
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa
File: b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa (raw, json)
Hash identifier: Oca7mKjbtWLnbcgFAVlMICJjHCLwq7kRJBi5Ku+Imus=
Subject key identifier: F1:79:1E:43:27:60:AE:F0:D7:74:49:BD:8F:49:B0:15:D9:46:8C:BA
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D3704C26D31DA784A8DEB6C80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa
Signing time: Thu 19 Mar 2026 01:00:31 +0000
ROA not before: Thu 19 Mar 2026 01:00:31 +0000
ROA not after: Wed 17 Jun 2026 01:00:31 +0000
asID: 208972
IP address blocks: 149.86.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:37:04:c2:6d:31:da:78:4a:8d:eb:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Mar 19 01:00:31 2026 GMT
Not After : Jun 17 01:00:31 2026 GMT
Subject: CN=3ca08a16-0144-4031-8fee-34aacad21fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:40:26:62:27:52:bf:82:ef:7c:e9:7e:3c:ed:
1b:57:38:a9:f4:39:5c:61:d0:fd:8a:19:2b:34:64:
d0:af:03:a6:89:97:18:0d:21:3d:6d:50:59:58:f1:
cd:8d:f3:81:2a:87:b9:45:93:77:ca:8d:3e:5e:10:
87:60:66:7a:a4:37:ac:54:c4:18:6f:27:be:0f:3a:
de:8c:00:d1:6d:96:69:04:2f:24:7d:40:38:c4:ec:
2f:61:79:c5:14:fb:c1:d6:4f:ed:8e:f1:9c:ae:e7:
cc:6a:17:0c:10:d1:01:fb:35:3e:9e:94:03:d0:5d:
08:a0:4a:42:6f:a0:8a:b0:4d:70:3d:4d:06:5c:ac:
23:df:7e:3b:41:55:d3:4d:c9:ca:c1:9b:4f:79:bf:
1c:fd:28:65:82:41:69:5a:5f:db:8d:9b:e9:c0:65:
24:49:68:c4:2f:03:54:30:d7:b3:7a:0b:f8:2c:81:
fc:33:77:33:4d:84:a0:6f:72:81:75:6d:74:46:2a:
90:49:8b:68:45:57:52:78:60:b2:11:b4:73:8e:97:
54:7d:03:4f:6c:ca:97:1d:d3:a2:49:da:68:5a:ec:
b1:aa:0f:e9:88:11:49:45:99:d0:be:b3:8e:ca:eb:
81:e1:ae:78:db:72:d8:62:4e:cf:54:05:86:7b:65:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:1E:43:27:60:AE:F0:D7:74:49:BD:8F:49:B0:15:D9:46:8C:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1a0e12f-8b71-3058-b6a6-87e4aac658a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
149.86.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:c7:75:25:b5:e4:0d:97:87:9e:21:bb:47:0e:00:f8:50:e1:
26:94:e2:a0:58:9d:72:47:6e:e2:b8:92:93:d7:a1:15:ea:71:
81:20:95:74:5f:82:19:6d:6b:9d:eb:cf:cd:f4:18:45:7d:5a:
c3:25:f4:85:66:4b:86:12:5a:3f:c5:8f:3f:d5:38:81:70:51:
54:97:22:06:83:cc:45:d4:22:7a:47:f4:13:50:e0:cf:4a:d2:
ef:b1:f4:91:d8:81:82:8e:ee:71:ce:2b:47:96:01:fe:27:13:
3f:5b:27:70:85:f3:fc:3d:e0:01:da:f3:c5:4f:1f:7f:ac:49:
1b:e1:4f:41:d3:60:4c:65:75:a2:32:1b:88:fc:5c:f8:0f:76:
11:e6:21:23:48:ca:d1:fc:e0:01:08:ae:ab:d9:d5:38:65:1a:
a2:df:6f:ba:13:f3:f7:19:4f:b4:d9:55:d2:53:cb:bf:26:c6:
44:b7:e6:14:44:65:12:96:ac:f6:a8:60:50:60:88:4d:3b:63:
f0:45:a1:d5:39:03:4d:20:7b:d7:55:4c:ea:d7:31:54:b3:fe:
54:5f:0f:7d:14:44:02:8d:fe:78:cc:8c:35:33:68:b9:02:93:
7a:f2:53:4f:de:0f:db:f1:e8:19:2e:da:69:b7:66:1c:b7:ad:
32:2d:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:57 2026 by rpki-client