:a2:5d:02:91:cb:fb:5b:f9:02:78:75:
53:e4:fc:9d:08:ea:8d:59:6d:53:6a:12:0c:ef:1b:
62:24:b6:7e:87:57:c9:b6:af:4c:ad:35:d7:48:8a:
02:56:aa:fc:c0:c7:42:6d:4d:df:fd:e0:f4:82:7d:
c4:f0:4b:eb:1f:61:c5:ea:4d:a8:9e:0f:71:e5:81:
c1:92:45:e1:af:57:04:86:eb:f6:6f:90:6a:39:56:
72:41:dd:83:23:e1:eb:a4:95:af:d7:55:58:77:8b:
38:ef:3c:9a:ca:5a:8e:56:12:e6:80:96:02:e3:be:
a9:bf:0b:80:da:fa:aa:8e:43:94:c1:b4:d7:38:35:
2c:56:55:77:63:1e:a8:0c:2b:80:a0:f0:3c:c9:c6:
3e:5a:2f:67:46:39:ef:d2:7a:ed:9f:ed:23:ca:e1:
8c:16:08:68:b1:d1:6e:6a:7e:24:86:bd:c8:5f:9c:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E0:86:17:09:CC:01:68:97:0F:3E:E9:11:B6:D1:E2:B8:2C:88:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
X509v3 Authority Key Identifier:
keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:40:7a:87:b1:ef:fa:65:de:4e:25:69:01:f2:d4:4d:6c:87:
36:0b:8e:41:63:91:aa:20:ea:60:08:7e:76:be:22:7d:8a:06:
04:3d:ac:81:c6:fc:d5:dd:c5:63:33:fc:a5:a2:75:da:af:7e:
58:ec:f5:6b:50:e0:0f:c5:d3:f5:e9:07:33:3f:8b:49:14:06:
b3:15:c3:97:fa:8c:46:03:03:e8:50:08:d9:b4:a3:ef:52:75:
97:e4:49:76:79:ee:ce:a6:8f:32:cd:5f:bb:81:88:54:3d:25:
cd:fc:c6:9e:f0:1b:50:6b:79:f5:7d:c6:82:58:78:0c:7f:50:
8b:1e:21:f9:c6:93:8a:26:e8:e5:82:17:e6:4b:27:66:6a:10:
04:b5:eb:65:72:db:2a:dd:95:da:e1:dd:7b:ef:91:4a:db:9b:
eb:c7:40:7a:50:60:78:45:fe:04:c2:b4:98:1e:38:9e:e5:1e:
24:20:e7:b2:ee:fa:b4:30:17:b0:f3:b8:72:ab:cd:e3:53:6f:
83:40:69:6e:5b:71:c1:da:dc:0e:a1:1c:18:8a:d1:d8:d2:31:
5a:ad:ce:0b:b9:bd:1e:95:82:4e:c5:c8:c5:c2:dc:2e:0b:30:
b5:7c:a0:ad:8e:8f:57:e3:52:16:2b:23:92:47:b3:cb:87:a1:
25:32:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:17:30 2026 by rpki-client