
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa
File: 3e223fd6-e6be-376b-be27-58334385989f.roa (raw, json)
Hash identifier: Y8Hx0wulRS32/66aw8n08NaAo4yntc0dYLNEpTgwW4c=
Subject key identifier: 8B:A0:FD:16:47:F2:A1:32:21:3F:D2:27:82:03:7B:71:1F:EB:FE:73
Certificate issuer: /CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6
Certificate serial: 010D0C9F4328584CB981CF658B803484F3B74200
Authority key identifier: CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa
Signing time: Mon 02 Feb 2026 02:00:32 +0000
ROA not before: Mon 02 Feb 2026 02:00:32 +0000
ROA not after: Sun 03 May 2026 01:00:32 +0000
asID: 14618
IP address blocks: 45.45.214.0/24 maxlen: 24
136.175.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b9:81:cf:65:8b:80:34:84:f3:b7:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6
Validity
Not Before: Feb 2 02:00:32 2026 GMT
Not After : May 3 01:00:32 2026 GMT
Subject: CN=6101f9e7-85c9-4eb0-a80e-bca5118cae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:dc:80:c7:58:e0:cc:ec:9c:4f:6f:9e:d2:
b9:08:f6:6d:a8:56:10:ef:66:e5:87:e0:f8:e3:36:
0b:0c:6f:86:06:d3:47:59:40:35:01:24:39:94:0f:
10:a8:0b:7d:69:03:fd:4f:8f:91:35:7a:8b:d0:98:
b1:5b:a0:db:99:9e:ab:83:42:22:6a:9d:2e:57:08:
e2:9c:29:f8:d8:1a:ec:8b:0a:78:bf:0b:af:8f:f0:
58:da:a2:79:1f:32:47:18:03:7a:0f:59:01:7a:14:
9e:7b:98:2c:d9:7a:b9:ec:90:e4:14:7e:bc:43:f0:
85:c0:6e:3c:1d:03:ea:2b:11:a9:1f:73:a1:75:14:
a3:70:b0:58:fd:8e:09:6a:0e:33:c5:18:a8:b5:ec:
7c:58:ca:87:0d:1d:78:33:44:ca:cb:9e:4f:74:b1:
f0:6d:f1:bc:63:d6:77:4c:7d:3d:2a:50:01:9c:d4:
53:13:79:00:4a:51:88:2e:e2:fd:e6:dd:45:55:d7:
54:11:4e:88:c0:ab:f2:4c:73:2c:1d:e4:f1:14:eb:
9a:91:c9:b8:e2:69:c9:b7:ad:50:97:56:16:76:ba:
fe:de:b0:1f:ab:44:fb:49:66:57:11:17:6f:b2:04:
bd:82:2f:a8:51:3e:26:e7:91:62:f7:92:3e:51:1f:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:FD:16:47:F2:A1:32:21:3F:D2:27:82:03:7B:71:1F:EB:FE:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl
X509v3 Authority Key Identifier:
keyid:CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.214.0/24
136.175.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:a4:67:23:01:80:b4:1e:62:fb:63:75:18:e2:1c:18:18:5f:
90:d6:10:27:cb:7b:ce:cd:1d:13:3a:9c:93:e4:6c:79:f3:e0:
a3:5a:03:5e:33:45:fe:9d:ab:19:e5:6f:5d:ef:9d:cd:02:7e:
17:8e:59:d4:13:16:cb:2d:83:11:84:09:35:fb:82:d1:13:8e:
b1:4e:b5:7d:15:60:78:77:9c:b5:1c:54:91:86:75:8b:88:35:
6c:78:c5:71:99:69:bc:3d:48:ed:9a:41:03:93:61:38:4d:12:
9a:d2:44:df:99:5b:74:b1:e4:f4:1c:54:7f:82:a3:17:0d:e5:
6a:8a:ee:fc:cf:89:15:c7:26:f2:fb:e0:95:8d:63:5c:f9:e7:
21:e7:15:d1:d8:8a:04:54:8b:1f:66:d3:5d:17:33:dd:09:10:
18:2a:fd:17:1f:28:66:38:fb:6f:63:c3:a9:9b:c9:db:ab:71:
7d:eb:f2:80:d4:12:bf:d3:fc:b3:e8:21:f1:2c:75:09:8b:36:
83:39:e9:6e:1a:81:f9:be:6c:c0:7d:e7:2f:c1:20:2d:6c:ed:
e1:9e:ce:f5:ce:b8:e1:ee:17:d3:bf:a9:35:75:db:1a:0e:44:
2c:c2:f3:6f:54:7e:e0:49:4a:ab:3f:30:7e:97:dc:1c:aa:46:
46:87:2a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:28 2026 by rpki-client