
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/2d977415-5656-35f1-b74c-31a6dcf65e33.roa
File: 2d977415-5656-35f1-b74c-31a6dcf65e33.roa (raw, json)
Hash identifier: Z/FQLEOPQII2OWZe8imYzvy29/kuQNv+cm1qWxkmSwc=
Subject key identifier: E4:CB:FF:89:AC:F1:C4:2A:8E:86:FA:0C:13:E8:4F:A6:64:D8:E7:64
Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial: 010D0C9F4328584D44FA3F0D424BB9DBC0531E60
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/2d977415-5656-35f1-b74c-31a6dcf65e33.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 55178
IP address blocks: 192.230.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:3f:0d:42:4b:b9:db:c0:53:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=598c37b8-4c78-43f8-811e-5d5ca0cf7a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:fb:8a:41:a1:b3:22:f7:16:45:8e:99:b0:
12:82:f0:d1:0d:4b:88:e4:96:f7:64:f9:b0:52:bb:
54:26:75:c5:ca:ad:1e:c3:cd:04:c9:5d:cd:b3:2e:
32:3f:97:58:43:d1:c8:8f:54:1c:d6:38:81:06:48:
00:81:28:29:fd:58:ea:b5:d1:ed:e8:2a:08:c3:bf:
72:d5:64:29:0f:69:94:36:fa:f5:81:b0:e7:2a:24:
87:e2:b6:b5:56:74:fe:79:26:51:3d:da:6a:4c:51:
be:18:fa:50:67:e1:25:06:5c:36:f7:cd:87:01:7d:
9c:d9:37:c0:17:bf:c8:cf:6c:cc:d3:93:6a:e1:b3:
94:14:e2:be:bf:3e:4b:7e:74:6c:c0:ed:e7:03:2a:
8c:88:5a:19:36:c3:a2:b9:d7:8b:6a:a9:b0:d9:6c:
ad:2b:f4:33:91:43:09:33:32:b7:b2:25:d3:f4:2d:
cc:fc:e9:ad:58:05:4a:4d:bd:99:65:13:cd:c5:1d:
40:68:cf:a5:66:86:30:7d:aa:46:15:6e:d6:0c:d9:
e9:3a:2d:eb:df:f3:a6:bb:33:7c:10:f4:57:9e:9c:
15:99:31:a3:96:c3:13:20:f4:7c:fb:04:ff:38:d6:
c6:ce:8f:c2:7b:32:26:27:9a:06:e4:98:9a:cd:cf:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CB:FF:89:AC:F1:C4:2A:8E:86:FA:0C:13:E8:4F:A6:64:D8:E7:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/2d977415-5656-35f1-b74c-31a6dcf65e33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
X509v3 Authority Key Identifier:
keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.230.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:23:9a:10:b6:d3:4a:d8:e1:45:e6:b3:bb:30:63:ff:29:4d:
0e:3b:44:ce:91:91:81:41:cb:64:ce:06:7e:f8:1f:13:43:08:
fa:ad:76:a2:21:90:34:e3:cc:1d:58:2e:44:00:c5:44:34:2a:
d7:ba:d0:16:de:c9:0c:ef:55:88:65:0a:20:51:24:6f:ed:8d:
74:76:f9:39:d5:2d:bb:99:30:5e:12:e9:a0:2a:85:c2:0d:f7:
72:02:66:79:b0:b3:f1:f7:11:fe:c9:d8:45:24:c0:8a:ac:01:
96:cb:6b:1f:fb:3d:9a:71:63:78:f4:8b:c7:03:6c:9d:2c:95:
74:d1:1e:0f:a1:0e:d6:ec:39:f3:2f:50:b0:7e:ec:4f:38:94:
6a:27:b3:db:b9:7f:18:41:5f:ed:d5:42:35:4c:9e:a7:64:97:
95:b6:aa:ce:cf:ab:a3:6d:1f:9b:e6:d3:29:4e:1a:66:93:43:
17:a7:00:47:50:b3:97:04:02:d9:ff:f8:69:bf:67:dc:0d:a2:
52:01:8b:b1:76:c4:97:a8:42:11:22:1d:dd:68:20:34:a5:9a:
70:e0:be:34:16:b0:bc:ce:4d:26:53:c2:bf:f6:77:ee:fc:c5:
e8:ed:8a:21:98:cd:79:f3:3d:52:ee:74:56:60:88:8a:1e:84:
38:9e:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:57:55 2026 by rpki-client