
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/896bba77-8553-37ca-90e0-b8ef42e49c98.roa
File: 896bba77-8553-37ca-90e0-b8ef42e49c98.roa (raw, json)
Hash identifier: sa2C4oI6e+3OpKl0GUp8Z7dckj5PhYWwKhvvIaK1UJ0=
Subject key identifier: 9A:56:5E:78:06:EE:D4:11:EA:95:66:71:25:6B:5D:2E:4F:C9:87:6E
Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial: 010D0C9F4328584D2A74C767FBC6ED80B4327B00
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/896bba77-8553-37ca-90e0-b8ef42e49c98.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 19905
IP address blocks: 160.129.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:c7:67:fb:c6:ed:80:b4:32:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=f6f1d9b7-b0ea-4dcb-894d-6ebaa6d7e5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:33:ed:0b:61:d8:e4:67:7a:c3:7c:2a:21:
1f:0f:b8:cf:a2:85:e2:a0:71:65:9b:36:09:1c:d0:
7a:98:f0:80:8c:97:d0:de:d3:4f:f1:fa:0e:28:aa:
e4:40:ac:21:9f:b9:3d:36:9a:07:b2:1a:f6:76:e8:
c2:7c:0c:66:88:5d:3a:76:1b:7b:ae:5d:df:d2:c8:
91:c9:48:49:12:3a:aa:18:cd:55:48:8e:cd:56:2e:
4d:63:33:78:03:40:18:1e:86:cc:23:7f:e7:b6:20:
5a:5e:73:e6:f2:27:09:0c:f2:4d:04:7e:37:3b:df:
ca:6c:50:31:47:6b:ff:c5:46:69:7d:32:a8:d5:39:
d9:ac:99:0a:43:dc:e7:39:89:04:46:81:e3:d7:b5:
e0:20:80:e0:96:02:cb:12:17:0a:1e:73:5c:f1:61:
ca:a9:17:ce:44:42:0d:8d:1b:46:74:a6:e7:43:28:
9b:8f:03:4a:d3:8d:96:01:c8:a0:09:7b:27:2d:bc:
10:df:49:46:a8:0b:11:45:4a:5c:d9:78:35:ca:0a:
9c:1c:c8:5b:d4:c1:71:1d:bd:61:50:da:3a:30:6a:
cc:cb:6c:63:87:de:5f:a4:6a:c5:a9:97:89:15:02:
0a:09:16:88:32:a5:5d:e3:32:56:a9:a1:ea:0f:99:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:56:5E:78:06:EE:D4:11:EA:95:66:71:25:6B:5D:2E:4F:C9:87:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/896bba77-8553-37ca-90e0-b8ef42e49c98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
X509v3 Authority Key Identifier:
keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
sbgp-ipAddrBlock: critical
IPv4:
160.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:a0:0a:2e:5f:44:20:84:d4:fc:da:6c:69:25:1c:72:e7:55:
57:e6:6f:64:e6:b9:0b:af:42:98:ec:51:de:4b:72:29:fd:e8:
7a:ff:99:c1:8c:ec:32:cc:5d:9b:d7:c3:57:5a:b4:74:f8:9e:
29:ee:d0:76:18:15:4a:b4:87:fb:38:f1:74:f3:6d:81:3c:62:
d6:79:4a:f0:1f:68:6b:99:a3:d6:ee:a4:bd:2a:8f:cf:2b:d8:
01:4e:21:4f:fe:3e:41:3d:45:8b:3a:8a:91:60:8e:76:17:a4:
5f:9b:6c:93:73:d5:15:7d:df:cf:1e:df:a6:cf:29:18:b4:ae:
b0:73:71:67:b4:ee:ea:ac:db:c5:5d:5e:cd:96:86:9b:3a:d8:
26:63:2c:0e:27:73:c3:26:6b:5c:2a:75:b1:de:41:9b:1f:a6:
57:b8:d9:06:75:f6:bc:2a:c0:eb:31:a4:0c:71:9e:de:7c:d1:
5e:58:ef:75:04:94:e0:02:de:44:6b:ef:41:f6:c9:bb:95:c7:
95:b3:e4:89:27:90:55:f6:8f:58:1f:20:3b:d3:d1:8c:a0:57:
bb:97:54:7f:40:d6:69:a4:5a:84:2e:34:66:bd:16:15:ff:e2:
7a:63:70:9c:68:36:6d:34:7e:74:a9:b8:60:5e:f1:4a:e2:f8:
57:50:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:52:03 2026 by rpki-client