
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/88b913d8-a0fd-3f43-8246-a3bff0523a3f.roa
File: 88b913d8-a0fd-3f43-8246-a3bff0523a3f.roa (raw, json)
Hash identifier: +K4yP/3p4Zl4Q6IC9PbPLEUNZyf2fcyuYfNTNaFfOI0=
Subject key identifier: A5:A6:DE:18:F9:BB:9B:A3:D9:0E:E1:57:64:5E:51:B1:86:7F:21:89
Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial: 010D0C9F4328584D300A42AD8B813531498DCE00
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/88b913d8-a0fd-3f43-8246-a3bff0523a3f.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 394089
IP address blocks: 167.176.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:42:ad:8b:81:35:31:49:8d:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=81848b63-b2c7-4675-a637-1fba8efb5623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:f7:fa:dd:71:49:4c:01:f7:e2:23:4f:6f:
31:1a:7a:56:fd:d1:00:0f:76:29:4a:70:5d:ba:10:
0a:19:36:eb:c7:62:b3:6a:52:a3:0b:16:da:bd:89:
63:ea:46:a3:9b:27:b2:33:b6:20:5f:85:88:f6:a0:
e8:d3:bb:d2:e1:fc:e1:0d:86:24:c2:f4:40:16:8c:
52:dd:e1:8d:54:ab:b1:28:34:93:49:7f:07:d8:46:
b2:c1:2c:33:85:60:e9:26:c8:df:8b:53:b6:a2:b5:
7c:9f:b9:3b:39:28:19:87:be:d6:24:db:45:83:6d:
38:b7:ae:9a:30:71:1a:ae:18:68:48:e8:96:3e:4e:
6d:c3:78:c2:94:5d:35:5c:b9:3c:34:3c:f5:ec:3a:
38:1c:f1:41:95:41:62:75:47:60:77:4f:2a:4a:b0:
f0:20:c8:65:cd:cc:59:a3:64:50:75:6b:66:3a:8e:
ef:68:ef:33:06:d3:13:d4:db:fd:fe:81:fa:c2:0c:
67:83:8e:a5:13:ab:42:31:32:05:2b:7d:12:a8:18:
13:9e:06:15:a5:ca:45:74:3d:52:f3:cf:39:8d:e3:
f9:ce:c8:6e:36:40:d3:7e:0e:83:cf:3d:93:73:49:
e2:ee:97:ae:79:46:33:27:0c:af:80:74:0e:0b:c4:
f9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:DE:18:F9:BB:9B:A3:D9:0E:E1:57:64:5E:51:B1:86:7F:21:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/88b913d8-a0fd-3f43-8246-a3bff0523a3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
X509v3 Authority Key Identifier:
keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.176.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:5e:58:5c:c9:c5:63:01:87:07:cb:d4:ff:54:6f:36:9e:5d:
35:ba:1b:60:3e:04:c9:68:0c:76:97:03:c5:54:26:58:59:e0:
cc:9a:2a:34:fd:c8:33:55:c7:42:4d:9e:5e:d3:20:45:a8:28:
de:20:0d:43:ba:81:2a:cb:99:c0:25:c1:83:5c:f7:1c:bd:52:
96:2f:bc:11:12:ee:91:85:e6:71:52:19:84:1b:cc:1e:1f:c3:
24:3b:56:9a:1e:8d:e8:db:0d:ac:a2:b9:74:7b:b5:80:dd:a9:
d2:ad:d2:ca:80:db:9b:a6:f9:05:6f:69:98:b7:a5:8d:ef:09:
61:cb:85:91:1b:9f:65:68:c0:9a:2d:76:03:ed:21:1d:6d:69:
d1:cd:eb:75:9c:11:19:50:2f:15:24:40:5a:22:0e:d1:1d:98:
60:f9:e1:07:97:34:6d:5c:55:cf:f9:95:88:cf:12:f6:78:68:
4d:c8:ea:f6:c5:41:4c:1e:96:58:56:73:22:d5:c3:8e:a0:bb:
95:7e:ef:8f:e2:97:ad:cd:74:d7:fe:4b:4a:2a:d4:b2:5c:7f:
47:94:8f:41:e8:b5:e6:2c:e6:27:d2:f6:74:68:2d:92:ca:ae:
b2:ce:01:db:4d:c4:a5:da:57:77:3c:67:31:f0:dd:54:7b:c5:
91:3b:14:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkKti4E1MUmNzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm
ODhhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
ODE4NDhiNjMtYjJjNy00Njc1LWE2MzctMWZiYThlZmI1NjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlP3+t1xSUwB9+IjT28xGnpW/dEAD3YpSnBd
uhAKGTbrx2KzalKjCxbavYlj6kajmyeyM7YgX4WI9qDo07vS4fzhDYYkwvRAFoxS
3eGNVKuxKDSTSX8H2EaywSwzhWDpJsjfi1O2orV8n7k7OSgZh77WJNtFg204t66a
MHEarhhoSOiWPk5tw3jClF01XLk8NDz17Do4HPFBlUFidUdgd08qSrDwIMhlzcxZ
o2RQdWtmOo7vaO8zBtMT1Nv9/oH6wgxng46lE6tCMTIFK30SqBgTngYVpcpFdD1S
8885jeP5zshuNkDTfg6Dzz2Tc0ni7peueUYzJwyvgHQOC8T5jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKWm3hj5u5uj2Q7hV2ReUbGGfyGJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj
YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvODhiOTEzZDgtYTBmZC0z
ZjQzLTgyNDYtYTNiZmYwNTIzYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj
YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw
Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw
Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ByMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdeWFzJxWMBhwfL1P9UbzaeXTW6G2A+BMloDHaXA8VUJlhZ4MyaKjT9
yDNVx0JNnl7TIEWoKN4gDUO6gSrLmcAlwYNc9xy9UpYvvBES7pGF5nFSGYQbzB4f
wyQ7VpoejejbDayiuXR7tYDdqdKt0sqA25um+QVvaZi3pY3vCWHLhZEbn2VowJot
dgPtIR1tadHN63WcERlQLxUkQFoiDtEdmGD54QeXNG1cVc/5lYjPEvZ4aE3I6vbF
QUwellhWcyLVw46gu5V+74/il63NdNf+S0oq1LJcf0eUj0HoteYs5ifS9nRoLZLK
rrLOAdtNxKXaV3c8ZzHw3VR7xZE7FFQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:46:17 2026 by rpki-client