
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/143a98b0-fb79-348c-9c86-5f766ee8d2c1.roa
File: 143a98b0-fb79-348c-9c86-5f766ee8d2c1.roa (raw, json)
Hash identifier: lp65bsP7nmzKux9S0IN6e02o09oITxTvaelUULfAQO4=
Subject key identifier: F2:D5:2A:66:72:42:9F:99:E7:F3:8E:00:43:32:B7:5C:A3:B7:B9:23
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584D00B278B3C8E29F5A1F44AD38
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/143a98b0-fb79-348c-9c86-5f766ee8d2c1.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 16417
IP address blocks: 207.54.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:78:b3:c8:e2:9f:5a:1f:44:ad:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=107e8685-ee89-4508-8249-a81fbf8c53b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:0c:45:e2:83:52:41:24:91:d6:8b:ba:01:
8f:e4:1c:45:ac:1a:25:7e:f2:d9:ee:e1:10:a0:bf:
d9:43:22:58:b5:b3:2c:86:03:8c:4f:67:08:80:28:
41:82:db:df:98:9c:c8:ce:98:c0:e4:50:d9:22:56:
07:92:d1:98:d5:36:df:86:47:bd:b4:64:56:92:db:
9b:3d:dc:d4:37:09:94:23:41:58:03:03:1e:75:25:
77:92:35:29:52:9c:aa:3c:42:e4:1e:dc:56:0d:40:
26:61:dc:c8:87:36:d3:45:6a:23:dd:86:7d:4e:43:
38:80:ab:05:9f:90:3e:6d:56:06:b1:ab:e8:5b:04:
cc:0d:a7:55:5e:80:45:21:85:66:51:7c:e7:7c:cd:
14:20:1d:d0:24:4f:cf:16:d4:5d:13:d5:c7:4d:4d:
6d:9e:e7:d7:da:ac:f5:27:2e:1a:b1:70:39:0d:5f:
52:18:e0:2b:8f:d7:c7:60:cb:56:d2:56:e6:40:ad:
87:b7:5c:85:6a:16:ce:a2:35:72:a9:84:c5:81:15:
c7:e0:85:b3:fe:a9:57:32:b9:a9:42:e6:a3:04:bd:
40:93:ae:65:dc:ae:cc:98:34:d7:d6:e6:d5:5c:0d:
c6:46:79:5f:09:75:f8:cd:a1:da:7e:57:8f:be:55:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D5:2A:66:72:42:9F:99:E7:F3:8E:00:43:32:B7:5C:A3:B7:B9:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/143a98b0-fb79-348c-9c86-5f766ee8d2c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.54.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:fa:f4:17:bb:7c:a2:6a:45:f0:c4:f2:d9:d4:0f:be:ab:01:
0c:49:57:ba:3b:e7:2a:4e:9e:70:7a:b3:37:1f:3e:88:80:19:
e7:47:88:db:45:30:23:de:0f:2d:6a:22:f4:38:bc:11:ef:78:
ee:c9:f1:47:53:0d:9c:5e:d6:81:29:8b:de:b5:0f:da:79:92:
f2:94:80:24:2c:1e:55:4e:62:51:a4:d0:75:0f:0e:59:ae:75:
3c:55:0e:b3:fb:ec:5f:81:be:4a:fb:89:b5:7c:bb:07:31:65:
d4:b0:d5:b6:2d:84:a2:56:b1:d5:67:d2:26:14:29:4c:94:6b:
2a:6f:4b:42:cf:1c:d4:63:7f:d8:40:5e:04:c7:1a:cb:13:72:
6c:9c:87:5d:3d:f9:24:08:fc:40:45:f6:07:6b:6d:01:b8:3c:
61:d1:87:ee:56:25:74:ba:1e:d8:34:6d:29:7b:9b:dd:94:93:
dd:83:0b:ee:76:69:de:48:a4:a7:12:1a:c2:8f:53:36:0c:96:
56:fd:d8:57:b0:6b:c9:1a:c6:a0:5f:cd:ee:9b:be:96:24:6e:
47:c7:82:93:c7:c3:ca:ca:3a:19:1c:54:22:a7:96:e7:ea:e0:
ed:29:f2:9c:e5:b3:d0:32:5c:57:89:7d:b5:72:ce:c8:35:b9:
56:7e:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:43 2026 by rpki-client