
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d21f87b2-d00e-3b82-bd81-32801569306b.roa
File: d21f87b2-d00e-3b82-bd81-32801569306b.roa (raw, json)
Hash identifier: SK7rvNGntU5PQPoHJs3iTowGE5Nicpek7+wbbLYuS5k=
Subject key identifier: A7:30:E9:D9:CB:08:0B:84:89:68:9F:46:22:61:C2:90:35:02:AD:DA
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584D9A20200FDD87728259CC1F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d21f87b2-d00e-3b82-bd81-32801569306b.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 5650
IP address blocks: 166.88.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:20:0f:dd:87:72:82:59:cc:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=12cfcdfd-91f7-4f73-a664-abc44bc55a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:33:9c:fc:b9:0f:f5:2a:27:d0:95:ef:1a:
dc:03:bf:51:12:27:68:57:11:81:e6:26:01:81:8e:
e0:f5:53:a8:e2:8a:67:0f:d4:e6:9e:2b:12:7b:7a:
be:71:0f:e6:31:ec:11:f4:98:70:43:3c:eb:6a:09:
57:5c:88:ba:67:9d:36:f9:bd:54:22:cd:1a:2f:31:
22:f8:62:9b:c4:23:17:21:df:be:02:45:2f:1c:03:
6d:55:06:42:06:b0:0c:7f:56:09:64:0d:33:39:0e:
0d:01:85:21:16:9f:9d:87:59:4f:b3:7d:ad:ef:01:
df:48:ef:e1:2c:ef:90:aa:53:61:b9:56:c8:51:14:
5d:6d:e2:b2:8e:ef:9a:fe:cb:01:d5:4e:a1:66:8f:
2d:3e:75:20:f2:f0:50:d8:86:3a:2b:79:43:9e:f5:
49:67:10:dd:ef:c4:df:d9:9c:f5:5c:37:73:3a:c4:
a7:13:4d:f2:65:1a:d5:53:18:6a:87:5d:4f:9d:e4:
cd:37:7a:dc:98:8b:bd:b7:e9:7a:2d:1a:2a:e8:9b:
61:23:48:3f:58:2b:ff:af:8f:df:43:ca:e4:9c:bc:
1a:5f:66:81:1f:68:f5:57:67:27:2e:2d:10:03:72:
0f:0f:57:2c:f2:f8:48:52:47:60:00:ce:c5:50:75:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:30:E9:D9:CB:08:0B:84:89:68:9F:46:22:61:C2:90:35:02:AD:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d21f87b2-d00e-3b82-bd81-32801569306b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:29:2b:8d:35:bf:74:2b:35:16:7b:c5:45:5b:85:1b:41:6e:
b9:5e:87:25:68:00:fb:ff:ab:ab:a3:36:4d:af:f8:af:04:3e:
9e:0f:35:9a:17:a6:53:35:f5:b7:8a:ab:d1:4c:44:42:b3:c5:
d3:6e:57:9d:e8:32:09:05:3b:7d:67:e1:2d:8d:77:45:d3:fd:
20:ef:b4:b3:8b:22:d0:75:4d:5f:dc:64:1f:2f:73:6d:5a:27:
6f:c5:e0:2d:76:46:48:96:b7:25:06:22:5c:7f:c3:af:e3:f5:
14:f0:bd:f8:d8:6d:42:ff:09:66:14:75:09:71:9c:79:4f:98:
7b:5e:ba:1a:f2:c7:5f:bb:1a:39:d2:1b:1b:fc:f6:c5:e6:0e:
31:20:4d:2f:93:26:ca:4d:47:28:93:84:da:34:83:1c:85:1c:
0a:34:17:a3:1e:44:e3:c0:dc:3b:1b:49:54:08:33:d4:c0:fc:
80:41:4a:3e:da:c9:50:cf:b0:c9:52:15:06:6f:af:36:10:17:
93:6a:3c:09:68:6e:3e:ee:dc:c2:04:5d:df:22:84:fb:80:3f:
fd:a1:1b:5a:43:c9:83:6b:d0:c2:85:69:8a:8b:0d:86:70:2d:
b0:0b:bf:94:c4:ad:e8:0e:0e:7a:9c:db:33:e2:fb:92:de:ac:
42:05:ca:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:24:57 2026 by rpki-client