
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3e8a26d8-342d-3d80-88ac-45f70799741f.roa
File: 3e8a26d8-342d-3d80-88ac-45f70799741f.roa (raw, json)
Hash identifier: dzxArOqRgNIhtkfHKa5Vxjkzf1J34ZQ9R9R4fwHiL6E=
Subject key identifier: 20:23:EE:10:FB:6E:F4:28:84:19:21:17:93:FE:80:33:6D:57:51:DD
Certificate issuer: /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial: 010D0C9F4328584D0D427CF2F37BCAC4C8C58080
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3e8a26d8-342d-3d80-88ac-45f70799741f.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 20057
IP address blocks: 166.138.160.0/19 maxlen: 19
166.138.168.0/23 maxlen: 23
166.138.170.0/24 maxlen: 24
166.138.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:7c:f2:f3:7b:ca:c4:c8:c5:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=fcb30bab-4382-452b-84a8-b444e88092df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:a2:68:a5:5b:f7:82:92:2d:b0:b2:d5:d4:
aa:ad:47:c9:4e:28:68:03:c9:4f:c9:33:3f:7d:96:
bf:a3:59:af:1e:4a:f0:bf:53:d4:64:c1:30:8c:97:
ba:0c:1b:91:3f:28:05:82:01:96:07:5d:d5:dd:11:
5e:03:24:92:99:ee:9f:9b:0d:a3:5d:92:a6:c1:ce:
27:d4:64:b0:7a:e9:0e:bc:55:37:f3:30:10:79:53:
ee:4d:0a:28:75:2a:4b:72:74:38:47:6b:af:49:e3:
f1:aa:4f:17:d5:16:c4:89:d0:87:d9:7c:55:59:eb:
38:33:3b:ae:54:c1:14:0a:1b:a5:bc:e4:b0:a7:06:
33:9d:86:47:45:1a:84:c9:c6:11:0c:b9:ba:36:5c:
48:f2:1c:ca:9b:c5:d4:ef:46:4f:c3:9f:2e:ed:da:
f1:3c:3b:83:67:38:72:90:33:af:b7:cb:8a:32:f5:
22:d6:94:56:a0:29:55:8d:88:c0:4e:62:c3:14:c9:
18:89:73:33:58:45:da:08:6a:e6:4f:0e:ac:1b:7e:
bb:bf:c9:0d:c2:bf:bc:4f:16:9a:b6:14:81:aa:36:
4f:70:d6:82:60:19:05:d2:3a:0f:9d:1e:dd:60:b1:
89:c3:17:7e:ee:86:e2:96:69:5e:6a:72:fe:55:e0:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:EE:10:FB:6E:F4:28:84:19:21:17:93:FE:80:33:6D:57:51:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3e8a26d8-342d-3d80-88ac-45f70799741f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
X509v3 Authority Key Identifier:
keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
sbgp-ipAddrBlock: critical
IPv4:
166.138.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b5:e8:e1:db:90:a4:60:93:05:a8:88:12:37:ac:f2:ca:e4:
be:24:21:86:4b:51:61:71:19:e1:37:fe:02:0e:a8:cb:73:99:
2f:3a:85:6f:09:42:f6:03:7a:c8:91:ad:54:c6:fe:61:fb:76:
97:43:d5:37:84:af:ca:a0:1b:4f:d6:71:e5:bc:ab:45:54:fc:
38:99:4a:cb:9d:00:71:ee:1d:ba:8a:4a:bb:f8:38:69:78:fc:
a0:57:1b:d2:48:56:ab:a7:3c:bd:56:29:ca:93:63:43:a2:10:
b8:5a:20:27:06:a9:bc:00:c4:fb:e7:c7:75:82:0e:7b:ef:e5:
65:f4:20:00:92:54:21:b6:bb:11:66:85:a9:66:bf:2f:10:59:
f6:9f:45:55:b3:ed:a7:0a:68:0d:a0:d7:a6:93:ef:0b:17:bc:
b0:40:59:22:a2:09:e2:f4:1c:e6:41:f1:2c:d5:4b:99:57:6f:
cd:bf:d1:3a:15:11:77:99:b2:fc:43:3e:02:b8:6e:95:b2:16:
f4:b9:d4:87:1d:39:8f:61:f7:49:5a:53:ed:97:31:0a:78:ba:
b5:ae:91:d0:74:80:85:b2:da:02:7a:6d:30:72:96:99:83:ad:
89:02:4e:ee:62:3c:12:86:0c:a7:64:75:9e:c7:a9:58:d6:c2:
0f:15:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:30:23 2026 by rpki-client