
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa
File: f8faf337-6f56-36aa-80e4-1bee07bbb914.roa (raw, json)
Hash identifier: 5sj27dyKa4xw1PaMPSTCIKLwdATJhOwOigNISHO5l9k=
Subject key identifier: 41:08:52:C8:1B:CF:E6:8C:2E:2F:4B:AF:6D:E1:1E:2A:97:32:2F:0B
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F4328584D143D4BA4B24D6DD4A37D9880
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 19886
IP address blocks: 171.162.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:4b:a4:b2:4d:6d:d4:a3:7d:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=ad61358b-eb5f-4348-9369-9209e1ec80f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:46:9b:4f:58:e7:a4:94:87:48:5d:e6:56:
23:41:c6:fc:36:4e:5e:be:8b:ea:8d:01:0a:35:fa:
66:a7:9c:6b:20:02:77:b2:e1:15:cc:a0:50:55:2a:
a6:ad:9d:83:08:37:eb:7e:7f:1a:e6:74:21:2a:75:
20:6e:6d:7a:93:0f:f7:e6:86:d3:2c:d4:53:42:7a:
05:6d:38:c5:93:36:b7:bf:26:2d:89:47:91:00:ba:
a4:e8:ed:da:d1:02:17:cc:f1:75:b3:da:06:ca:f6:
eb:01:9e:1c:b0:ed:38:01:cd:59:f6:ff:cc:ef:79:
f1:68:c3:f4:8c:f7:e8:4c:5e:09:6f:71:04:f5:13:
eb:6b:71:e1:08:77:b4:97:20:08:25:95:86:6d:d3:
62:35:bd:4f:d5:d6:f7:be:a6:f3:ec:ec:09:1b:4e:
06:1d:dd:ad:27:49:57:c3:f4:55:31:ba:1d:d1:99:
c0:6d:79:8f:09:de:6e:6e:db:bf:5a:32:d9:90:5c:
00:f6:4d:42:3d:4b:88:bd:1b:7a:57:07:d0:fb:98:
3b:3a:0a:38:8a:0d:aa:fe:8e:01:49:9a:07:31:68:
9d:ec:b8:79:6c:fa:e2:77:5b:5f:e5:30:b8:0d:87:
d3:ea:45:9c:c3:31:3f:9d:d5:ec:4b:dd:26:1b:15:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:08:52:C8:1B:CF:E6:8C:2E:2F:4B:AF:6D:E1:1E:2A:97:32:2F:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.162.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:2f:89:3e:d2:12:c8:ac:24:00:fa:e8:8a:76:ed:84:ed:c5:
84:24:e1:fa:88:af:91:78:a7:78:26:89:a0:08:c5:fe:5a:37:
80:cb:d2:6e:8a:a0:c4:8f:4d:08:ae:8a:8e:25:f3:48:7a:bf:
8e:72:e6:c2:cb:51:3d:62:54:86:82:84:fd:52:b7:bb:e1:31:
77:df:d5:0c:88:46:20:7d:df:cf:af:5f:38:c8:32:7c:92:a8:
70:6a:eb:7f:7b:03:e6:53:ea:c2:5d:0e:40:37:80:48:23:8d:
f8:3a:ba:1a:0c:38:b5:9c:39:01:43:62:82:e7:41:ea:57:fb:
93:84:79:73:11:66:19:b5:d5:d4:24:54:13:ea:d5:5c:44:ba:
c6:ce:65:a0:72:49:dc:c6:90:cc:ab:be:19:c9:40:44:59:d8:
da:05:c4:9b:84:6e:1e:f4:be:b1:98:4c:c4:cf:fe:10:bb:44:
16:cd:90:e3:8e:e5:c1:11:7e:c4:9e:d2:c6:74:07:d9:fd:3f:
40:40:87:ef:66:4c:53:0b:27:45:29:cc:9a:e0:c2:38:82:24:
6e:48:b7:2c:85:e1:58:96:68:b7:b9:29:18:0e:15:d6:ac:93:
1f:53:f7:c3:96:fa:3d:9e:f1:8f:aa:0b:31:05:70:24:5f:2f:
7d:07:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:12 2026 by rpki-client