
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/48ac2047-8450-311f-aaf8-82ed4b53fac5.roa
File: 48ac2047-8450-311f-aaf8-82ed4b53fac5.roa (raw, json)
Hash identifier: o77dydx7zaOzafw+J0O7XaXkX0nbfb3BorqDm+5Yz4Y=
Subject key identifier: BD:3A:08:29:BB:4B:1B:12:32:A4:CE:BE:B2:5F:D8:11:27:6E:6C:9A
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584D0EA7D8FA44C8054182351F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/48ac2047-8450-311f-aaf8-82ed4b53fac5.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 18779
IP address blocks: 166.88.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:d8:fa:44:c8:05:41:82:35:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=c3446bcd-021e-4158-b09e-fe40df688bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:98:ae:74:b9:15:ae:b1:ba:52:1d:c6:e1:
b7:df:5d:17:5f:2b:f0:40:2c:f5:15:a3:63:6b:8a:
09:36:b1:68:d6:e6:1e:d9:7b:cb:49:85:f3:70:66:
0a:fc:aa:be:ab:3e:6c:1f:a6:78:3f:79:07:3b:e7:
ff:13:ef:11:58:f1:ca:ab:a6:bd:67:1e:c7:29:c5:
42:6a:69:ee:3c:37:dd:c1:d9:86:7b:8b:0c:02:b0:
59:06:e7:10:3a:fb:37:ce:25:7f:cc:9d:f1:81:e7:
11:be:da:e5:fc:a9:0d:ee:ed:b6:7a:e6:24:e3:de:
ad:e5:44:c5:ca:b4:8d:db:ea:ff:93:3c:b5:df:96:
20:86:1e:c2:c9:fa:ce:3e:23:c2:c3:f3:eb:c0:3d:
f0:e4:44:18:47:b9:e8:ce:20:82:fd:82:aa:7f:db:
9e:0c:b5:59:16:ac:b3:71:d0:ae:3c:38:4a:2f:dd:
35:39:20:c9:9f:84:10:9b:33:83:1f:e9:9a:20:50:
b6:26:42:43:9d:f1:40:af:7d:69:8e:cd:6f:e2:7b:
ae:d5:26:fe:f5:aa:a4:95:c8:08:2c:f4:80:c5:f2:
5f:18:1e:96:3b:5b:53:11:ef:e4:c3:e5:69:33:b9:
72:c4:e2:98:21:06:b7:32:fc:2c:ff:da:08:5b:e6:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3A:08:29:BB:4B:1B:12:32:A4:CE:BE:B2:5F:D8:11:27:6E:6C:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/48ac2047-8450-311f-aaf8-82ed4b53fac5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:8a:71:c1:c2:18:15:8c:e8:af:f8:82:3d:21:40:af:60:92:
b7:ac:16:72:8e:de:22:bf:e7:31:c2:98:06:0b:80:09:48:af:
9c:74:72:9c:b9:09:56:e4:c3:57:dc:a0:e8:23:2f:b6:5e:97:
dd:f7:8c:59:30:1d:c3:3b:57:1c:34:ce:0f:1e:cb:eb:fe:bc:
1a:8e:23:c0:e0:15:1b:45:1c:11:56:8d:14:07:76:1f:50:21:
be:31:8d:d7:8e:f1:19:fb:e8:0b:09:a1:7b:26:35:1f:ee:17:
b8:28:73:d1:40:0e:62:79:ad:61:98:8e:97:37:8c:be:87:db:
59:38:40:ee:11:00:72:1f:c7:8c:2b:e8:cb:f8:5f:a1:3e:b4:
c8:ed:6d:a5:a2:f8:90:90:9d:20:04:c2:fc:06:70:f7:6b:5e:
78:66:4a:b9:c1:33:89:20:03:c7:ff:a4:08:ec:b9:2b:fc:a8:
c5:b0:bb:7e:1a:bb:8d:18:b0:31:7e:e7:42:87:f0:a2:7d:b8:
40:59:4b:f0:8a:32:e8:2c:e1:9d:53:09:90:5e:b0:91:25:3e:
ab:8e:95:d3:0a:bb:71:3c:3a:7b:cb:f7:e5:cb:49:53:5e:61:
74:8c:bc:76:8e:4a:c4:1e:32:93:04:e2:07:5a:a9:ce:72:9f:
d7:59:4f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:15:23 2026 by rpki-client