
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/161efcb8-0163-3d94-b4e6-a6d543f59a23.roa
File: 161efcb8-0163-3d94-b4e6-a6d543f59a23.roa (raw, json)
Hash identifier: nSLz+RbgtILde4cSfmeTyUyRqHMPMVLRgqvACiku0lI=
Subject key identifier: 71:EE:17:44:66:2D:1C:C3:5C:5E:9E:CB:17:1A:89:FD:D7:80:05:84
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584D59EA48C331C1160E19DADB00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/161efcb8-0163-3d94-b4e6-a6d543f59a23.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 7105
IP address blocks: 208.144.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:48:c3:31:c1:16:0e:19:da:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=a1fafb2d-5521-4b97-8c9d-f57c14051d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:56:2c:2a:3b:21:be:5d:86:45:8e:b6:4b:
67:c5:ff:68:c8:f2:f3:16:c0:3f:75:5c:f8:fa:c9:
d3:79:ff:3f:2c:ae:fc:3f:00:49:7e:42:7e:9b:ca:
e0:f7:7d:e1:1f:ce:db:87:68:b9:4d:4e:62:31:1d:
21:ee:27:31:bc:64:80:f9:84:ef:08:f1:60:f2:31:
0b:67:fd:b1:a0:17:c5:74:80:de:2c:2d:36:fa:03:
ef:f1:d5:b3:5e:00:eb:62:d5:b0:f3:ef:4c:97:14:
43:ba:59:ca:71:a9:4a:08:21:9c:bd:6c:05:b5:f3:
03:6b:ae:3a:09:a3:2f:92:d9:cf:7b:91:42:95:2f:
31:6f:76:2f:20:6b:8b:f1:1f:aa:f1:3a:19:22:78:
05:9b:62:b9:a0:b3:49:4e:d0:5a:9c:3f:78:71:de:
b6:97:29:18:ad:a4:b2:dc:65:88:14:e2:0f:91:f6:
b6:9e:d8:f8:77:bf:dd:65:23:6e:bb:06:11:00:6e:
ce:d7:48:02:62:9d:b5:99:c5:db:6c:dd:d5:3e:be:
e4:03:e5:9d:37:bb:bb:c3:e3:54:e2:17:41:b5:11:
08:be:12:c9:55:a6:13:2e:ee:b3:06:20:95:7b:47:
0e:78:28:62:e2:b6:21:4f:58:9a:11:ad:cb:bd:7c:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EE:17:44:66:2D:1C:C3:5C:5E:9E:CB:17:1A:89:FD:D7:80:05:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/161efcb8-0163-3d94-b4e6-a6d543f59a23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
208.144.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:ee:e3:fb:f2:73:10:a5:d4:69:57:fb:8f:d1:b7:78:71:8c:
90:11:03:5c:a7:ea:94:8d:ca:59:0f:1c:ff:a7:10:29:70:eb:
bb:fa:cf:25:cb:ed:c3:19:64:7b:d3:a7:10:fe:c4:ac:21:9e:
6e:82:25:d1:41:1c:7f:63:5f:95:3d:04:4d:4c:51:08:42:4b:
5c:0f:37:c2:d6:1c:a0:65:46:9e:70:16:cb:83:74:d7:d8:a3:
a4:2b:a7:5f:6b:56:49:b3:58:ea:85:54:5b:e4:1e:1d:47:fb:
16:7f:16:f2:e7:c4:54:ba:5c:18:7c:2a:b4:25:f7:cf:2e:1f:
b1:f0:2d:7b:3e:f6:91:ea:09:02:54:00:1c:ac:2a:b0:5c:ed:
04:8c:9c:5f:e8:67:0d:a8:b7:23:05:2a:c9:a8:1a:74:f5:bd:
35:81:dc:5f:5c:9f:14:64:b3:51:14:85:d6:7a:61:da:33:51:
4b:3e:c6:8f:6c:d0:aa:60:73:0d:ab:b0:23:46:d4:ee:03:3b:
9a:53:57:65:14:f6:f7:8e:cc:81:b4:fa:e1:1d:0b:a2:65:0e:
f2:f3:85:b4:52:11:4f:4e:46:f9:ba:52:5b:96:dd:5f:48:d8:
fe:55:c4:0f:0d:bf:62:7e:89:be:f7:23:99:43:b8:ce:aa:f5:
3b:fc:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:13 2026 by rpki-client